Data Protection Rights Policy

1 Introduction

At Judith Ethnic Food Store Ltd, we respect your rights regarding your personal information. This policy explains the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how you can exercise those rights.

2 Who Is Responsible for Your Data?

3 Your Data Protection Rights

Under UK GDPR, you may have the following rights, explained in the sections below.

4 Right of Access

You have the right to request a copy of the personal information we hold about you (a Subject Access Request). Your request may include what information we hold, why we use it, who we share it with, and how long we keep it.

5 Right to Correction

You have the right to ask us to correct information that is inaccurate, incomplete, or outdated. We aim to update incorrect information promptly.

6 Right to Deletion

You may request that we delete your personal information where it is no longer needed, you withdraw consent, or there is no legal reason for us to continue processing it. Please note that some information may need to be retained due to legal obligations, such as accounting records, transaction records, and regulatory requirements.

7 Right to Restrict Processing

You may request that we limit how we use your information where you believe information is inaccurate, processing is unlawful, or you need information retained for legal purposes.

8 Right to Object

You have the right to object to certain uses of your personal information, including direct marketing and processing based on legitimate interests in certain circumstances.

9 Right to Data Portability

Where applicable, you may request your personal information in a structured, commonly used, machine-readable format. This may apply where processing is based on consent, necessary for a contract, or carried out by automated means.

10 Right to Withdraw Consent

Where we process your information based on consent, you may withdraw that consent at any time — for example, marketing emails, optional cookies, or promotional communications. Withdrawal of consent does not affect processing that took place before consent was withdrawn.

11 Marketing Preferences

You can control marketing communications by clicking the unsubscribe link in emails, contacting us directly, or updating account preferences where available. You will still receive important service communications relating to orders, payments, account security, and customer support.

12 How to Make a Data Request

To exercise your rights, please contact us and include your full name, contact details, details of your request, and any information needed to help identify your records.

13 Identity Verification

To protect customer privacy, we may request reasonable information to confirm your identity before providing personal data. This helps prevent unauthorised access.

14 Response Times

We aim to respond to valid data requests within one month of receiving the request. Where requests are complex or numerous, this period may be extended where permitted by law. We will inform you if an extension is required.

15 Charges

We normally do not charge for exercising your data protection rights. However, we may charge a reasonable fee or refuse a request where it is clearly unfounded, excessive, or repetitive.

16 Data Protection Concerns

If you are unhappy with how we handle your personal information, please contact us first so we can investigate. You also have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.

17 Contact Us

18 Changes to This Policy

We may update this Data Protection Rights Policy from time to time. The latest version will always be available on judithethnicstore.co.uk.