Privacy Policy

At Destiny Foods, your trust matters to us. This Privacy Policy explains clearly and transparently how we collect, use, disclose and protect the personal data you provide when using our website.

By using our site, you may share personal information with us so that you can access our services, make commercial transactions, or receive tailored information. This policy sets out what data we collect, why we collect it, how it is used, how long it is kept, and what rights you have under data protection law.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant, the EU GDPR.

Who is the Data Controller?

The Data Controller is: La Compagnie des Desserts SAS 4 Rue des Romains, Lézignan-Corbières, 11200, France

For more details about the company, please see our Legal Notice.

What Personal Data Do We Collect?

Depending on how you use our site, we may collect the following categories of personal data:

• Identification data – e.g. first and last name, email address, phone number, account username, customer ID.
• Professional details – e.g. job title, sector, company name and size.
• Transaction data – e.g. payment card details, bank account information, order history.
• Connection and usage data – e.g. IP address, browser type/version, operating system, pages visited, actions performed, preferences selected, date and time of visits.

Some data is collected directly (for example, when you fill in a form). Other data is collected automatically via cookies and trackers (see our Legal Notice for our Cookie Policy).

How Do We Collect Your Data?

• When you create an account on our website or mobile application.
• When you subscribe to newsletters or alerts.
• When you contact customer service by phone, email, instant messaging, or social media.
• When you request a catalogue.
• When you share reviews on platforms such as Facebook, Google, LinkedIn, Instagram, or Twitter.
• When you fill in online forms or questionnaires.
• Automatically, during your browsing activity on our website or mobile application.

Why Do We Process Your Data and On What Legal Basis?

We process your personal data in accordance with the GDPR and only where we have a lawful basis to do so:

• Consent – when you agree to receive marketing communications.
• Contract – where processing is necessary for fulfilling or preparing a contract with you (e.g. managing orders, payments, deliveries).
• Legal obligation – where we are required by law (e.g. accounting or tax purposes).
• Legitimate interest – where processing supports our business needs (e.g. improving customer service, training, or fraud prevention), provided your rights are not overridden.

Retention Periods

We only keep your personal data for as long as necessary for the purposes set out above. Examples include:

• Customer accounts: kept until the account is deleted.
• Orders and payments: retained for 5 years after the last transaction.
• Customer service interactions: retained for 3 years after the last interaction.
• Marketing data: kept until you withdraw consent.

Who Can Access Your Data?

Your data is treated as confidential. It may be accessed only by authorised employees of Destiny Foods, or by trusted service providers acting on our behalf, such as:

• Website and hosting providers
• Payment processors
• Marketing and communications providers
• Fraud prevention and debt collection partners

International Transfers

We do not currently transfer your personal data outside the UK or European Union. If this changes, we will ensure that any such transfers comply with applicable data protection laws and are safeguarded through recognised mechanisms (e.g. adequacy decisions, standard contractual clauses).

How We Protect Your Data

We apply technical and organisational measures to keep your data safe, including:

• Encryption of personal data in transit and at rest
• Strict access controls and authentication procedures
• Staff training and GDPR awareness programmes
• Physical security at data storage locations
• Data processing agreements with subcontractors

Your Rights Under Data Protection Law

You have the following rights in relation to your personal data:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to withdraw consent
• Right to object to processing
• Right to data portability
• Right to set instructions regarding the handling of your data after your death (France/EU only)

You can exercise these rights by contacting our Data Protection Officer (DPO):

Marie Crespin

📧 dpo@compagniedesdesserts.com

📮 4 Rue des Romains, 11200 Lézignan-Corbières, France

Complaints

If you are not satisfied with how we process your personal data, you may lodge a complaint with your local supervisory authority:

• UK – Information Commissioner’s Office (ICO): www.ico.org.uk
• France – Commission Nationale de l’Informatique et des Libertés (CNIL):

Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Please check this page regularly to stay informed of any updates.