1. Introduction
This data protection policy sets out the principles for retaining personal data collected by the data controller, Champagne and Charlotte, in compliance with the General Data Protection Regulation (GDPR).
2. Purpose
The purpose of this policy is to ensure that personal data is only retained for as long as necessary to fulfil the purposes for which it was collected, in accordance with legal and business requirements. The policy is also to ensure our clients are informed of how their data is collected and used.
3. Scope
This policy applies to all personal data collected, processed, and stored by Champagne and Charlotte.
Data is only collected to ensure we, Champagne and Charlotte, can provide requested services. The data taken is limited to only the necessary details to enable us to do so.
4. Retention Periods
Customer Data:
Contact Information: Retained for up to 3 years after the last interaction, unless the customer requests deletion.
Purchase Records: Retained for up to 5 years to comply with tax and legal requirements, customer contact information will be redacted after the states 3 year period.
Marketing Consents: Retained until the customer withdraws consent or up to 2 years after the last marketing interaction.
Supplier Data:
Contracts and Agreements: Retained for up to 7 years after the contract ends, in line with legal requirements.
5. Data Deletion
Personal data that is no longer required will be securely deleted, destroyed or anonymized in accordance with our data protection procedures.
6. Data Subject Rights
Data subjects have the right to request access to their data, request corrections, or request deletion of their data. Such requests will be handled in accordance with GDPR requirements.
7. Review and Compliance
This policy will be reviewed annually to ensure ongoing compliance with GDPR and other relevant regulations.
8. Definition of Key Terms
“Data Controller” – we the business, Champagne and Charlotte
“Data Subject” – our clients
“Contact Information” – data including names, addresses, telephone numbers and email addresses
“Purchase Records” – any records of purchases made by clients