Privacy Policy

Your privacy is important to us. Bagelstein is committed to respecting your privacy in accordance with all applicable laws and regulations regarding the personal information we may collect about you, including on our website, https://www.bagelstein-franchise.co.uk , and on other sites we own and operate.

Personal information is any information about you that can be used to identify you. This includes information about you as an individual (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

If our site contains links to third-party websites and services, please be aware that these sites and services have their own privacy policies. After following a link to any third-party content, you should read their privacy policy information regarding how they collect and use personal information. This privacy policy does not apply to any of your activities after you leave our site.

This policy has been in effect since March 12, 2026.

Last updated: March 12, 2026

Information we collect

The information we collect falls into one of two categories: information “provided voluntarily” and information “collected automatically”.

Information “voluntarily provided” refers to any information you consciously and actively provide to us when you use or participate in any of our services and promotions.

The information “collected automatically” refers to all information automatically sent by your devices when accessing our products and services.

Log data

When you visit our website, our servers may automatically record standard data provided by your web browser. This may include your device’s Internet Protocol (IP) address, browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

Furthermore, if you encounter any errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error occurred, and other technical information related to the problem. You may or may not receive notification of such errors, including when they occur, whether they have occurred, or what the nature of the error is.

Please be aware that although this information may not be personally identifying on its own, it may be possible to combine it with other data to personally identify individual persons.

Device data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

• Device type
• Operating system
• Unique device identifiers
• Device settings
• Geolocation data

The data we collect may depend on your individual device and software settings. We recommend that you check your device manufacturer’s or software provider’s policies to understand what information they share with us.

Personal information

We may ask you for personal information – for example, when you submit content to us, when you subscribe to our newsletter, when you participate in one of our competitions, sweepstakes or promotions, or when you contact us – which may include one or more of the following:

• Name
• E-mail
• Date of birth
• Phone/mobile number
• Home/Postal Address

Legitimate reasons for processing your personal information

We only collect and use your personal information when we have a legitimate reason to do so. In such cases, we only collect the personal information that is reasonably necessary to provide our services.

Information Collection and Use

We may collect personal information when you perform any of the following actions on our website:

• Participate in one of our contests, competitions, prize draws and surveys
• Sign up to receive our updates by email or on our social media channels
• Use a mobile device or web browser to access our content
• Contact us via email, social media, or any similar technology
• When you mention us on social media

We may collect, hold, use and disclose information for the following purposes, and personal information will not be processed in a manner incompatible with those purposes:

• to provide you with the main features and services of our platform
• to allow you to personalize or customize your experience on our website
• to deliver products and/or services to you
• to get in touch and communicate with you
• for analytics, market research and business development, including to operate and improve our website, related applications, and related social media platforms
• to review your job application
• for internal record-keeping and administrative purposes
• to organize competitions, prize draws, and/or offer additional benefits to you
• to attribute any content (e.g., posts and comments) that you submit that we publish on our website
• For security and fraud prevention, and to ensure that our sites and applications are safe, secure, and used in accordance with our terms of use.

We may voluntarily combine personal information you provide and that is automatically collected with general information or research data we receive from other reliable sources. For example, our marketing and market research activities may reveal data and insights, which we may combine with information about how visitors use our site to improve our site and your experience on it.

Security of your personal information

When we collect and process personal information, and while we retain that information, we will protect it by commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Although we will do our best to protect the personal information you provide to us, we advise you that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for choosing any password and its overall security strength, ensuring the security of your own information within the limits of our services. For example, by ensuring that you do not make your personal information publicly available through our platform.

How long we keep your personal information

We retain your personal information only for as long as we need it. This period may depend on how we use your information, as outlined in this privacy policy. For example, if you provided us with personal information such as an email address when contacting us about a specific inquiry, we may retain this information for the duration of your open inquiry and for our own records so that we can efficiently process similar inquiries in the future. If your personal information is no longer needed for this purpose, we will delete it or anonymize it by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting or reporting obligation, or for archiving purposes in the public interest, scientific or historical research, or statistical purposes.

Children’s privacy

We do not target any of our products or services directly to children under the age of 13 and we do not knowingly collect personal information from children under the age of 13.

