top of page

PRIVACY POLICY

We will not share your personal information for marketing or any other purposes without your consent unless where required by Scottish Law.

If you have subscribed to receive information or updates from Bross Bagels Limited, and thereby given your consent, you will be contacted with relevant information that you have expressed an interest in or that might be of interest to you. With Bross Bagels Limited you are always in control of your personal information and if at any time you wish us to stop contacting you, you are always able to revoke your subscription. You can do this by clicking on the link on the email you have received and following the instructions.

We will always respect your privacy and any personal communication between you and Bross Bagels Limited. We will always comply with any data protection legislation currently in force.

Your information will not be passed or sold to any third party, and will be held exclusively by Bross Bagels Limited and our agents.

The website Bross Bagels Limited and its associated sites and domains are the property of Bross Bagels Limited.

 

GDPR

Bross Bagels Limited does all it can to ensure it is compliant with the EU General Data Protection Regulation. This code has been issued by the Information Commissioner under section 51 of the Data Protection Act 1998.  We are committed to collecting and using personal information fairly and transparently. We are required to provide the following information:

  • Person Responsible

Larah Bross
Bross Bagels Limited
186 High Street
Portobello
Edinburgh
EH15 1EX

  • The purpose for which the information is processed

Anyone may be able to sign up and opt in to receive regular newsletter updates from Bross Bagels Limited on our website. The process of unsubscribing is simple and you can request that any data we hold be deleted at any time. Email marketing is the sole purpose and use of the data we hold.

  • Any further information which is necessary in the specific circumstances to enable the processing to be fair.

Bross Bagels Limited believes no further information is necessary because of the limited and specific purpose of holding and using the data. We do not observe, derive or infer any personal information about our website visitors’ behaviour in our business and marketing activities.

  • Your information will not be shared

The information you choose to give us and we hold on you will not be shared with any third party.

  • Transfer of data across territories

A small number of our subscribers are located in US territories. We use MailChimp and have been registered and approved to hold this information under the EU General Data Protection Regulation. MailChimp are certified to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, and Bross Bagels Limited has the necessary permission having completed the data processing agreement.

 

COMMENTS

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. We use a service to reduce spam. Find out more about Akismet and their privacy policy.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

 

LOGGING IN TO OUR SITE

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

 

EMBEDDED CONTENT FROM OTHER WEBSITES

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

 

HOW LONG WE RETAIN YOUR DATA

We keep contact form entries for six months, analytics records for 26 weeks, and customer purchase records indefinitely.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users who register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

 

WHAT RIGHTS YOU HAVE OVER YOUR DATA

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

 

COOKIES

We use our own cookie so we are not bombarding you with requests to become a supporter of Bross Bagels Limited.  We use anonymous cookies to prevent users from seeing the same popup repetitively in an attempt to make our users experience more pleasant while still delivering time sensitive messaging.

Cookie NameDefault Expiration TimeDescription

pum-162851 month from setUsed to distinguish users and sessions. The cookie is created when the javascript library executes and no existing  pum-16285 cookie exists. The cookie is updated every time data is sent to TBross Bagels Limited

 

We use Google Analytics to understand how many visitors come to our site. However, we anonymise your IP address before any information is passed to Google Analytics, so no personal information is collected. User data is retained by GA for 26 months before it is permanently deleted. No personal information is recorded by GA.

Data Used: Please refer to the appropriate Google Analytics documentation for the specific type of data it collects.

Google Adsense Cookies:

Google (AdSense, DoubleClick Ad Exchange “AdX”)https://policies.google.com/technologies/ads

E-COMMERCE

WHAT WE COLLECT AND STORE

While you visit our site, we’ll track:

  • Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed

  • Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping

  • Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of cart contents while you’re browsing our site.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

  • Send you information about your account and order

  • Respond to your requests, including refunds and complaints

  • Process payments and prevent fraud

  • Set up your account for our store

  • Comply with any legal obligations we have, such as calculating taxes

  • Improve our store offerings

  • Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 10 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses. We will also store comments or reviews, if you choose to leave them.

 

E-COMMERCE PERSONAL DATA RETENTION

  • Retain inactive accounts 6Months

  • Retain pending orders 1Month

  • Retain failed orders 1Month

  • Retain cancelled orders 1Month

  • Retain completed orders 10Years

WHO ON OUR TEAM HAS ACCESS

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

  • Order information like what was purchased, when it was purchased and where it should be sent, and

  • Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfil orders, process refunds and support you.

 

WHAT WE SHARE WITH OTHERS

We do not share your personal information or details with any third party. However if you buy from Bross Bagels Limited online, we process your payment through Stripe.

Information shared with the payment provider includes:

  • Name

  • Email

  • Address

  • Phone

  • City/State/Zip

  • Unique payment identifier

  • Payment provider identifier

For more information on the way our payment provider stores this information, please visit Stripe at: https://stripe.com/gb/privacy 

 

TRACK AND TRACE - COVID 19

Due to government legislation, we have to collect data from customers who are eating in at Bross Bagels. This data is collected through a third party website called VisitSafe.at. This website is compliant with government guidelines on data retention and the data is password protected and only used in case of being contacted by a Track and Trace agent. For more details please visit https://visitsafe.at/faq

This data is collected through a QR code and in entered by the customers themselves. Only senior management has access to this data and will share it only with the NHS Track and Trace team. 

Data can be shared with the NHS under the legal obligation to share from this government initiative. 

bottom of page