1. Contacting us
i. If you contact us through our website to provide feedback, we will ask you for your name and email address as well as which store you visited. The information you submit will be used to allow us to reply to your query by email, and the comments you provide will help us to improve our business. We will not use your comments for any other purpose. We will always try to respond by the end of the next working day. Correspondence may be retained to ensure that our standards are being met.
ii. Personal information that you submit (name and email) will not be retained on our databases, unless you choose to sign up as a groupie to receive news and offers, in which case we will retain your name and email expressly for this purpose. This database is maintained by our external email marketing provider, Pure 360, access to which is password protected. All feedback information is also stored with our website & app providers, Verb Brands; this information is stored for 12 months in an encrypted database and is then deleted. You can unsubscribe from our groupie newsletter at any time.
i. If you contact us through our website to apply for a job, we will ask you for your name, email address and contact telephone number along with a description of yourself and a copy of your CV if you wish to submit it. This is requested purely for recruitment purposes. If your application is processed further, it will be stored on our internal databases which are securely stored on Dropbox. At the end of the recruitment process we will delete your CV, but we will retain your name, phone and email for reference, should you apply again. All recruitment submitted information is also stored with our website & app providers, Verb Brands; this information is stored for 12 months in an encrypted database and is then deleted.
3. Online ordering including our mobile phone App and loyalty
i. Upon registering through our app or online ordering system your registration details are saved externally with our EPOS partner, PointOne. This data is encrypted at rest. If you choose to opt in to marketing communications upon registration then your information will also be stored with our marketing provider, Pure 360, as outlined in 1.ii.
i. We may store details of your visit to our site including, but not limited to, traffic data, location data, weblogs, operating system, browser usage, other communication data and any content that you access. We may also collect information about your computer, including where available, your IP address, operating system and browser type, for system administration. Only statistical information is recorded and will not be linked with any personal information.
ii. We follow strict security procedures in the storage and disclosure of information which you have given us, to prevent unauthorised access in accordance with the UK data protection legislation. Our data controller is Zest Food Ltd (trading as Tossed), 31-33 Baker Street, London, W1U 8EJ with registration number 5070252.
iii. Whilst we have no immediate plan to do so, by using the website you are authorising us to transfer the data we collect from you to, and store at a destination outside, the European Economic Area.
Zest Food Ltd t/a Tossed is the controllers of data for the purposes of the DPA 18 and GDPR. Zest uses Pure 360 and Dropbox to ensure that your data is secure. If you have any concerns as to how your data is processed, you can contact us through our website.