Privacy Policy

Last updated: May 2023

PROPER Privacy Policy

This privacy policy sets out how we use and protect any personal data that you give when you use this website, your privacy rights and how the law protects you. We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy policy. 

The controller of your personal data for the purposes of data protection laws is Catapult Enterprises Ltd (“Catapult”), a company registered in England and Wales under company number 07057804 whose registered office is at 132 Townsend Drive, Attleborough Fields Industrial Estate, Nuneaton, England, CV11 6TJ. PROPER is the trading name of Catapult.

 

How we collect your data

We may collect, process and retain personal data from you and any devices you may use;

• When you browse our website
• When you place an order for our products, or send us an enquiry using the email address provided
• When you register an account with us
• When you provide it to us when you use our services
• When you take part in a promotion, prize draw or competition that we run through our website

We will use your personal data:

• to carry out our obligations under a transaction entered into between you and us, namely to provide you with the information and/or products that you request from us;
• to send you emails relating to transactions you have made with us, for example, confirming when you place an order;
• to carry out a promotion, prize draw or competition through our website and to fulfil any prizes if you are a winner. 

If we have your permission, we may also send you emails to provide information about our other products and services which we think may also be of interest to you. You can decide not to receive these emails at any time and will be able to “unsubscribe” directly by clicking a link in the email. We may also contact you through other means to provide the same information.

Information we collect about you

With regard to each of your visits to our site we may collect the following information:

• Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. We use such information internally to administer and improve our site, including to conduct troubleshooting, data analysis, testing, and research exercises. Such operations allow us to ensure that content is presented in the most effective manner for you and for your computer, and that our site is safe and secure.
• Personal details that you provide to us including your name, date of birth and contact details (for example your email, postal address and phone number). 

When you take part in a promotion, prize draw or competition, we may also collect information relating to your identity (such as a passport, driving licence or other identification card or documentation) or other personal details required for us to fulfil any prizes if you are a winner.

Information we receive from other sources

We may receive personal data about you from certain third parties we operate in conjunction with (such as sub-contractors in technical, payment and delivery services, analytics providers, search information providers and other suppliers and business partners).

 

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookies Policy.

 

The legal basis for processing your information

We can only process your personal data where we have a lawful basis to do so. In most cases, the lawful basis that we rely upon in order to process your personal data will be one of the following:

• Necessary for entering into or performing a contract. In order to perform obligations which arise under any contract we have entered into with you, it will be necessary for us to process your personal data.
• Necessary for compliance with a legal obligation. We are subject to certain legal requirements which may require us to process your personal data. We may also be obliged by law to disclose your personal data to a regulatory body or law enforcement agency.
• Necessary for the purposes of legitimate interests. We will need to process your personal data for the purposes of our (or a third party’s) legitimate interests, provided that we have established that those interests are not overridden by your rights and freedoms (including your right to have your personal data protected). Our legitimate interests include responding to requests and enquiries from you, optimising our website and user experience, informing you about our services and ensuring that our operations are conducted in an appropriate and efficient manner.
• Consent. In some circumstances, we may ask for your consent to process your personal data in a particular way.

 

Disclosure of your information

We may share your personal data with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may share your personal data with selected third parties including:

• Business partners, suppliers and sub-contractors for the performance of any contract we enter into with you.
• Analytics and search engine providers that assist us in the improvement and optimisation of our site.
• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If Catapult or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or to protect the rights, property, or safety of Catapult, our customers, or others.

 

Security

Website security

We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal data we collect online.

Payment security

We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal data. We will never store your credit/debit card information on our website. All electronic transactions you make to or receive from us will be encrypted using SSL technology via GEOTrust and will be transferred and processed by WorldPay. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet; any transmission is at your own risk.

External links

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any personal data which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy statement applicable to the website in question.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the UK. It may also be processed by staff operating outside the UK who work for us or for one of our group companies, suppliers or business partners. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support or other services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

To the extent that any of your data is provided to third parties outside the UK, or accessed by third parties from outside the UK, we will ensure that appropriate safeguards are in place, for example, where the Information Commissioner’s Office has deemed that the third country has an adequate level of protection for personal data, or by using specific contracts approved for use by the Information Commissioner’s Office which give personal data the same protection it has in the UK.

How long we hold your information

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. The criteria that we use to determine retention periods will be determined by the nature of the data and the purposes for which it is kept, the sensitivity of the data and the potential risk of harm from unauthorised use or disclosure.

 

Your rights

You have certain rights in relation to the personal data that we hold about you. Details of these rights and how to exercise them are set out below. Please note we will require evidence of your identity before we are able to respond to your request.

• Right of access. You have the right at any time to ask us for a copy of the personal data that we hold about you and to check that we are lawfully processing it. Where we have good reason, and if permitted by law, we can refuse your request for a copy of your personal data, or certain elements of the request. If we refuse your request or any element of it, we will provide you with our reasons for doing so.
• Right of correction or completion. If personal data we hold about you is not accurate or is out of date and requires amendment or correction you have a right to have the data rectified or completed.
• Right of erasure. In certain circumstances, you have the right to request that personal data we hold about you is erased e.g. if the personal data is no longer necessary for the purposes for which it was collected or processed or our processing of the personal data is based on your consent and there are no other legal grounds on which we may process the personal data.
• Right to object to or restrict processing. In certain circumstances, you have the right to object to our processing of your personal data. For example, if we are processing your personal data on the basis of our legitimate interests and there are no compelling legitimate grounds for our processing which override your rights and interests. You may also have the right to restrict our use of your personal data, such as in circumstances where you have challenged the accuracy of the personal data and during the period where we are verifying its accuracy.
• Right of data portability. In certain instances, you have a right to receive any personal data that we hold about you in a structured, commonly used and machine-readable format. In such circumstances, you can ask us to transmit that personal data to you or directly to a third party organisation. While we are happy for such requests to be made, we are not able to guarantee technical compatibility with a third party organisation’s systems. We are also unable to comply with requests that relate to personal data of others without their consent.
• Right to withdraw consent. In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your personal data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

You can exercise any of these rights at any time by contacting us using the details in the Contact section below.

 

Complaints

If you are unhappy about our use of your personal data, you can contact us using the details in the Contact section below. You are also entitled to lodge a complaint with the UK Information Commissioner’s Office using any of the below contact methods:

Telephone: 0303 123 1113

Website: https://www.ico.org.uk

Post: 

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF 

Contact

Questions, comments, requests, and complaints regarding this privacy policy or our privacy practices are welcomed and should be addressed to dataprotection@warpsnacks.com.

If you have raised a question, comment, request, or complaint with us, we may contact you in response.

 

Updates to this policy

Any changes we make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.