Privacy Policy

This privacy notice (“notice“) explains how we, the Maldon Salt Crystal Company (“we“, “us“, “our“) process your personal data if you use our website, service, content or feature or otherwise engage with us online or offline.

If you have any questions about your data protection rights or if you do not understand anything explained in this notice, please contact us by email at dataprotection@maldonsalt.co.uk.

WHO DOES THIS PRIVACY NOTICE APPLY TO?

This notice applies to:

users of our website, online content and features
consumers who engage
our customers
our partners and suppliers
job applicants
anyone else who interacts with us, if you call, email or visit us or otherwise engage with us online or offline.

This notice applies to you if you act in your personal capacity, for example, as a consumer, and if you act in your professional capacity, for example, as an employee or agent of our customer or supplier.

WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

“Personal data” means any information that identifies you or relates to you.

This may include your contact details, information about your engagement with us, and other information as set out in the “categories of personal data” in Section 14 below.

DATA ACCURACY:
We will trust that any personal data provided by you is accurate, complete and up to date. We ask that you keep us informed of any changes.
HOW IS YOUR PERSONAL DATA COLLECTED?

We may collect your personal data as follows:

From you, when you contact us, subscribe to our newsletter on our website, engage with us at a trade event, if you work for a customer who purchases products from us, during your engagement with us as our partner or supplier, when you visit our offices or otherwise deal with us.
From third parties, such as your employer who may provide your professional details, recruitment agencies, your referees, and other third parties.
From your online user interactions with our website, online content and features.
From the public domain, such as information on social media, the internet or other public records.

If you provide information about others, please ensure you have their consent to do so (where required by law) or let us know if you do not.

WHY DO WE PROCESS YOUR PERSONAL DATA?

In this section we explain why we process your personal data. We include general purposes and provide examples of the various processing activities. For more information about the specific categories of personal data processed, please see Section 14. If you have any questions, please get in touch. We keep our processes and data collection under review and will update this notice should any personal data no longer be necessary for the given purpose.

