Privacy Statement – KP Snacks

Our websites

Information on data processing when visiting our website

This notice details how we use information you provide to us, including through the “Contact Us” function on www.kpsnacks.com and on www.tyrrellscrisps.co.uk which we link to on the following websites:

www.popchips.co.uk

www.everyonein.co.uk

www.mccoys.co.uk

www.hulahoops.com

www.kpnuts.com

www.butterkist.co.uk

www.pom-bear.co.uk

www.wholeearthfoods.com

www.tyrrellscrisps.co.uk

www.tyrrellscrisps.com

– Collectively referred to in this notice as our Websites.

Any other external websites that may be linked to our Websites will be subject to their own data protection statements/privacy policies which may be different to this notice. You should check carefully the content of those third party notices before you submit any personal information to them.

Unfortunately, the transmission of information through the internet is never completely secure. Although we do our best to protect your personal data at all times, we cannot guarantee the security of the data you send to us through our Websites. Any transmission made is therefore at your own risk. Once we have received your information we use strict procedures and state of the art security features to protect against unauthorised access.

Information we collect from you and how we use it

We hope the following helps you to understand what information we may collect, in what circumstances and how we use that information (including how long we retain it for):

Information you give to us (“Voluntary Information”)  This is information you give to us about you by:

1. Contacting us with an enquiry or to report a problem with our products or our Websites

• What is collected and how we use that information
  In order to process your enquiry and/or investigate a problem we may ask you to provide contact information (which may include some/all of the following: name, address, telephone number and email address). We may make up a file of the enquiry/problem which will contain any personal information you have given us.

  We will only use your personal information to investigate and respond to you with the outcome of your enquiry/our investigation.

  You do not have to provide this information to us; it is entirely voluntary. However, we may be limited in our ability to respond to you if contact information is not provided. We will only correspond with you in the way you have asked us to.

  It is in our legitimate interests to process this information in order to deal with your enquiry/investigate the problem you’ve raised.

  If your enquiry relates to an issue with one of our products we may request additional personal data from you in order to fully investigate. If medical information is required we will contact you separately about this using the contact information you have provided. Medical information is a special category of data and we will need your express consent to handle it.

• How long we will keep it for:
  Up to 3 years. Access to this information will be restricted on a “need to know” basis.

2. Entering a promotion on our Websites or through a text number, website or telephone number referenced on one of our products.

• What is collected and how we use that information
  If you decide to enter a promotion through any of our Websites/by phone, you may be asked to provide some basic contact information (e.g. name, email address and telephone number) so that we (or our agency acting on our behalf) may contact you if you are a winner in that promotion. As part of entering into the promotion you will be asked to agree to our terms and conditions. If you do not agree with the terms and conditions you should not enter the promotion. Our lawful basis for processing your data when entering a promotion is contract.

  Dependent on the type of promotion you may also be asked to provide other personal information as part of the entry criteria (e.g. a photograph of yourself with one of our products). You must not submit any photos that contain images of other people unless you have that person’s express consent. You will need to inform them of how that image will be used as set out in this notice and the terms and conditions of the promotion.

  In entering the promotion, you confirm that you meet the eligibility requirements of the promotion (including any age restrictions). We may require you to provide proof of your eligibility. We reserve our right to disqualify you if you are found to be in breach of the promotion terms and conditions.

• How long we will keep it for
  3 months from the end of the promotion period.

3. Entering a promotion we run through our pages on various social media platforms (e.g. Facebook, Twitter).

• What is collected and how we use that information
  If you decide to enter a promotion through our page(s) on a social media platform you will, in entering the promotion, provide your personal information in the form of your online profile and this notice will apply.

  A link to this notice is contained on all our corporate social media pages.

  Your act of entering the promotion will show your consent to us (including any agency we appoint to administer the promotion on our behalf) processing your online profile for the purpose of administering the promotion. Our lawful basis for processing you data for the promotion however will be contract.

  If you are selected as a winner we will contact you through your online profile via direct personal messaging. At this stage, we may ask you for additional personal information so that we can administer your prize (e.g. contact name, address and email address). You are free to choose whether or not to give us this information. Any information you provide will only be used for the purpose of administering your prize. If you do not provide this information we may be unable to distribute your prize. We will discuss this with you at the time.

  If the promotion involves the submission of a photograph containing your image, this is your personal information and will be processed in accordance with this notice. You must not submit any photos that contain images of other people unless you have that person’s express consent. You will need to inform them of how that image will be used as set out in this notice and the terms and conditions of the promotion.

