Once I was...understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits (our website) onceiwas.uk
Personal data is defined by the General Data Protection Regulation 'GDPR' as 'any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier'
What data we collect
We may collect the following information from you:
Name and payment details
Contact information including email address
Demographic information such as postcode, preference and interests
How we use your data
We may require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
To respond to queries by phone/post/email or social media message
To process orders and payments
To improve our products and services, both online and in person
Internal record keeping
Storage and security of your data
In order to prevent unauthorised access or disclosure, we have appropriate electronic, administrative and physical procedures in place to safeguard and secure data we collect online.
Your personal data is processed and stored for no longer than is necessary in light of the reason(s) for which it was first collected. Any and all emails containing your personal data will be deleted after 48 months of account inactivity.
We will only store your personal data within the UK, meaning that it will be fully protected under the GDPR.
Information about our customers is important to our business. we share your personal data for very limited reasons and in limited circumstances, as follows:
Service providers. We engage certain trusted third parties to perform functions and provide services to our business, such as delivery companies. We will share your personal data with these third parties, but only to the extent necessary to perform these services
Compliance with laws. We may collect, use, retain, and share your personal data if we have good belief that it is reasonably necessary to; (a) respond to legal process or government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.
We will not sell, distribute or lease your personal data to third parties unless we have your permission or are required by law to do so.
Your rights and control of your data
Access You may request details of the personal information we hold about you under the Data Protection Act 1998. If you would like a copy of the information held on you please write to or email us. We will aim to respond to your request within 21 days and, in any case, not more than one month of receiving it. If your request is more complex then more time may be required up to a maximum of 3 months from the date of receiving your request. You will be kept fully informed of our progress.
Change, restrict, delete You also have the right to change, restrict our use of, or delete your personal data. Except for the exceptional circumstances (where we are required to store data for legal reasons, we will generally delete your personal data upon request. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.
Object You can object to (i) our processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal data unless we have compelling and legitimate grounds to continue using that data or if it is required for legal reasons.
Complain If you have a complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office. If you reside in the EU and wish to raise a concern about our use of your data (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
Links to other websites
How to contact us
If you have any queries regarding your personal data and data protection, including to make a request to access the data we have stored on you, please use the following details (for the attention of Danielle Caspall):
Postal address: 14 Kings Road, Sandy, Bedfordshire. SG19 1EJ