Data Privacy Statement
Last updated: 26/06/2026
Version: 2.1
Allicio Nutrition Limited respects your privacy and is committed to protecting your personal information.
This Data Privacy Statement explains how we collect, use, store, share and protect personal information when you use our website, contact us, interact with us through our business channels, visit our premises, or otherwise provide information to us.
This statement replaces previous versions of our website privacy statement.
1. Who We Are
Allicio Nutrition Limited is the controller of the personal information described in this Data Privacy Statement.
In this statement, “Allicio”, “we”, “us” and “our” refer to Allicio Nutrition Limited.
Contact details
Allicio Nutrition Limited
Sunnyhills Road
Leek
United Kingdom
Telephone: +44 (0)1538 393700
Email: dataprotection@allicio.com
If you have any questions about this Data Privacy Statement or how we use your personal information, please contact us using the details above.
2. What This Statement Covers
This Data Privacy Statement applies to personal information we collect and use in connection with:
- our website, www.allicio.com;
- enquiries submitted through our website or by email, telephone or other communication channels;
- our business relationships with customers, suppliers, contractors, partners and professional contacts;
- marketing communications and events;
- social media pages and online platforms operated or controlled by us;
- visitors to our premises;
- CCTV and video surveillance at our premises;
- recruitment and job applications.
Employees, workers and contractors may also receive a separate employee or worker privacy notice which provides more detail about how we process personal information in the employment or working relationship.
| Category | Examples |
|---|---|
| Identity information | Name, title, job title, organisation, professional role |
| Contact information | Email address, telephone number, postal address, business address |
| Business information | Employer, department, role, business relationship, customer or supplier details |
| Enquiry and correspondence information | Messages, forms, requests, feedback, complaints and other communications |
| Transaction and service information | Information relating to orders, services, product enquiries, supplier relationships and business administration |
| Marketing information | Marketing preferences, event attendance, communication preferences and engagement with our communications |
| Technical information | IP address, browser type, device information, operating system, website usage data and cookie identifiers |
| CCTV and video information | Images, video footage, vehicle registration numbers, date, time and location of recordings |
| Visitor information | Name, organisation, visit date, arrival and departure time, host and visitor records |
| Recruitment information | CVs, application forms, employment history, qualifications, interview notes and references where applicable |
We do not intentionally collect special category personal information through our website. Special category personal information includes information about health, racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetic or biometric data, sex life or sexual orientation.
However, in limited circumstances, we may process special category information where necessary, for example in connection with health and safety incidents, workplace accidents, legal claims, occupational health requirements, or where you choose to provide such information to us.
4. How We Collect Personal Information
We may collect personal information:
- directly from you when you contact us, complete a form, submit an enquiry, apply for a role, visit our premises or communicate with us;
- through our website and online systems;
- through cookies and similar technologies;
- from social media platforms where you interact with our pages or content;
- from customers, suppliers, contractors, professional advisers and business partners;
- from public sources, such as company websites, Companies House, LinkedIn or other professional directories;
- through CCTV and video surveillance systems at our premises;
- during recruitment, onboarding, visitor management, audits, investigations and business administration.
5. Why We Use Personal Information
We only use personal information where we have a lawful basis to do so.
The main purposes for which we process personal information are set out below.
| Purpose | Examples | Lawful basis |
|---|---|---|
| Responding to enquiries | Website forms, emails, calls, business requests | Legitimate interests; contract steps |
| Managing customer and supplier relationships | Account management, order support, supplier administration | Contract; legitimate interests |
| Providing products and services | Order fulfilment, customer support, operational administration | Contract; legitimate interests; legal obligation |
| Business communications | Responding to contacts, maintaining business records, managing relationships | Legitimate interests |
| Marketing communications | News, updates, events and relevant business communications | Consent where required; legitimate interests where appropriate |
| Website operation and security | Running the website, protecting systems, preventing misuse | Legitimate interests |
| Analytics and website improvement | Understanding website use and improving content and performance | Consent where required; legitimate interests where appropriate |
| Recruitment | Considering applications, arranging interviews, making hiring decisions | Contract steps; legitimate interests; legal obligation |
| Visitor management | Site access, health and safety, security and emergency management | Legitimate interests; legal obligation |
| CCTV and video surveillance | Site security, crime prevention, health and safety, incident investigation, manufacturing and operational monitoring | Legitimate interests; legal obligation where applicable |
| Manufacturing, quality and food safety | Process monitoring, quality assurance, traceability, investigations and regulatory compliance | Legitimate interests; legal obligation |
| Legal, regulatory and audit purposes | Compliance, record keeping, legal claims, regulatory enquiries | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we only do so where we have considered that our interests are not overridden by your rights and freedoms.
