1. Who we are

This Privacy Policy explains how Masafina Limited (“Masafina”, “we”, “us” or “our”) collects, uses and
protects your personal data when you contact us, visit our website, buy from us or sign up to hear from
us.

Masafina Limited is the data controller responsible for your personal data.

Registered office: 37-43 Gorst Road, Park Royal, London NW10 6LA
ICO registration reference: ZB572678
Contact for any data protection query: privacy@masafina.com

References to “you” mean the individual whose personal data we hold.

2. The personal data we collect

We only collect what we need. Depending on how you interact with us, this may include:

• Contact details: your name, email address, telephone number and, where relevant, a delivery or
business address.
• Order and account information: the products you have enquired about or purchased, and any related
correspondence, complaints or feedback.
• Information you choose to give us: anything you include when you contact us by email, social media
or at an event, including dietary requirements or allergy information if you share it.
• Website usage data: limited technical information collected automatically when you visit our site,
such as your IP address and how you use the site, gathered through cookies and similar technologies
(see section 8).

We do not knowingly collect personal data from anyone under 16. If you are under 16, please do not
send us your details without the consent of a parent or guardian.

3. How we collect your data

We collect personal data when you:

• contact us directly by email, telephone, post, our website or social media;
• place an order or enquire about our products;
• sign up to receive updates or marketing from us; or
• meet us at trade shows, markets or other events.

If you give us information about another person (for example a colleague), you confirm you have their
permission to do so.

4. How we use your data and our lawful basis

We use your personal data only where the law allows. The main reasons we process it, and our lawful
basis under UK data protection law, are:

• To fulfil orders and provide our products and services to you, including delivery and customer
support. Lawful basis: performance of a contract.
• To respond to your enquiries, complaints and feedback. Lawful basis: legitimate interests (running
our business and dealing with customers and partners).
• To send you marketing and updates about Masafina, where you have asked to receive them. Lawful
basis: consent, which you can withdraw at any time.
• To meet our legal and regulatory obligations, including food safety, tax and accounting
requirements. Lawful basis: compliance with a legal obligation.
• To protect the security of our systems and prevent fraud. Lawful basis: legitimate interests.

Where we rely on legitimate interests, we make sure this is balanced against your rights.

5. Sharing your data

We do not sell or rent your personal data. We share it only where necessary, and only with:

• service providers who help us run our business, such as website hosting, payment processing, delivery
and email or order-management tools, who may only use your data on our instructions;
• our professional advisers, such as accountants or legal advisers, where needed; and
• regulators, law enforcement or courts where we are legally required to do so.

6. International transfers

Some of the providers we use, and some of our supply chain partners in Mexico, are based outside the
UK. Where your personal data is transferred outside the UK, we take steps to ensure it is protected by
appropriate safeguards recognised under UK data protection law, such as the UK International Data
Transfer Agreement or an adequacy decision.

7. How long we keep your data

We keep your personal data only for as long as we need it for the purpose we collected it, and to meet our
legal obligations. In general:

• order and transaction records are kept for up to six years after our relationship ends, to meet tax,
accounting and legal requirements;
• marketing data is kept until you ask us to stop contacting you; and
• other enquiries are kept for as long as needed to deal with them.

When we no longer need your data, we securely delete or anonymise it.

8. Cookies

Our website uses cookies, which are small files placed on your device, to help the site work and to
understand how visitors use it. We use them only for the functioning of the site and for basic,
anonymised usage statistics. You can manage or disable cookies through your browser settings, though
some parts of the site may not work properly if you do. We will ask for your consent before using
non-essential cookies.

9. Keeping your data secure

We use appropriate technical and organisational measures to protect your personal data against loss,
misuse or unauthorised access. No transmission of information over the internet can be guaranteed as
completely secure, so any data you send us is at your own risk, but we take reasonable steps to keep it
safe once we receive it.

10. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you (a “subject access request”);
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data where it is no longer needed;
• ask us to restrict or object to how we use your data;
• ask us to transfer your data to another provider in certain circumstances; and
• withdraw your consent at any time, where we rely on consent (for example, marketing).

To exercise any of these rights, email us at privacy@masafina.com. We will respond within one month.

You can unsubscribe from marketing at any time using the link in our emails or by contacting us.

11. Complaints

If you have a concern about how we handle your personal data, please contact us first at
privacy@masafina.com so we can try to put it right. You also have the right to complain to the
Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk or by calling 0303 123 1113.

12. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on
our website, with the date it was last updated shown at the top.