Privacy Policy for Teesside Vending
Welcome to the Snack-Tastic World of Teesside Vending!
Hey, Teesside snack lovers! At Teesside Vending, Danielle and Mark are all about bringing you awesome vending machines while keeping your privacy safe and sound. This Privacy Policy (“Policy”) spills the beans on how we collect, use, and protect your Personal Information when you visit our website www.teessidevending.co.uk (“Website”) or use our vending services (“Services”). We’re committed to keeping your data secure, complying with UK laws, and making sure you know your rights. Ready to dive into the details? Let’s get vending!
What This Policy Covers
This Policy is a legally binding agreement between you (“User,” “you,” or “your”) and Teesside Vending (“Operator,” “we,” “us,” or “our”), the folks bringing snacks and drinks to Teesside. If you’re signing up on behalf of a business (e.g., an office or hospital), you confirm you have the authority to bind that entity to this Policy. If you don’t have that authority or don’t agree with these terms, please don’t use our Website or Services. By using our Website or Services, you’re saying you’ve read, understood, and agree to this Policy. Note: This Policy doesn’t cover companies or individuals we don’t own or manage.
Automatic Collection of Information
What We Grab Automatically
When you swing by our Website, our servers quietly note down info your browser sends, like:
Your device’s IP address.
Browser type and version (e.g., Chrome, Firefox).
Operating system (e.g., Windows, iOS).
Language preferences.
The page you visited before landing on our site.
Pages you check out, time spent, searches, and access dates/times.
Why? We use this to spot potential misuse (e.g., spammy bots) and gather stats on how our Website’s used. Don’t worry—this data isn’t linked to you personally and stays anonymous, per UK GDPR requirements.
Collection of Personal Information
Your Choice to Share
You can browse our Website without telling us who you are. But if you want to use cool features (like our Contact Us form), we may ask for Personal Information, such as:
Contact Info: Name, email, phone number (e.g., when you fill out our GrooveMail form to inquire about vending machines).
Business Info: Company name or location in Teesside (optional, for tailoring our services).
Payment Info: Credit card or bank details (only if you’re paying for Services, processed securely via third-party providers).Where We Get It Directly from you via our Website (e.g., form submissions). Sometimes from public databases or marketing partners, if relevant and lawful under UK GDPR.
Opting Out
You don’t have to share Personal Information, but skipping it might mean missing out on some features (e.g., requesting a vending machine quote). Got questions about what’s mandatory? Email us at [email protected]!
Privacy of Children
No Kids’ Data Here!
We don’t knowingly collect Personal Information from anyone under 18, per the Data Protection Act 2018. If you’re under 18, please don’t submit any info through our Website or Services. Parents and guardians, keep an eye on your kids’ online activity and let us know if a child’s data slips through—we’ll delete it ASAP!
How We Use Your Information
Our Role Under UK GDPR
We’re a data controller when we ask for your Personal Information to provide Services (e.g., managing your inquiry). We decide why and how it’s processed, following UK GDPR rules. If you submit info via our forms, we’re a data processor, handling it per your instructions.
Why We Need Your Info
We may use your Personal Information to:
Manage your inquiries (e.g., “Hi, we need a snack machine in Middlesbrough!”).
Process orders or deliver vending machines.
Send you updates about your vending setup or new snack options.
Improve our Website and Services (e.g., making forms snappier).
Send fun marketing emails (only with your consent, per UK GDPR).
Post testimonials (with your permission).
Protect against fraud or misuse.
Comply with legal requests (e.g., from UK authorities).
Legal Bases for Processing (UK GDPR)
We process your data based on:
Consent: You agree to share info (e.g., by filling out our form).
Contract: It’s needed to fulfill our Agreement (e.g., installing a vending machine).
Legal Obligation: To meet UK laws (e.g., tax records).
Legitimate Interests: For improving our Services or preventing fraud, unless your rights override these interests.
If you’re curious about why we process your data, just ask us!
Payment Processing
Safe and Secure Payments
If you pay for our Services, we use third-party payment processors (e.g., Stripe, PayPal) that meet PCI Security Standards (PCI DSS). Your payment details (e.g., credit card info) are:
Encrypted and sent over secure SSL channels.
Used only for processing payments, refunds, or handling queries.
Stored securely by processors (with your consent for recurring payments).
Check our processors’ privacy policies for details, as they may differ from ours. We only share the minimum data needed to process payments, per UK GDPR.
Sharing Your Information
Who We Share With
We may share your info with:
Trusted Partners: Subsidiaries, affiliates, or service providers (e.g., GrooveMail for form processing) who follow our privacy standards or UK GDPR.
Legal Authorities: If required by UK law (e.g., HMRC, court orders) or to protect our rights, your safety, or investigate fraud.
We don’t share identifiable info with unaffiliated third parties or for their own marketing, keeping your data safe and compliant.
Retention of Information
How Long We Keep It
We hold your Personal Information only as long as needed to:
Provide Services (e.g., manage your vending machine contract).