6. CCTV and Video Surveillance
Allicio operates CCTV and other video surveillance systems at its premises.
CCTV and video monitoring may be used in external and internal areas, including:
- site entrances and exits;
- external perimeter areas;
- yards, loading areas and car park areas;
- warehouses and goods-in/goods-out areas;
- manufacturing and production areas;
- production lines and operational areas;
- other areas where surveillance is necessary for security, health and safety, quality, operational or legal reasons.
We use CCTV and video surveillance for the following purposes:
- protecting the safety and security of employees, visitors, contractors and others on site;
- preventing and detecting crime, theft, vandalism, unauthorised access and other security incidents;
- protecting company property, products, equipment, systems and confidential information;
- supporting health and safety management and accident investigation;
- supporting manufacturing operations, production monitoring and process verification;
- supporting quality assurance, food safety and regulatory compliance;
- investigating incidents, complaints, misconduct, damage, loss or operational concerns;
- assisting law enforcement, regulators, insurers, legal advisers or other authorised bodies where appropriate.
CCTV and video monitoring are not used for routine monitoring of employee performance. However, footage may be reviewed where necessary in connection with a specific incident, investigation, health and safety matter, legal obligation, regulatory requirement, security concern or suspected misconduct.
Appropriate signage is displayed at site entrances and in monitored areas to inform individuals that CCTV or video surveillance is in operation.
Access to CCTV and video recordings is restricted to authorised personnel who require access for the purposes described in this statement. Recordings may be shared with third parties only where appropriate and lawful, such as with law enforcement agencies, regulatory authorities, insurers, legal advisers, IT or security service providers, or where disclosure is required by law.
CCTV and video recordings are normally retained for up to 30 days unless they are required for an incident investigation, legal claim, insurance matter, regulatory requirement, disciplinary matter, health and safety investigation or other legitimate business purpose. Where footage is retained for longer, it will only be kept for as long as necessary for that purpose.
7. Marketing Communications
We may use your contact details to send you information about Allicio, our products, services, business updates, events or other information that may be relevant to your professional or business interests.
We will only send marketing communications where we are allowed to do so under applicable law. This may be because:
- you have given us consent;
- you are an existing business contact and the communication is relevant to your role or organisation;
- we have a legitimate interest in keeping business contacts informed about relevant products, services or updates.
You can opt out of marketing communications at any time by using the unsubscribe link in our emails, where available, or by contacting us at dataprotection@Allicio.com.
We will not sell your personal information to third parties for their own marketing purposes.
8. Cookies, Website Analytics and Similar Technologies
Our website may use cookies and similar technologies to operate the site, improve functionality, understand how visitors use the site and support security and performance.
Cookies are small files placed on your device when you visit a website. Some cookies are necessary for the website to work properly. Others may be used for analytics, performance, preferences or marketing, where enabled.
We may use tools such as website analytics, mapping, embedded content, application monitoring or similar technologies to help us understand website performance and improve user experience.
Where required by law, we will ask for your consent before placing non-essential cookies on your device.
You can manage or disable cookies through your browser settings. If you disable certain cookies, some parts of the website may not work as intended.
9. Social Media and Third-Party Platforms
Allicio may operate pages or profiles on social media platforms and other third-party websites.
If you interact with us through a social media platform, that platform may also collect and use your personal information. We do not control how those platforms use your information. You should review the privacy notice of the relevant platform to understand how your information is processed by them.
Our website may also contain links to third-party websites. We are not responsible for the privacy practices, security or content of websites operated by third parties.
10. Who We Share Personal Information With
We may share personal information with third parties where necessary and lawful.
