SITE POLICY
Personal Information Protection Policy
Ippudo London Co. Ltd (the ‘Company’) Privacy Notice
This notice explains how information about you is used.
The Company will be the data controller and can be contacted as follows:
By post: Data Protection Manager, Ippudo London Co. Ltd, 3 Central St. Giles Piazza, St. Giles High Street,
London, WC2H 8AG.
By e-mail: info@ippudo.co.uk
By phone: +44 (0) 20 8963 5716
The information we gather
The Company gathers certain information about you. Information about you is also used by our affiliated entities
and group companies, including our head office, Chikaranomoto Holdings Co., Ltd in Japan (our ‘group companies’).
When we do so we are regulated under the General Data Protection Regulation which applies across the European
Union (including in the United Kingdom) and the Data Protection Act 2018 and we are responsible for that personal
information for the purposes of those laws.
In this notice, references to ‘we’ or ‘us’ means the Company and our group companies.
nformation that we gather about you may include without limitation your name, contact details, telephone number,
e-mail address, job title, and your appearance in photographs or video footage. The provision of information by
you
is
entirely voluntary.
We may also obtain information about you from third parties, such as our group companies, service providers and
agents.
We have appropriate security measures in place to prevent personal information from being accidentally lost or
used
or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine
business need to know it. Those processing your information will do so only in an authorised manner and are
subject
to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any
applicable
regulator of a suspected data security breach where we are legally required to do so.
The legal basis for processing
The processing will usually take place where the processing is necessary for the performance of a contract
between
us,
such as when you buy something from us.
When required, processing can take place based on your informed consent, such as when you agree to receive
marketing from us. We will ask for your explicit consent in such cases. Whenever you have given consent you retain
the right to withdraw that consent at any time.
Processing may also take place based on our legitimate interests. Our legitimate interests may be that we are
carrying
on or may carry on business with your employer. There will be a limited privacy impact on you, and we think that
you
will expect that we will process your data in this way.
Information about third parties
Information we process as described in this notice may also include information about third parties whose
details
you supply to us.
Systems used to process data
We gather information directly from you and also via our websites and other technical systems. These may
include, for example, our :
• computer networks and connections
• communications systems
• email and instant messaging systems
• ntranet and Internet facilities
• telephones, voicemail, mobile phone records
• CCTV and door entry systems
• Other hardware and software owned, used or provided by or on behalf of us and our group companies.
Cookies
When you use our website we may gather information about you through Internet access logs, cookies and other
technical
means. ‘Cookies’ are text files placed on your computer to collect Internet log information and user behaviour
information. These are used to track website usage and monitor website activity and for other data processing
reasons
set out below.
Some of the cookies we use are essential for parts of the site to operate and have already been set. You may
delete
and
block all cookies from this site, but parts of the site will not work. To find out more about the cookies we use
and
how to delete them, please contact http://www.ippudo.co.uk/policy/.
Reasons for processing
We process information about you for the following reasons :
• to provide our services
• compliance with legal, regulatory and corporate governance obligations and good practice
• gathering information as part of investigations by regulatory bodies or in connection with legal proceedings or
requests
• ensuring business policies are adhered to
• operational reasons, such as recording transactions, training and quality control
• ensuring the confidentiality of commercially sensitive information
• security vetting, investigating claims, complaints and allegations of criminal offences
• statistical analysis
• preventing unauthorised access and modifications to systems
• marketing our business and those of our group
• analysing purchasing preferences and improving services
• providing customer services
Disclosures and exchange of information and transfers outside the EEA
We may disclose and exchange information with our group companies, credit reference agencies, service providers,
representatives and agents, as well as with law enforcement agencies and regulatory bodies for the above reasons.
Information may be held at our offices and those of our group companies, and third party credit reference
agencies,
service providers, representatives and agents as described above. Information may be transferred internationally
to
Japan and other countries around the world, including those without data protection laws equivalent to those in
the
UK,
for the reasons described above. We have security measures in place to seek to ensure that there is appropriate
security for information we hold including those measures detailed in our information security and data protection
policies, which are available on request. Wherever possible, international data transfers outside the European
Economic
Area are protected by Standard Contractual Clauses, as per GDPR Article 46(2). We have standard contractual
clauses
in
place with Chikaranomoto Holdings Co., Ltd in Japan.
If you would like further information please contact our Data Protection Manager (see above). We will not
otherwise
transfer your personal data outside of the EEA or to any organisation (or subordinate bodies) governed by public
international law or which is set up under any agreement between two or more countries.
Retention periods
Your data will be held in accordance with the Company’s retention policy, which is available on request. In
general,
your data will be stored for the duration of your relationship with us, plus 6 years.
Further enquiries
Please contact the Data Protection Manager if you would like to correct or request (in accordance with
applicable
law)
information that we hold relating to you or if you have any questions in relation to the above.
Your rights
You have a number of important rights, which can be exercised free of charge. You have the right to request :
• access to your personal information and to certain other supplementary information that this Privacy Notice is
already designed to address
• require us to correct any mistakes in your information which we hold
• require the erasure of personal information concerning you in certain situations
• receive the personal information concerning you which you have provided to us, in a structured, commonly used
and machine-readable format and have the right to transmit those data to a third party in certain situations
• object at any time to processing of personal information concerning you for direct marketing
• object to decisions being taken by automated means which produce legal effects concerning you or similarly
significantly affect you
• object in certain other situations to our continued processing of your personal information
• otherwise restrict our processing of your personal information in certain circumstances.
Where you have given consent to any data processing, you have the right to withdraw that consent at any time. We
will
not do anything with your data not outlined in this notice.
For further information on each of those rights, including the circumstances in which they apply, see the Guidance
from
the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection
Regulation.
If you would like to exercise any of these rights, please contact our Data Protection Manager in writing (see
above),
providing enough information to identify you and let us know which information to which your request relates.
If you are not satisfied with any complaint you have with us, you also have the right to make a complaint to the
Information Commissioners Office, which is the supervising authority in the UK in relation to data processing. You
can
contact the Information Commissioner at ico.org.uk/concerns/ or by telephone: 0303 123 1113 for further
information
about your rights and how to make a formal complaint.
We may change this privacy notice from time to time, when we do we will inform you via e-mail.
Direct marketing
Information relating to you will be used to notify you by post, email or other electronic means of our services
and
those of our group companies and third party business partners, in which we believe you may be interested. You can
withdraw your consent to use of personal data for marketing at any time by contacting us at info@ippudo.co.uk
