Privacy Policy
Healthy Vending is committed to complying with the General Data Protection Regulation (GDPR) in our role as a data processor.
Information We Collect
Healthy Vending collects personal information necessary for bookings and billing, including:
- Name
- Address
- Email address
- Telephone number
How We Store Your Data
Your personal data may be stored electronically on secure servers located in the UK. These systems are protected by passwords and antivirus software, and access is restricted to authorised staff members only.
Why We Process Personal Data
Your information is processed to deliver the services you request and to contact you when necessary. The legal basis for processing this correspondence data is our legitimate interest in providing the service you have requested.
Your information may also be processed as transaction data for financial records, such as VAT invoices. This data is retained for six years in line with our legal obligations.
Sharing Your Information
Healthy Vending does not share your personal data with any third parties.
Deleting Your Data
When your personal data is no longer required or relevant, Healthy Vending will permanently delete the electronic records.
Data Breaches
Healthy Vending has procedures in place to protect your information, including regularly updated passwords and secure electronic storage.
We maintain secure backups of your data on UK‑based servers protected by passwords and antivirus software.
Healthy Vending understands its legal duty to report any data breach to the Information Commissioner’s Office (ICO) within 72 hours and will notify any individuals affected.
Policy Updates
We may update this policy periodically to improve our data management practices.
Your Rights
As a data subject, you have the right to:
- Be informed about how and why your data is processed.
- Request confirmation that your data is being processed and access it through a subject access request, which we will respond to within 14 days.
- Have inaccurate or incomplete data corrected.
- Request the deletion of your data when it is no longer required or when no overriding lawful basis exists (“right to be forgotten”).
- Restrict processing where data accuracy is disputed, processing is unlawful, or the data is needed for legal claims.
- Object to processing carried out on the basis of Healthy Vending’s legitimate interests.
If you wish to exercise any of these rights, please contact our Data Protection Officer.