  Before entering a promotion through a social media platform you should check the privacy notice of the platform to ensure you’re comfortable with how they may also use your personal information.

  In entering the promotion, you confirm that you meet the eligibility requirements of the promotion (including any age restrictions). We may require you to provide proof of your eligibility. We reserve our right to disqualify you if you are found to be in breach of the promotion terms and conditions.

• How long we will keep it for:
  3 months from the end of the promotion period.

4.  Corresponding with us (for example by email, phone or letter)

• What is collected and how we use that information
  When you contact us, any personal information you provide will be protected and kept confidential in the same way as we treat our own commercial information.

  We will monitor any emails we receive (plus attachments) for any viruses or malicious software. We will promptly delete any email which is illegal or presents harm to us.

• How long we will keep it for
  We will keep a record of this correspondence for audit purposes for a period of up to 3 years.

5.    Business contact information

• What is collected and how we use that information – we will keep:
  • A record of business contacts of our customers, suppliers, advisers and agents and their contact information in order to manage our commercial relationship with that third party and perform contractual obligations (i.e. it is necessary for us to perform a contract); and
  • A record of contacts from competent authorities and regulators linked to our industry, together with their contact information, in order to comply with a legal obligation.
  • We may send business contact information to third parties to nominate their business for an industry award or accreditation and/or to understand how we are performing. In this instance, we will only disclose personal information with the relevant person’s prior consent. This is in our legitimate interests and does not undermine your data rights.
• How long we will keep it for
  • Up to 2 years from when we are notified that the contact in question no longer has a relationship with us.

6.     Clicking on the ‘Our Vacancy’ pages on KPSnacks.com which are operated by Recruitee.com (please note that cookies will need to be placed on your computer for you to use these pages). 

• We will use your personal data for:
  • learning more about the behaviour of the visitors of our careers website to improve our recruitment process and this website;
  • improving and monitoring the performance of this website;
  • generating anonymized data that we share with our partners.
• All processing of personal data of visitors to ‘Our Vacancy’ pages is based on our legitimate interest to facilitate recruitment. We process the following personal data of these visitors:
  • Device and browser
  • IP-address
  • Requests and responses sent from and to your device
  • Source website (we use a cookie to track this)
  • Acceptance of Cookies (a cookie is used to store this)
  • Behaviour on our website

Your personal data is processed by Indeed on pages where we display a button to ‘Apply with Indeed’, even when you don’t use that functionality. Indeed may use cookies. The privacy policy of Indeed applies for processing of personal data by Indeed:
https://www.indeed.com/legal

Personal data of job applicants
If you apply for a job then we process your personal data to facilitate the entire job application procedure on the grounds of our legitimate interests for recruiting. After the procedure we will delete your personal data as soon as possible, unless we have informed you that we require it for other purposes. The following personal data can be processed for the job application procedure:

• Any personal data that you provide through our job application form including, but not limited to: full name, email address, phone number, picture, cover letter, résumé, LinkedIn profile, Indeed profile and which job you have applied for.
• Statuses, notes and planning related to your job application
• Email communications

Under European data protection law we are required to inform you that withholding personal data in your job application can give you a disadvantage in comparison to other candidates who are applying for the same role.

Your personal data has to be processed by LinkedIn and Indeed to allow for the ‘Apply with LinkedIn’ and ‘Apply with Indeed’ functionalities. LinkedIn and Indeed may use cookies. You can find their privacy policies on the following websites:
https://www.indeed.com/legal
https://www.linkedin.com/legal/privacy-policy

Information we receive from third parties (“Third Party Information”)

We work with third party service providers including but not limited to agencies to run our promotions for us. We will notify you when we receive information about you from these third parties and the purposes for which we intend to use that information.

• What is collected and how we use that information:

  Agencies running our promotions
  We engage selected third party agencies to run promotions on our behalf (each an Agency for this notice). In this case, the Agency is the Data Processor of the personal data you provide to enter the promotion. The Agency will only provide us with the name and contact information of promotion winners. Where a promotion is run through a social media platform (e.g. Facebook, Twitter, Snapchat or Instagram) you should check the privacy notice of the platform to ensure you’re comfortable with how they may use your personal information before entering the promotion.

  We carefully select the third parties we work with to ensure they handle your personal information in line with our standards and those required by law.

Use of information

In most cases the personal information you provide to us is entirely voluntary. You are not under a statutory or contractual obligation to provide it to us. The only exceptions to this are:

• Where you work for a company which has a contract with KP Snacks Limited and you are involved in the performance of that contract/named as the relationship manager for that company. This is a contractual requirement. If you fail to provide your personal information your company may not be able to fulfil its contractual obligations to us; and
• Where you apply for a job with KP and we have given you a conditional offer. Our offer may be conditional upon you providing evidence of your identity and/or your right to work in the UK. This is a legal requirement. If you fail to provide this personal information we may not be able to offer you employment.