Meet UK legal obligations (e.g., tax records for 6 years under HMRC rules).
Resolve disputes or enforce agreements.
Maximum Retention: 12 months after the purpose ends, unless UK law requires longer (e.g., financial records). After that, we delete your Personal Information, ensuring your GDPR rights (e.g., erasure, access) can’t be exercised post-deletion. Aggregated, anonymous data may be kept for stats but won’t identify you.
Data Transfers
Your data stays within the European Economic Area (EEA) or UK, per UK GDPR. If we ever need to transfer it elsewhere (e.g., to a non-EEA processor), we’ll ensure safeguards like Standard Contractual Clauses are in place and inform you via this Policy or email.
Your Data Protection Rights (UK GDPR)
If you’re in the UK or EEA, you have these rights under the Data Protection Act 2018 and UK GDPR:
Withdraw Consent: Stop us processing your data if based on consent (won’t affect prior processing).
Access: Ask what data we hold and get a copy.
Rectification: Fix or complete inaccurate info.
Object: Challenge processing based on legitimate interests (e.g., marketing—you can opt out anytime).
Restriction: Limit processing in cases like disputed accuracy or unlawful processing.
Erasure: Request deletion if data’s no longer needed or you withdraw consent (unless we need it for legal reasons). Data Portability: Get your data in a machine-readable format or transfer it to another controller.
Complain: Contact us or the UK’s Information Commissioner’s Office (ICO) at www.ico.org.uk if you’re unhappy.
To exercise these rights, email [email protected] with enough details to verify your identity. We’ll respond within one month, per UK GDPR.
Cookies
Our Website’s Snackable Cookies
We use cookies (small text files) to make your experience smoother and more personalized. They help with:
Security (e.g., spotting suspicious activity).
Personalization (e.g., remembering your preferences).
Stats (e.g., tracking page visits).
Your Choice: Most browsers accept cookies by default, but you can decline them in your settings. This might limit some Website features. Check our cookie policy (link to be added on your site) for details. We’ll ask for your consent to non-essential cookies, per UK GDPR and ePrivacy Regulations.
Data Analytics
Tracking the Vending Vibes
We may use third-party tools (e.g., Google Analytics) with cookies or web beacons to track Website usage (e.g., pages visited, time spent). This helps us improve our site and Services. Data is anonymized and not linked to you personally, complying with UK GDPR.
Do Not Track Signals
Our Website doesn’t yet respond to Do Not Track signals due to inconsistent browser standards. However, we limit data collection to what’s necessary, as outlined here, keeping your privacy first.
Advertisements
We may work with third-party ad companies to show you relevant ads (e.g., new vending machine options). These may use cookies to track behavior, but we ensure they comply with UK GDPR and only share minimal, anonymized data.
Email Marketing
Snack-Tastic Updates
You can opt into our newsletters for vending news and offers (e.g., “New healthy snacks in Teesside!”). We:
Keep your email confidential, sharing it only with trusted providers (e.g., GrooveMail) for sending emails.
Include clear sender info and unsubscribe options in every email, per UK GDPR and PECR (Privacy and Electronic Communications Regulations).
Send essential transactional emails (e.g., order confirmations) even if you opt out of marketing.
Unsubscribe anytime via the link in our emails or by emailing us.
Affiliate Links
We may use affiliate links to offer related products (e.g., vending supplies). Clicking these places a cookie to track sales for commissions, but it’s anonymized and GDPR-compliant.
Links to Other Resources
Our Website may link to external sites (e.g., X or Instagram). We’re not responsible for their privacy practices, so check their policies before sharing data.
Information Security
Keeping Your Data Safe
We store your info on secure servers with:
Administrative safeguards (e.g., access controls).
Technical safeguards (e.g., SSL encryption).
Physical safeguards (e.g., secure data centers).
No internet transfer is 100% secure, but we follow UK GDPR standards to protect your data. You should also secure your device and credentials to keep things safe.
Data Breach
If a breach happens (e.g., unauthorized access), we’ll:
Investigate and report to the ICO within 72 hours, per UK GDPR.
Notify you via email if there’s a risk of harm (e.g., exposed contact details).
Take steps to fix the issue and prevent future breaches.
Changes to This Policy
We may update this Policy at our discretion. Changes take effect when posted on our Website, with the updated date below. We’ll notify you via email or a Website notice if changes are significant. Continued use after updates means you agree to the new terms. We won’t use your data in materially different ways without your consent, per UK GDPR.
Acceptance of This Policy
By using our Website or Services (e.g., submitting a Contact Us form), you agree to this Policy. If you don’t agree, please don’t use our Website or Services.
Contact Us
Got questions, concerns, or want to exercise your rights? Reach out to Danielle and Mark at:
Email: [email protected]
Address: Teesside Vending, [Your Teesside Address], UK
We’ll resolve issues quickly, within one month as required by UK GDPR. If you’re not satisfied, contact the ICO at www.ico.org.uk.
Last Updated: 4 July 2025