Butlers Chocolates Website Privacy Notice (Purchasers)

Purpose of this Notice: Butlers Chocolates UC and its subsidiaries (“we/us”) are committed to protecting and respecting your data protection rights and freedoms as specified under the General Data Protection Regulation (GDPR) and related Irish and EU data protection legislation, as described in the Butlers Chocolates Data Protection Policy. The purpose of this privacy notice is to provide additional information for customers purchasing products on the Butlers Chocolates website.

Information required under the GDPR: This privacy notice provides the following additional information as specified by the GDPR to data subject customers purchasing products on the Butlers Chocolates website.

Our contact details: You may contact us via email at privacy@butlers.ie

Purposes of the processing: We are collecting your first name, last name, telephone number, email address, postal address, and card details to schedule and pay for the tour. By scheduling and paying, this will allow you to purchase Butlers Chocolates products. You can optionally sign up to receive our newsletter or join our Happiness card programme.

Legal basis for the processing: The legal basis for processing your personal data is the contract between us established when you purchase products on the Butlers Chocolates website after agreeing to the terms and conditions. We will only collect and process the personal data necessary for this transaction. You are under no obligation to provide this personal data to us but if you choose not to provide us with the requested personal data, you will not be able to purchase these products.

Recipients of your personal data: We will disclose your personal data to our payments processor so you may pay for the selected products.

Transfers outside the EEA: Our payments processor is located within the European Economic Area (EEA). Your personal data stays at all times stays within the EEA. All our partners must operate only on instructions from us and must provide at a minimum the same levels of security that we provide at all times.

Retention period: Your personal data will be stored with us for a period of one year after the date of your order if you are do not have a Butlers account except for your card details and will then be securely deleted. We never store your card details. If you have a Butlers account, your order data will remain as long as you have an account. Your personal data may remain with our payments processor up to 18 months after the purchase and will then be securely deleted.

Data subject rights: As fully described in the Butlers Chocolates Data Protection Policy, you have a number of rights as a data subject, including the rights to rectify, access, and erase your personal data, the rights to restrict and object to the processing of your personal data, and the right to portability of your personal data. You also have the right to complain to the Data Protection Commission(er) at www.dataprotection.ie.