Disclosure of personal information to third parties

We may disclose personal information to:

• a parent company, subsidiary or affiliate of our company
• third-party service providers to enable them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, analysts, error loggers, debt collectors, maintenance or troubleshooting service providers, marketing service providers, professional advisors and payment system operators.
• our employees, contractors, and/or related entities
• our existing or potential agents or business partners
• sponsors or promoters of any competition, raffle, or promotion that we organize
• Credit reporting agencies, courts, regulatory authorities, in the event that you do not pay for the goods or services we have provided to you
• courts, regulatory authorities, law enforcement agencies, as required by law, in connection with any current or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
• third parties, including agents or subcontractors who help us provide information, products, services, or direct marketing to you
• third parties to collect and process data
• an entity that buys, or to which we transfer, all or substantially all of our assets and activities

The third parties we currently use include:

• Google Analytics
• Microsoft Clarity
• Mailjet (Sinch Email)
• Hey Pongo SAS
• Airtable (Formagrid Inc)

International transfers of personal information

The personal information we collect is stored and/or processed in France, Germany, Ireland, the Netherlands, the United States of America, or wherever we or our partners, affiliates, and third-party suppliers have facilities.

The countries in which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you initially provided the information. If we transfer your personal information to third parties in other countries: (i) we will carry out such transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this privacy policy.

Your rights and control over your personal information

Your choice: By providing us with personal information, you understand that we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You are not required to provide us with personal information; however, if you do not, it may affect your use of our website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as described in this privacy policy. If you are a third party providing personal information about another person, you represent and warrant that you have that person’s consent to provide us with the personal information.

Marketing permission: If you have previously agreed to us using your personal information for direct marketing purposes, you can change your mind at any time by contacting us using the contact details below.

Access: You can request details of the personal information we hold about you.

Correction: If you believe any information we hold about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us using the contact details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or outdated.

Non-discrimination: We will not discriminate against you for exercising your rights over your personal information. Unless your personal information is necessary to provide you with a particular service or offer (for example, providing user support), we will not refuse you goods or services and/or charge you different prices or rates for goods or services, including by granting discounts or other benefits, imposing penalties, or providing you with a different level or quality of goods or services.

Downloading personal information: We provide a way for you to download the personal information you have shared on our site. Please contact us for more information.

Data breach notification: We will comply with applicable laws in the event of a data breach.

Complaints: If you believe we have breached any relevant data protection law and wish to make a complaint, please contact us using the contact details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond in writing, outlining the outcome of our investigation and the steps we will take to address your complaint. You also have the right to contact a regulatory body or data protection authority regarding your complaint.

Unsubscribe: To unsubscribe from our email database or from communications (including marketing communications), please contact us using the contact details provided in this privacy policy, or unsubscribe using the unsubscribe methods provided in the communication. We may need to ask you for specific information to help us confirm your identity.

Use of cookies

We use cookies to collect information about you and your activity on our site. A cookie is a small piece of data that our website stores on your computer and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on the preferences you have specified.

Please refer to our Cookie Policy for more information.

Business transfers

If we or our assets are acquired, or in the unlikely event that we become insolvent or bankrupt, we will include data, including your personal information, among the assets transferred to any acquiring parties. You acknowledge that such transfers may occur, and that any acquiring parties may, to the extent permitted by applicable law, continue to use your personal information in accordance with this policy, which they will be bound to comply with as it forms the basis of all our ownership and use rights in and to that information.

Limitations of our policy

Our website may contain links to external sites that are not operated by us. Please be aware that we have no control over the content and policies of these sites, and cannot accept any responsibility or liability for their respective privacy practices.

Changes to this policy

At our discretion, we may modify our Privacy Policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this Privacy Policy, we will post the changes here at the same link you use to access this Privacy Policy.

If required by law, we will obtain your permission or give you the opportunity to opt in or opt out, as appropriate, of any further use of your personal information.

Additional information for compliance with the General Data Protection Regulation (GDPR) (EU)

Data Controller / Data Processor

The GDPR distinguishes between organizations that process personal information for their own purposes (known as “data controllers”) and organizations that process personal information on behalf of other organizations (known as “data processors”). We, Bagelstein, located at the address provided in our Contact Us section, are a Data Controller with respect to the personal information you provide to us.

