Privacy & Data Governance
Version 4.2 | Effective May 2026 | UK GDPR Compliant
1. Introduction to Data Stewardship
TAMADA FOODS LIMITED (referred to herein as "the Company", "We", "Us", or "Our") is committed to a "Privacy-by-Design" architectural framework. This document provides a granular explanation of how we manage the Personal Data of our clients, employees, and digital visitors. In accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), we act as both Data Controller and, in specific corporate service contexts, as Data Processor.
2. Categories of Data Subject to Processing
2.1. Biological and Dietary Metadata
To provide high-precision nutritional services, we collect data regarding allergies, dietary restrictions, and physiological preferences. This data is classified as "Special Category Data" under Article 9 of the UK GDPR. We process this data only with your explicit, granular consent, or where necessary for the fulfillment of a health-specific contract.
2.2. Geo-Spatial and Technical Data
Our logistics engine collects precise delivery coordinates, IP addresses, and device signatures. This is used to optimize our algorithmic routing and prevent fraudulent transactions within our enterprise portals.
3. Data Retention and Erasure Protocols
We do not store data longer than necessary for its intended purpose. Standard financial transaction data is held for 7 years to satisfy HMRC auditing requirements. User profile data is subject to "Active Deletion" protocols: if an account remains inactive for 24 months, it is automatically purged from our production servers, leaving only anonymized aggregate data for internal R&D.
4. International Data Transfers
While our primary operational hub is at 122 Boundary Road, London, we utilize cloud infrastructure that may involve the transfer of data to jurisdictions outside the UK. We ensure that such transfers are protected by Standard Contractual Clauses (SCCs) and that the destination jurisdiction provides an adequacy level equivalent to UK standards.
5. Your Rights as a Data Subject
- Right of Access: Request a complete copy of all data we hold on you in a machine-readable format.
- Right to Rectification: Demand immediate correction of inaccurate or incomplete information.
- Right to Erasure: Also known as the "Right to be Forgotten", allowing you to demand the total deletion of your profile.
- Right to Data Portability: Transfer your data directly to another service provider.
To exercise these rights, contact our Data Protection Officer at dpo@thecruststill.sbs. We respond to all verified requests within 30 calendar days as mandated by law.
This document constitutes the entire agreement between you and TAMADA FOODS regarding your privacy. We reserve the right to modify this document as technology and legal landscapes evolve. Continued use of our services constitutes acceptance of the latest version of this policy.