If you have any queries about your personal data and privacy just get in touch with us!
We take your privacy seriously. This is the lengthy page detailing how Chox and our website hosting platform keeps your personal data secure, what we do with it and your rights to withdraw consent. This also covers how cookies are used on this site, what they're for and how you can disable them.
Last Updated 9th Nov 2021
1. PURPOSE OF THIS NOTICE
This notice describes how we collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act [1998 OR 2018] and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK ('Data Protection Legislation').
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
2. ABOUT US
Chox Limited is registered in England and Wales as a limited company under number: 13532678 and our registered office is in Hoylandswaine, Sheffield, S36 7HD
For the purpose of the Data Protection Legislation and this notice, we are the 'data controller'. This means that we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.
We have appointed a Head of Privacy our Head of Privacy is our Data Protection Point of Contact and is responsible for assisting with enquiries in relation to this privacy notice or our treatment of your personal data. Should you wish to contact our Data Protection Point of Contact you can do so using the contact details noted at paragraph 12 (Contact Us), below.
3. HOW WE MAY COLLECT YOUR PERSONAL DATA
We obtain personal data about you, for example, when:
you sign up via our website; subscribe to updates, purchase any of our services, or if you contact us by email, telephone or post, for example when you have a query about our products or services
4. THE KIND OF INFORMATION WE HOLD ABOUT YOU
The information we hold about you may include the following:
your personal details (such as your name and/or address, telephone number and email address);
our correspondence and communications with you; information about any feedback, complaints and enquiries you make to us; information from research, surveys, and marketing activities;
5. HOW WE USE PERSONAL DATA WE HOLD ABOUT YOU
We may process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing, business development, statistical and management purposes.
We may process your personal data for certain additional purposes with your consent, and in these limited circumstances where your consent is required for the processing of your personal data then you have the right to withdraw your consent to processing for such specific purposes.
Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.
5.1 SITUATIONS IN WHICH WE WILL USE YOUR PERSONAL DATA
We may use your personal data in order to:
provide you with information related to a product or service you have purchased from us, and our services, products or events and activities that you request from us or which we feel may interest you, provided you have consented to be contacted for such purposes; seek your thoughts and opinions on the services we provide; and notify you about any changes to our services.
In some circumstances, we may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
5.2 REMARKETING AND ONLINE ADVERTISING
We use data for analytics and advertising purposes. We share data with 3rd party providers including Facebook and Instagram. We target consumers through online advertising so you may see ads on social media based on your personal information and browsing history.
We use Facebook Pixel to deliver targeted advertisements to individuals who visit our website.
5.3 DATA RETENTION
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
When assessing what retention period is appropriate for your personal data, we take into consideration:
the requirements of our business and the services provided;
any statutory or legal obligations;
the purposes for which we originally collected the personal data;
the lawful grounds on which we based our processing;
the types of personal data we have collected;
the amount and categories of your personal data; and
whether the purpose of the processing could reasonably be fulfilled by other means.
5.4 CHANGE OF PURPOSE
Where we need to use your personal data for another reason, other than for the purpose for which we collected it, we will only use your personal data where that reason is compatible with the original purpose.
Should it be necessary to use your personal data for a new purpose, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.
6. DATA SHARING
Why might you share my personal data with third parties?
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so.
6.1 WHICH THIRD-PARTY SERVICE PROVIDERS PROCESS MY PERSONAL DATA?
"Third parties" includes third-party service providers appointed on our behalf and contractually bound as data controllers or processors to provide safe handling of data . The following activities may be carried out by third-party service providers:
IT network and secure encrypted cloud storage provision eg. Dropbox,
professional advisors and consultants,
IT, website, network and ecommerce platform providers,
administrators and telephony call handling,
banking or legal services.
All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data. We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
6.2 WHAT ABOUT OTHER THIRD PARTIES?
We may share aspects of your personal data with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator or to otherwise comply with the law.
7. ABOUT DATA STORAGE AND DATA TRANSFERS
Your personal data may be stored in a number of locations as Chox Ltd uses a combination of UK cloud-based and international server storage, including the platform provider (WIX). WIX is a global company. Your personal information may be stored in data centres located in the UK, United States of America, Ireland, Japan and Israel. WIX may use other jurisdictions as necessary for the proper delivery of our Services and/or as may be required by law.
7.1 TRANSFERRING PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
Wix is a global company that respects the laws of the jurisdictions it operates within. The processing of the User Customer Data may take place within the territory of the European Union, Israel or a third country, territory, or one or more specified sectors within that third country, of which, the European Commission has decided that it ensures an adequate level of protection. Wix.com Ltd. is based in Israel, which is considered by the European Commission to be offering an adequate level of protection for the Personal Information of EU Member State residents.
Any transfer to a third country, outside the European Union, that does not ensure an adequate level of protection according to the European Commission, will be undertaken in accordance with the Standard Contractual Clauses (2010/87/EU) set out in Appendix 1 of the Wix Data Processing Agreement (DPA)
Wix affiliates and Third-Party Service Providers that store or process your Personal Information on Wix’s behalf are contractually committed to keep it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements which may apply in their jurisdiction.
Transfer of EU Personal data : If you are located in Europe, when we will transfer your Personal Information to the United States or anywhere outside Europe, we will make sure that (i) there is a level of protection deemed adequate by the European Commission or (ii) that the relevant Model Standard Contractual Clauses are in place.
Privacy Shield Certification: Wix and its affiliates, including DeviantArt Inc., participates in, and has certified its compliance with, the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List, here.
In compliance with the Privacy Shield Principles, Wix.com commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact us at: firstname.lastname@example.org. For the avoidance of doubt, Wix does not rely on the Privacy Shield as a mechanism for transferring GDPR protected personal data.