Purpose	Personal data	Lawful basis of processing
To assist with your enquiry.	general information contact information	Necessary for our legitimate interest in responding to enquiries and complying with best practice or, as the case may be, necessary for taking steps prior to entering into a contract or the performance of our contract with you.
To provide information, agree the terms of a sale with you as our customer’s representative, and comply with other terms of our contract.	general information contact information financial information public information	Necessary for our legitimate interests in performing our contractual obligations to our customers for whom you work and for promoting our activities and administering our business.
We may record our calls with you for compliance, transaction records, training, development, monitoring of standards and crime prevention purposes.	call recording data	Necessary for our legitimate interest in documenting enquiries and business transactions for compliance, governance and crime prevention purposes and compliance with our legal obligations.
To provide our online services including our website, content and features to you and the general public which may remember your preferences or include personalised content.	technical information usage information profile information	Necessary for our legitimate interest in providing our online services to our members and the public and complying with best practice, the performance of our contract with you as our user or client and compliance with our legal obligations. Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services.
To send you relevant marketing communications including our newsletter, by email	contact information general information	Consent or, as the case may be, soft opt-in and legitimate interest in promoting our organisation.
To manage our professional relationship with our customers and contacting you by phone, email and other means.	general information contact information usage information	Necessary for our legitimate interest in winning new business, understanding and maintaining our business relationships and administering our business.
To understand our audiences and consumer and customer profiles for product and service development, research, market intelligence, marketing, advertising, content personalisation, media performance and business administration.	general information contact information profile information usage information technical information	Necessary for our legitimate interest in understanding our typical consumer and customer profiles and demographics, for service development, research, market intelligence, marketing, advertising, content personalisation and business administration. Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services.
To assess your job application and for business administration purposes. We may use automated processes and decision-making to assess your application. For example, if you apply for a job, we will review your CV, publicly available information about you, information from your previous employers and professional references.	general information contact information profile information public information special categories of personal data your background information	Necessary for our legitimate interest in considering applications, responding to queries and, as the case may be, necessary for taking steps prior to entering into a contract. Special categories data may be processed as is necessary in the context of employment and social security laws.
To develop and improve our information, services, content and features and organisation including measurement of engagement and activity, analytics, development of our tools, services and algorithms and development of our internal processes.	anonymised usage, profile and technical information	Necessary for our legitimate interest in service and process development and keeping our offering relevant. Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services.
To ensure the proper administration of our organisations, including to: keep appropriate records;resolve complaints;enforce our terms; debt collection; andsimilar purposes.	all personal data as is necessary and proportionate	Necessary for compliance with our legal obligations, to establish, exercise or defend legal claims and necessary for our legitimate interest in the proper administration of our organisations and services and protecting our reputation.
To ensure information security of our information systems, premises, meetings and communications.	general information security information your background information	Necessary for our legitimate interest in ensuring the security of people, our organisations and assets and compliance with our contractual obligations, and as necessary for compliance with our legal obligations.
To ensure your health and safety at our premises or to make reasonable adjustments on account of your disability.	general information special categories of personal data	Necessary for our legitimate interest in ensuring health and safety and good accessibility at our premises in the substantial public interest and complying with our legal obligations.
To engage our third-party service providers and advisors who may process your personal data on our behalf or otherwise to facilitate the provision of our services and the fulfilment of essential service functions including cloud storage, telecommunications, information security, professional advice and other services.	all personal data as is necessary and proportionate	Necessary for our legitimate interest in providing our services and running our organisations.
To monitor interactions and operations for the prevention and detection of crime including fraud and share information with law enforcement authorities and other stakeholders.	all personal data as is necessary and proportionate	Necessary for our legitimate interest in protecting people, our organisations and assets and detecting and preventing crime, and compliance with our legal obligations.
To share data with another organisation in accordance with the law for the purposes of a joint venture, collaboration, merger or acquisition.	all information as is lawful, necessary and proportionate	Necessary for our legitimate interest in engaging in activities to promote our organisations and complying with our legal obligations.
Processing and sharing your personal data in connection with legal claims, law enforcement or regulatory requests.	all personal data as is necessary and proportionate	Necessary for compliance with our legal obligations, to establish, exercise or defend legal claims or for our legitimate interest in complying with best practice.

We may process your personal data for other purposes which are compatible with the existing ones. However, we will obtain your prior consent for any new purpose where required by law.

COOKIES AND SIMILAR TECHNOLOGIES

We utilise technologies that enable us to store information, or access information stored, on your device such as your computer or smartphone. Please see our Cookies Policy for further information.

WHO IS YOUR PERSONAL DATA DISCLOSED TO?

We may share your personal data with the following third parties:

Our service providers in the context of the services and advice they provide to us
Our customers, who may need information about your interactions with us as your employer
Recruitment agent, your former employer or other person proving a reference about you
Our professional advisers, including our legal advisers in the UK and our accountants
Tax, law enforcement and other authorities where required by law or best practice
The public if you interact with us on social media
Third parties where ordered by the court or necessary in establishing, exercising or defending legal claims
Another organisation in case of a merger, acquisition or collaboration
Other third parties where you have provided consent, or as otherwise disclosed at the time of collection.
HOW DO WE SECURE YOUR PERSONAL DATA?
- We have put in place appropriate organisational and technical measures designed to safeguard your personal data that we keep on premise and on our systems. Access to your personal data is restricted on a “need to know” basis. We seek to ensure our third-party service providers do the same. We appoint service providers only under an appropriate contract who provide sufficient guarantees about data security in accordance with applicable law.
- No system is completely secure and we cannot fully guarantee the security of your personal data. We will deal with any personal data breach in accordance with our incident response procedure and will notify you and the regulator where we are legally required to do so.
HOW LONG IS YOUR DATA KEPT?
- We will retain your personal data for as long as it is necessary for the purposes set out above. Generally, your personal data will be kept for 6 years, subject to exceptions where required by statute or our practice. If you are a job applicant, we will hold your information for a maximum of 12 months or as long as required by applicable law. We generally keep transaction records for a period of 7 years.
- After the retention period, your personal data will either be securely deleted or anonymised, and it may be used for analytical purposes.
WHERE WE STORE YOUR PERSONAL DATA
- Generally, your personal data will be held in the UK, Europe and in the U.S.We may also use or make available tools which require the transfer of your personal data outside the UK and Europe. We will only transfer your personal data where we are satisfied that your data protection rights are adequately protected by appropriate technical, organisational and contractual safeguards in accordance with data protection laws before any such transfer. These safeguards may include the standard contractual clauses.
- You may request further information on the measures used for the international transfers or access to your personal data.
YOUR CHOICES:
- If you would like us to stop sending you our newsletter or other marketing communications and to process your personal data for direct marketing purposes, please contact us via email at dataprotection@maldonsalt.co.uk.You can request to stop receiving our newsletter or other marketing communications at any time by clicking on the unsubscribe link at the bottom of each marketing message and we will add you to a suppression list or otherwise arrange that you no longer receive marketing communications.
- You may review, change, or update information we have collected about you by contacting us.
YOUR RIGHTS:

