Data Protection & Privacy Policy Statement

Introduction Carambola Limited, as a provider of school meals, is committed to protecting the personal data of pupils, parents, and staff, and acts as the processor of information provided by the school in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This statement outlines how we collect, use, store, and protect personal data to ensure transparency and accountability.

1. Data We Collect Carambola Limited holds the following information on students, parents, and staff: We may collect the following types of personal data:

School Information: School phone, secretary name, Principal's name, Principal's number and email and emergency contact details if different from Principal, Caretaker Name, payment information.
Pupil Information: Names, dietary requirements, allergies, meal preferences, and school enrolment details including Student's Class, Student's Teacher.
Parent/Guardian Information: Names, contact details, and correspondence.
Staff Information: Names, job titles, contact details, and relevant employment data.

2. Purpose of Data Collection We collect personal data to:

Provide appropriate and safe meal services tailored to dietary needs and preferences.
Facilitate payment and invoicing processes.
Communicate effectively with parents, guardians, and schools.
Comply with legal and contractual obligations.
The login details supplied to the school/parent are private to the parent in question and the Company does not have access to passwords.

3. Legal Basis for Processing We process personal data based on one or more of the following legal grounds:

Consent: For specific processing activities where explicit consent is required.
Contractual Necessity: To fulfil agreements for providing school meals.
Legal Obligations: To comply with health and safety regulations and other statutory requirements.
Legitimate Interests: To ensure the efficient operation of our services.

4. Data Sharing We may share personal data to an external source, "Office Assist," which helps us deal with large volumes of calls during busy periods. Your data will never be shared with another third party.

Schools and educational institutions to coordinate meal provision.
Payment processors for handling financial transactions.
Relevant authorities when required by law, such as for health and safety purposes. We will never sell or share personal data for marketing purposes.

5. Data Storage and Retention Personal data is stored securely using appropriate technical and organizational measures to protect against unauthorized access, alteration, or loss. Data is retained only as long as necessary for the purposes outlined above or as required by law.

6. Data Subject Rights Individuals have the following rights concerning their personal data:

Access: To request a copy of the personal data we hold.
Correction: To update inaccurate or incomplete data.
Deletion: To request the removal of personal data, where legally permissible.
Objection: To object to certain processing activities.
Data Portability: To receive personal data in a structured, commonly used format.

To exercise these rights, please contact us using the details provided below.

7. Contact Information If you have questions or concerns about how we process personal data, or if you wish to exercise your rights, please contact:

Carambola Limited
Unit B5, Annacotty Business Park
Annacotty, Co. Limerick
V94 P681
Email Address: info@carambola.ie
Phone Number: 061 500200

8. Updates to this Statement We may update this Data Protection Statement from time to time to reflect changes in our practices or legal obligations. The latest version will always be available on our website or upon request.

Conclusion We take data protection seriously and are dedicated to safeguarding personal information. By providing school meal services, we aim to ensure a secure and compliant data environment for all stakeholders.