Legal basis for the processing of your personal information

We will only collect and use your personal information when we have a legal right to do so. In that case, we will collect and use your personal information lawfully, fairly, and transparently. If we request your consent to process your personal information and you are under 16 years of age, we will seek the consent of your parent or legal guardian to process your personal information for that specific purpose.

Our legal basis depends on the services you use and how you use them. This means we only collect and use your information on the following grounds:

Your consent

When you give us your consent to collect and use your personal information for specific purposes, you can withdraw your consent at any time using the methods we provide; however, this will not affect the use of your information that has already taken place. You may consent to provide your name and contact details to participate in a prize draw or promotion. While you can withdraw your participation at any time, this will not affect any selections or evaluations already made. If you have any further questions about how to withdraw your consent, please feel free to contact us using the contact details provided in the Contact Us section of this Privacy Policy.

Execution of a contract or transaction

When you have entered into a contract or transaction with us, or to take preparatory steps before entering into a contract or transaction with you. For example, if you contact us with an inquiry, we may need personal information such as your name and contact details in order to respond to your inquiry.

Our legitimate interests

When we deem it necessary for our legitimate interests, such as providing, operating, improving, and communicating our services. We consider our legitimate interests to include research and development, understanding our audience, marketing and promoting our services, measures taken to operate our services effectively, marketing analysis, and measures taken to protect our legal rights and interests.

Compliance with the law

In certain circumstances, we may be legally obligated to use or retain your personal information. These circumstances may include (but are not limited to) court orders, criminal investigations, government requests, and regulatory obligations. If you have any further questions about how we retain personal information to comply with the law, please feel free to contact us using the contact information provided in the Contact Us section of this Privacy Policy.

International transfers outside the European Economic Area (EEA)

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA is protected by appropriate safeguards, for example by using standard contractual clauses approved by the European Commission, or by using binding corporate rules or other legally accepted means.

Your rights and control over your personal information

Limitation: You have the right to request that we limit the processing of your personal information if (i) you are concerned about the accuracy of your personal information, (ii) you believe that your personal information has been processed unlawfully, (iii) you need us to retain the personal information solely for the purposes of legal proceedings, or (iv) we are considering your objection to the processing based on our legitimate interests.

1. You are concerned about the accuracy of your personal information;
2. you believe that your personal information has been processed unlawfully;
3. you need us to retain personal information solely for the purposes of legal proceedings; or
4. We are examining your objection to the processing based on our legitimate interests.

Objection to processing: You have the right to object to the processing of your personal information based on our legitimate interests or the public interest. If you do so, we must demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms in order to continue processing your personal information.

Data portability: You may have the right to request a copy of the personal information we hold about you. Where possible, we will provide this information to you in a CSV or other easily readable machine-readable format. You may also have the right to request that we transfer this personal information to a third party.

Deletion: You may have the right to request that we delete the personal information we hold about you at any time, and we will take reasonable steps to remove your personal information from our current records. If you request that we delete your personal information, we will inform you of the impact of the deletion on your use of our website or our products and services. There may be exceptions to this right for specific legal reasons, which we will explain to you if applicable in response to your request. If you terminate or delete your account, we will delete your personal information within 7 days of deleting your account. Please note that search engines and similar third parties may retain copies of your personal information that has been made public at least once, such as certain profile information and public comments, even after you have deleted the information from our services or deactivated your account.

Additional disclosures for compliance with the Australian Privacy Act (AU)

International transfers of personal information

When the disclosure of your personal information is subject only to Australian privacy laws, you acknowledge that certain third parties may not be regulated by the Australian Privacy Act and the Privacy Principles. You acknowledge that if such a third party engages in an act or practice that contravenes the Australian Privacy Principles, it will not be liable under the Privacy Act, and you will not be able to seek redress under the Privacy Act.

Contact us

For any questions or concerns regarding your privacy, you can contact us using the following details:

Jean-Christian Trapp
https://www.bagelstein.com/contact/