Wix.com has further committed to refer unresolved Privacy Shield complaints to an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider at https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. The services are provided at no cost to you.
8. DATA SECURITY
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
8.1 DATA BREACH
Chox Ltd shall promptly notify customer/user, as soon as reasonably practicable and not later than 72 hours from the time of confirmation by Chox Ltd of unauthorized access, use, or disclosure of any Customer Data, Customer’s Confidential Information, or Personal Information under our control. We shall provide Customer/User with information regarding such incident as required by Applicable Law or as reasonably requested by Customer to enable Customer to comply with its obligations under Applicable Law. Chox Ltd shall use commercially reasonable efforts to: (i) identify the cause of the incident and (ii) remediate the cause of the incident within our IT systems of Website Platfrom (WIX), to the extent such remediation is within Chox Ltd's reasonable control.
9. RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION
It is important that the personal data we hold about you is accurate and current. Should your personal information change, it is your duty to notify us of any changes of which we need to be made aware by contacting us, using the contact details below.
9.1 YOUR RIGHTS IN CONNECTION WITH PERSONAL DATA
Under certain circumstances, by law you have the right to:
Request access to your personal data, enabling you to receive details of the personal data we hold about you and to check that we are processing it lawfully.
You may request correction or erasure of the personal data that we hold about you where there is no good reason for us continuing to process it.
You also have the right to object where we are processing your personal information for direct marketing purposes.
You can request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example, if you want us to establish its accuracy or the reason for processing it.
You may request the transfer of your personal data to you or another data controller, if the processing is based on consent, carried out by automated means and this is technically feasible.
If you want to exercise any of the above rights, please email us at email@example.com
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
9.1 CONFIRMATION OF YOUR IDENTITY
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
10. RIGHT TO WITHDRAW CONSENT
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose (for example, in relation to direct marketing that you have indicated you would like to receive from us), you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please email us at firstname.lastname@example.org
Once we have received notification that you have withdrawn your consent, we will no longer process your personal information (personal data) for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
11. CHANGES TO THIS NOTICE
Any changes we may make to our privacy notice in the future will be updated on our website at www.choxchocolates.co.uk
This privacy notice was last updated on 9th November 2021.
12. CONTACT US
If you have any questions regarding this notice or if you would like to speak to us about the manner in which we process your personal data, please either email us at info@choxchocolates or write to us at Head of Privacy, Chox Chocolates, Blacker Hall Farm, Calder Grove, Wakefield WF4 3DN
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at any time. The ICO's contact details are as follows:
Information Commissioner's Office
Telephone - 0303 123 1113 (local rate) or 01625 545 745
Please note that we do not change our practices in response to a “Do Not Track” signal in the HTTP header from a browser or mobile application, however, most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser.
Last Revised: November 9th, 2021
1. WHAT IS A COOKIE?
A cookie is a small file of letters and numbers downloaded on to your computer when you access certain websites. In general, cookies allow a website to recognise a user’s computer.
The most important thing to know about cookies placed by Wix is that they make our website a bit more user-friendly, for example, by remembering site preferences and language settings.
We use these cookies and other similar technologies for a number of purposes, including:
Keeping you signed in
Keeping your preferences
To provide you with the service you chose to receive from us
Understanding how you use our website
To monitor and analyze the performance, operation, and effectiveness in order to improve our website and inform the platform provider (WIX) of any issues and improvements necessary
To understand and improve the impact of our marketing campaigns
For security needs and fraud-protection purposes and in order to identify and prevent cyber-attacks
Cookies that are used by the Chox website at www.choxchocolates.co.uk on the Wix.com platform should be divided into two types:
“First-party Cookies” - Cookies that are placed by the web developer using the Wix platform and it’s applications such as bookings; payments; reservations
“Third-party Cookies” - Cookies that are placed and used by third-party companies which are Wix’s partners eg. Facebook, Instagram
It is important to note that Wix.com cannot access third-party cookies; nor can other third-party organizations access the data in the cookies we use on our website. Wix doesn't allow third-parties to use the cookies for any purpose other than those described in the next sections.
Depending on their function, Cookies may have different durations. There are session cookies and persistent cookies:
Session cookies only last for your online session. It means that the browser deletes these cookies once you close your browser
Persistent cookies stay on your device after the browser has been closed and last for the period of time specified in the cookie
The cookies used on our website fall into one of four categories:
Essential Cookies let you move around the website and use essential features like secure and private areas.
Analytic Cookies let us understand how you use our website (e.g. which pages you visit), to provide statistics on how our website is used, improve the website by identifying any errors, and performance issues.
Functional cookies are cookies used to remember choices users make to improve their experience (e.g. language).
Marketing cookies are used to collect information about the impact of our marketing campaigns performed in other websites on users and non-users.
3. WIX COOKIES - TABLE:
Please click here to receive information about the type, categories, purpose and duration of cookies placed by Wix and Third-Party Service Providers.
4. COOKIES ON SITES BUILT USING WIX PLATFORM
If you want to have more information about cookies that are used on websites built using the Wix platform, click here.
5. YOUR CHOICES AND ABILITY TO OPT-OUT
You can change your cookie settings on your browser. The following links may be helpful, or you can use the “Help” option in your browser. Alternately, it is also possible to stop your browser from accepting cookies altogether by changing your browser’s cookie settings. You can usually find these settings in the “options” or “preferences” menu of your browser.
To opt out from and prevent your data from being used by Google Analytics across all websites, check out the following instructions: https://tools.google.com/dlpage/gaoptout.
Please note that deleting our cookies, disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our website services, or may otherwise adversely affect your user experience.