Legal
Privacy Policy
Last updated: [date of publication]
This policy explains how NPD Direct collects and uses personal information when you visit our website www.npddirect.com, contact us, or subscribe to our updates. We are committed to protecting your information and handling it fairly and lawfully.
1. Who we are
NPD Direct Limited ("NPD Direct", "we", "us", "our") is the controller of the personal information described in this policy.
- Registered in England and Wales, company number 04700966
- Registered office: 1-4 London Road, Spalding, Lincolnshire, PE11 2TA
- Registered with the Information Commissioner's Office (ICO), registration number Z2236921
- Contact for privacy questions: robert@npddirect.com
NPDiQ is a service and registered trade mark of NPD Direct. This policy also covers enquiries about NPDiQ.
2. Information we collect
Information you give us
- Enquiries: when you use our contact form or email us, we collect your name, company, role, email address, phone number (optional), market, and what you tell us about your enquiry.
- Updates: if you sign up for our weekly food trends digest, we collect your email address and, if you provide them, your name and company.
- Business dealings: if you or your organisation work with us, we hold business contact details and correspondence needed to manage that relationship.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages viewed, referring site and time spent on the site, collected through cookies and similar technologies. See our Cookie Policy.
We do not intentionally collect special category data (such as health information) through this website. Please do not include it in enquiries.
3. How and why we use your information
| Purpose | Information used | Lawful basis (UK GDPR) |
|---|---|---|
| Responding to your enquiry and discussing how we could work together | Enquiry details | Legitimate interests (responding to business enquiries); or steps before entering a contract |
| Delivering and managing services for clients | Business contact details, correspondence | Performance of a contract; legitimate interests |
| Sending our weekly trends digest and occasional updates | Email address, name, company | Consent (you can unsubscribe at any time) |
| Sending relevant business information to existing business contacts | Business contact details | Legitimate interests, in line with PECR; you can opt out at any time |
| Running, securing and improving our website | Device and usage data | Legitimate interests; consent where required for non-essential cookies |
| Meeting legal, tax and accounting obligations | Business and transaction records | Legal obligation |
We do not sell your personal information, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Who we share it with
We share information only where needed, with:
- Website and hosting: Wix.com Ltd and its group companies, which host this website, its forms, blog and email sign-up.
- Email and business systems: Microsoft 365 (email, documents and file storage).
- Analytics: Wix Analytics, which provides anonymous statistics about how the website is used.
- Our UK team and specialists, where needed to respond to your enquiry or deliver work, under confidentiality obligations. If you contact our North America team directly, they will handle your enquiry.
- Professional advisers (such as accountants and lawyers), and authorities where required by law.
These providers act on our instructions and are required to keep your information secure.
5. International transfers
Client data stays in the UK and EU. Client project data, including the sales, cost, recipe and factory data you share with us for NPDiQ, is stored and processed in UK and EU data centres. It is not accessed from, or transferred to, the United States or anywhere else outside the UK and EU.
Website and email providers. Some of the providers that run our website and email, such as Wix and Microsoft, may process limited personal information (for example contact form details or website statistics) outside the UK. Where they do, the transfer is protected by UK adequacy regulations or by approved contractual safeguards, such as the UK International Data Transfer Agreement. Contact us if you would like more information.
6. How long we keep it
- Enquiries that don't lead to work: up to 24 months from our last contact.
- Client and supplier records: for the length of the relationship and up to 6 years afterwards, for legal and accounting purposes.
- Trends digest subscribers: until you unsubscribe; we then keep a suppression record so we don't email you again.
- Analytics data: as set out in our Cookie Policy.
7. Your rights
Under UK data protection law you have the right to:
- access a copy of your personal information;
- have inaccurate information corrected;
- have your information erased in certain circumstances;
- restrict or object to our use of it, including objecting at any time to direct marketing;
- data portability in certain circumstances;
- withdraw consent at any time, where we rely on consent.
To exercise any right, email robert@npddirect.com. We will respond within one month. There is normally no charge.
8. Complaints
If you have concerns about how we use your information, please contact us first so we can try to put things right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Visitors from the United States
We are a UK business. If you are in the US, we handle your information as described in this policy and you may contact us to request access to or deletion of your information. We do not sell or share personal information for cross-context behavioural advertising.
10. Security
We use appropriate technical and organisational measures to protect your information, including access controls and encrypted connections (HTTPS) on this website. No online transmission is completely secure, so please avoid sending confidential commercial information through the contact form; we will arrange a secure route.
11. Links to other websites
Our blog links to third-party sources. We are not responsible for the privacy practices of other websites.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.