Providing us with personal information of another person

If you need to provide us with personal information about another person you must obtain that individual’s express consent to pass us their information. You should share this notice with those individual as it may also apply to them.

We will not use your personal information to directly market our products and services to you unless you have consented to this.

If you send personal information to us indirectly through the third parties we work with (marketing agencies, recruitment agencies) these third parties may be in control of your personal information. You should check their privacy notices to ensure you’re comfortable with their marketing activities and the marketing you have consented to.

We appreciate that children may visit our Websites to learn more about our products. We take the protection of children’s privacy very seriously.

We do not collect personal information about children. All our promotions are only eligible for individuals aged over 18. Where we establish that personal information relating to an individual under the age of 18 has been collected despite our best efforts we will cease to process that data except (where necessary) to notify the relevant parent or guardian of the processing that has been conducted.

We would encourage all parents and guardians to instruct their children in the safe and responsible use of personal data when using the internet

We would encourage all parents and guardians to instruct their children in the safe and responsible use of personal data when using the internet.

Consumers of our products who contact us solely to report an issue with our products or our Websites: your personal information will only be shared with carefully selected IT providers whose systems we utilise for our core business processes and who provide us with IT support, and in very rare circumstances potentially with our insurers. Other than this, we do not share any personal information we receive from you with third parties.

In all other cases: we may share your personal information with:

• Carefully selected third parties who provide a service to us to support our core operations, such as: processing our mail, communicating with consumers on our behalf (including via social media), running promotions and promotions, providing IT systems and administrative services and the development and improvement of internal systems and processes;
• Competent authorities (statutory bodies, regulatory authorities, authorised bodies who have a role laid out by law);
• Other organisations where we are legally obligated to disclose your personal information (such as requests made in the prevention and detection of crime) or where disclosure is necessary to protect the property, rights and safety of us and our staff;
• Another company, if our business (or part) is purchased/taken over to ensure our products and services to you can be continually serviced or as part of discussions leading up to a sale/takeover;
• Another company from whom we are looking to purchase assets, where the personal information is relevant to us assessing if those assets will improve our offering to customers and/or our business processes;
• Other companies where we are trialling products and services which we consider may improve our offering to customers and/or our business processes; and
• Other third parties where you have given your express consent or where we reasonably believe a third party is acting on your behalf.

Whenever we share your personal information with third parties we will take all reasonable steps to ensure appropriate safeguards are in place to protect your personal information and your privacy rights.

The data that you provide to us as set out above may be transferred to, and stored at, a destination outside of the European Economic Area (EEA) by us and/or by the carefully selected third parties we work with.

We and third parties we work with may use cloud platforms to store your personal information.

A cloud is a network of remote servers hosted on the internet. We will, and our third parties will, only use cloud platforms which give adequate guarantees that your personal data is secure.

Where your data is held outside of the EEA, on a cloud or otherwise transferred, we will ensure this is only to a country which has been deemed adequate by a competent data protection regulator or where adequate protections have been put in place to safeguard the data (to the same standards as prescribed within the EEA). This includes contractual protections.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this notice.  All information you provide to us is also stored on our secure servers.

We recognise that the personal information we hold about you belongs to you and it is right that you have control over that personal information. We have detailed below a summary of your legal rights.

You can:

• Ask us to have access to, and for a copy of, the personal information we hold about you;
• Request that we amend or delete your personal information;
• Ask us to stop processing your personal data altogether or in a certain way;
• Change your mind about how you have agreed we can use your personal information. If you have given us consent to use your personal information in a specific way you can withdraw it. This means that we will stop processing your personal data in the way you have objected to from the date that your permission is withdrawn;
• Issue a complaint to the appropriate authority – see www.ico.org.uk for more information;
• Request that we transfer your personal information to another provider (this is known as data portability).

If you would like to exercise any of these rights, or discuss them in more detail, please contact us via data@kpsnacks.com.

We need to make you aware that even where you exercise a right detailed above, we may not be able to comply with that request if an exception in law applies. Where this is the case we will notify you and explain why we’re unable to meet your request.

We keep this notice under regular review. This notice was last updated on 1 October 2024.

Any changes we make to this notice will be posted on our Websites and, where appropriate, we will notify you by email.

If, in the future, we wish to use your personal information in a way not set out in this notice we will notify you and seek your permission to do so.