Depending on the data rights granted to you by the laws of your country, you may have the following rights in relation to your personal data:

Right to information about matters set out in this notice. You may also contact us for further details about our data retention policies, international data transfers and other matters that are unclear.
Right to know about personal data collected, used, disclosure or sold or right to make an access request to receive a copy of your personal data held by us.
Right to rectification of any inaccurate or incomplete personal data.
Right to withdraw consent previously provided.
Right to opt-out or object to our processing of personal data based on our legitimate interests.
Right to erasure of personal data that is no longer needed.
Restriction on the processing of personal data.
Right to human intervention in respect of any automated decision-making without human involvement that significantly affected you.
Right to data portability from one service provider to another, where applicable.
Right to lodge a complaint with the relevant authority such as the Information Commissioner’s Office if you are in the UK.

To exercise any of your rights please contact us. All requests will be processed without undue delay and no later than within one month. We will first require appropriate proof of your identity. Your data rights are not absolute and they are subject to exemptions and limitations under data protection law. If we cannot process your request within this period, we shall explain why and process it as soon as possible thereafter.

THIRD PARTIES MAY PROCESS YOUR PERSONAL DATA
1. Our website, content and features may involve the use of third-party services, social media platforms such as Twitter and Instagram, or other third-party services. We may also share your personal data with third parties, such as credit reference agencies, payment services providers, public authorities and others who process your personal data for their own purposes.
1. You should check the privacy statements of these third parties, and we are not responsible for how they may process your personal data. Please note some of them may use your personal data for business administration or product development purposes.
CATEGORIES OF PERSONAL DATA

We process the following categories of personal data about you:

Contact information	including your home or business telephone number, business address, email and similar information.
General information	including your name, job function, education status, details of your enquiry or communication and similar information.
Profile information	including your demographic information from our analytics and advertising partners, your preferences and interests known, observed or inferred by using analytics, advertising or other tools and sources including notes of your past interactions with us.
Public information	from public registers, databases, social media, the Internet and similar sources.
Security information	including logs, network monitoring and logging data, antivirus scan and similar information.
Special categories of personal data	including your race, ethnic origin, religious or philosophical beliefs, sexual orientation, political or trade union affiliation and information about your health.
Technical information	including online identifiers, internet protocol (IP) address, details of operating system, browser type, language, time zone setting, location, date and time of access, local storage data and similar information obtained from your device, browser, an API or similar source.
Usage information	about how you navigate and engage with our online services and newsletters (in the case of interactions with our newsletters, on an aggregated and anonymous basis only), features including online activity data such as downloads, clickstream data with URLs visited previously, page interaction, such as scrolling, clicks, and mouse-overs, methods used to browse away from our websites, web beacons, customised links or similar technologies to determine whether the e-mail has been opened and which links you click, and similar information.
Your background information	including your personal, professional and financial information obtained from you, public sources or third parties such as former employers, colleagues and similar information.

UPDATES TO THIS NOTICE

If we make any changes to our notice, you will be able to see them on this page, as indicated by the “Last updated” date at the top. We encourage you to visit this page periodically to learn of any updates.

If any such changes materially affect you, we will ask for your prior consent where we are required to do so by law.