This may include:
- companies within our group, where relevant;
- IT, website, cloud hosting, software and security service providers;
- CCTV, access control, maintenance and security providers;
- analytics and digital service providers;
- marketing and communication service providers;
- logistics, warehouse, delivery and distribution partners;
- customers, suppliers, contractors and business partners where necessary for business operations;
- professional advisers, including lawyers, accountants, auditors, consultants and insurers;
- banks, payment providers and financial institutions;
- regulators, public authorities, government bodies and law enforcement agencies;
- courts, tribunals or parties involved in legal proceedings;
- potential buyers, investors or advisers in connection with a business sale, merger, restructuring or similar transaction.
Where we use service providers to process personal information on our behalf, we require them to protect the information and only use it in accordance with our instructions.
11. International Transfers
Some of the organisations we use to support our business may process personal information outside the United Kingdom.
Where we transfer personal information outside the UK, we will ensure that appropriate safeguards are in place where required by law. These safeguards may include:
- transfer to a country that has been recognised as providing an adequate level of protection;
- the UK International Data Transfer Agreement;
- the UK Addendum to the EU Standard Contractual Clauses;
- other lawful transfer mechanisms permitted under UK data protection law.
12. How Long We Keep Personal Information
We only keep personal information for as long as necessary for the purpose for which it was collected, including to meet legal, regulatory, accounting, reporting, audit, insurance or business requirements.
Typical retention periods include:
| Type of information | Typical retention period |
|---|---|
| General website enquiries | Normally up to 24 months after the enquiry is closed |
| Customer and supplier records | Normally up to 7 years after the end of the relationship or transaction, unless a longer period is required |
| Financial and accounting records | Normally up to 7 years, or longer where required by law |
| Marketing records | Until you unsubscribe, withdraw consent, object, or the information is no longer required |
| Recruitment records for unsuccessful applicants | Normally up to 12 months after the recruitment process ends, unless a longer period is required or agreed |
| Visitor records | Normally up to 12 months, unless required for investigation or legal purposes |
| CCTV and video recordings | Normally up to 30 days, unless required for investigation, legal, insurance, regulatory or operational purposes |
| Quality, manufacturing, food safety and regulatory records | Retained in accordance with applicable legal, regulatory, quality and business requirements |
| Legal claims and dispute records | For as long as necessary to manage the claim, dispute or legal obligation |
When information is no longer required, we will delete it, anonymise it or securely archive it in accordance with our records management procedures.
13. How We Protect Personal Information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include:
- access controls and user permissions;
- password protection and multi-factor authentication where appropriate;
- encryption and secure transmission technologies;
- secure backup and recovery processes;
- monitoring, logging and security controls;
- staff training and confidentiality requirements;
- physical security controls at our premises;
- supplier due diligence and contractual data protection obligations;
- incident management and breach response procedures.
No method of transmission or storage is completely secure. However, we take reasonable and appropriate steps to protect personal information in line with the nature of the information and the risks involved.
14. Your Data Protection Rights
Depending on the circumstances, you may have the following rights under data protection law:
| Right | What it means |
|---|---|
| Right of access | You can ask for a copy of the personal information we hold about you |
| Right to rectification | You can ask us to correct inaccurate or incomplete information |
| Right to erasure | You can ask us to delete your personal information in certain circumstances |
| Right to restriction | You can ask us to restrict how we use your personal information in certain circumstances |
| Right to object | You can object to certain uses of your personal information, including direct marketing |
| Right to data portability | You can ask to receive certain information in a structured, commonly used and machine-readable format |
| Right to withdraw consent | Where we rely on consent, you can withdraw that consent at any time |
| Right to complain | You can complain to the UK Information Commissioner's Office if you are unhappy with how we handle your information |
To exercise your rights, please contact us at dataprotection@Allicio.com.
We may need to verify your identity before responding to a request. We will respond to requests in accordance with applicable data protection law.
You also have the right to complain to the UK Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
15. Automated Decision-Making
We do not use personal information collected through this website for automated decision-making that produces legal or similarly significant effects.
If this changes, we will update this Data Privacy Statement and provide appropriate information about the logic involved, the significance of the processing and the potential consequences.
16. Children’s Information
Our website and services are intended for business and professional users. We do not knowingly collect personal information from children through our website.
If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action.
17. Changes to This Data Privacy Statement
We may update this Data Privacy Statement from time to time to reflect changes in our business, legal requirements, systems or how we process personal information.
The latest version will be published on this page. Where changes are significant, we may take additional steps to bring them to your attention.