Privacy Notice

1. Who We Are

Olidor Group Ltd ("we", "us") is the data controller for the personal data processed through this management portal. The Olidor Group encompasses Brusco Food Group Ltd, The Original Baker Ltd, and Karimix Ltd.

If you have any questions about how we handle your data, please contact:

2. What Data We Collect

When you use this portal, we process the following personal data:

• Account information — your name, email address, and role within the organisation
• Authentication data — login credentials (passwords are stored in hashed form only)
• Activity logs — records of your actions within the system, including login times and pages visited
• Business data you enter — tasks, KPIs, marketing content, and other data created as part of your job duties
• Technical data — IP address, browser type, and session information

3. Why We Process Your Data

We process your personal data on the following legal bases under UK GDPR:

4. How Long We Keep Your Data

• Account data — retained for the duration of your employment or engagement, and for up to 12 months after your account is deactivated
• Activity logs — retained for up to 24 months for security and audit purposes
• Business records — retained in accordance with our data retention policy and applicable legal requirements

5. Who We Share Your Data With

Your personal data may be shared with:

• Olidor Group companies — Brusco Food Group, The Original Baker, and Karimix where necessary for group-wide business operations
• Hosting providers — our portal is hosted on secure cloud infrastructure
• IT support — authorised personnel who maintain and support the system

We do not sell your personal data or share it with third parties for marketing purposes. Where we use third-party processors, appropriate data processing agreements are in place.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Hashed password storage using industry-standard algorithms
• Role-based access controls limiting data visibility
• Regular security reviews and monitoring

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure — request deletion of your personal data (subject to legal retention requirements)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, please contact info@olidorgroup.com.

8. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

9. Changes to This Notice

We may update this privacy notice from time to time. Any changes will be reflected on this page with an updated revision date. We encourage you to review this notice periodically.