T&G Global Limited Privacy Statement – Europe & the UK

Within this Privacy Statement we explain how we process your personal data when you interact with us by:

• using our products and services, including visiting our physical sites;
• using our digital platforms which include our websites, portals and apps (“Digital Platforms“) and the various ways we interact with you online;
• applying to contract with us;
• responding to competitions, surveys or promotions; and
• interacting or communicating with us in any other way e.g. phone, email, other online methods.

We will only process personal data for a lawful purpose, in ways that are fair and not unreasonably intrusive and only if the personal data is necessary for that purpose. Our processing of your personal data will only be in accordance with this Privacy Statement.

You may choose not to provide personal data to us. However, if you do not provide the personal data requested, we may not be able to:

• provide or continue to provide products or services to you;
• process your employment or contracting application; or
• provide access to some or all of our Digital Platforms.

What personal data do we collect and use and why?

What personal data is collected?	Why?	Lawful basis
Customers
Name, Address, Telephone number, Email address (together, “Contact Details”). Call recordings where enquiries are made over the phone (“Call Records”). Credit history or other relevant financial information relating to creditability (together, “Financial Information”)	We use your Contact Details to enable us to: (i) provide the products and services you have requested; (ii) open a customer account for you; (iii) respond to communications from you, including over the phone; and (iv) facilitate your participation in any promotion or competition. We use Call Records for quality control and staff training purposes. We use your Financial Information to enable us to provide the products and services you have requested.	As necessary for our legitimate interests in managing our business and client relationships and ensuring excellent customer service or to fulfil our contractual obligations. As necessary for us to comply with our legal obligations.
Suppliers
Contact Details Call Records Taxpayer identification number Financial Information	We use your Contact Details to enable us to: (i) open a vendor account for you; (ii) receive goods and services from you; and (iii) respond to communications from you including enquiries over the phone. We use Call Records for quality control and staff training purposes. We use your Financial Information to enable us to provide the products and services you have requested.	As necessary for our legitimate interests in managing our business and supplier relationships and ensuring excellent customer service or to fulfil our contractual obligations. As necessary for us to comply with our legal obligations.
Contractors
Contact Details Call Records Taxpayer identification number Financial Information	We use your Contact Details to enable us to: (i) receive goods and services from you; and (ii) respond to communications from you including enquiries over the phone. We use Call Records for quality control and staff training purposes. We use your Financial Information to enable us to pay you for the products and services we have received.	As necessary for our legitimate interests in managing our business and contractor relationships and ensuring excellent customer service or to fulfil our contractual obligations. As necessary for us to comply with our legal obligations.
Website User
Contact Details Any information provided to us through your use of the website such as application to a survey, promotion or competition (“Website Information”). Information relating to how you use the website (“Website Improvement Information”)	We use your Contact Details to contact you in relation to your use of the website, for example where you have entered a competition or survey or signed up to a newsletter. We use the Website Information in order to facilitate any of the website products and services which are made available to users and to conduct research, statistical analysis and service improvement. We use the Website Improvement Information in order to improve the user experience of our website.	We process your Contact Details, Website Information, and Website Improvement Information as necessary for our legitimate interests in managing our business and ensuring an excellent website user experience. We process your Contact Details on the basis of your consent in order to provide you with a newsletter if you have signed up to it.
Visitor to our locations
Your image as part of our collection via CCTV.	We use CCTV information in order to protect and secure our physical premises, staff and goods.	Where process your image via CCTV as necessary for our legitimate interest in ensuring the security of our premises.

How and when we might collect personal data

Collection from you

We collect personal data in different ways, but most of this personal data we collect will be directly from you in circumstances where you voluntarily provide personal data to us such as on or around the time you contact us or purchase a product or service from us. For example, when you:

• open a vendor or customer account;
• apply for employment with us;
• visit any of our locations, or talk to us face to face (please note that unless otherwise specified, audio recordings are not captured as part of the footage);
• phone us or our customer service team;
• write to us — for example, by letter, email, SMS, follow or participate in our social media;
• request, get or use our products or services, or products and services you get through us;
• complete one of our forms — such as a customer registration, credit application, competition or survey form;
• use our Digital Platforms e.g. websites or apps;
• subscribe to any update services we currently or may provide in the future; and
• participate in our promotions and competitions.

We may also collect personal data about how you use third-party websites containing our content. You can learn more about how we collect this information in Digital Platforms, Cookies and Analytics.

Collection from third parties

We may also collect personal data about you from third parties where this is permitted by law, including from:

• credit reporting agencies;
• government agencies (such as for identity or compliance checks);
• law enforcement agencies where required for security checks;
• publicly available sources, including public registers, newspapers, online sources (such as open social media); and
• third parties you authorise to provide information to us (for example credit checking agencies).

Where we collect personal data from someone other than you, we will take reasonable steps (including by the provision of this privacy statement) to notify you at or before the time of collection, or as soon as reasonably practicable afterwards, to ensure you are aware of:

• our identity and contact details;
• the purpose for which the information is collected and the applicable legal basis for processing (along with any applicable legitimate interests);
• the categories of personal data collected;
• the intended recipients of the information;
• if applicable, information about any international transfers;
• the retention period of that personal data;
• your rights in respect of that personal data; and
• the source of the personal data.

We may be legally or otherwise required to contact you for service messages which we need to send you. If you wish to stop or change the channel in which we contact you, please contact us.

Who might your personal data be disclosed to?

Depending on the product or service we provide to you, we may disclose your personal data to other parties in certain circumstances. The parties to whom we may share your personal data and the purposes for sharing are as follows:

Purpose for sharing	Personal data shared	Organisations shared with
To facilitate the provision of products or services you seek or have expressed an interest in.	Contact Details. Your preferences in relation to specific products and services.	Other product and service providers. Other members of the T&G Global Group comprising T&Gs parent companies and subsidiaries (the “T&G Group”). Credit reference agencies. A person acting on your behalf, including an adviser or similar.
Where we need to provide financial and other business information required by law, to obtain finance, to evaluate our financial and operational health or to arrange insurance cover.	Financial Information. Taxpayer Identification number	auditor and regulators as required by law; financial institutions; insurance organisations an authorised person acting on your behalf, including an adviser or similar;

We will not share your personal data with Third Parties other than for the purposes set out above unless one of the following conditions or reasons apply:

• the disclosure is required to fulfil any of the purposes set out in this Privacy Statement;
• the disclosure is required to comply with applicable law. For example, where disclosure to Third Parties or government authorities is required by applicable law.
• The disclosure is for our reasonable belief that such action is necessary to protect or defend the legal rights or property of T&G, our Sites or Apps and the users of them; or in an emergency to protect the health and safety of our Site’s or App’s users or the general public.

International transfers

Some of the Third Parties to whom we disclose personal data are located outside the UK or European Economic Area (EEA). Where we transfer personal information to a third country or international organisation, we ensure appropriate safeguards are in place, such as standard contractual clauses approved under UK GDPR or EU GDPR.

Automated decision making

We do not use your personal data for solely automated decision-making, including profiling, that produces legal or similarly significant effects, unless permitted by law and with appropriate safeguards.

The below statements provide details of our use of AI tools:

• We may use artificial intelligence (“AI“) tools provided by third party vendors to assist with certain business functions, including the creation of marketing content such as copy, images and videos.
• We do not use your personal data to train any AI tools.
• All AI-generated marketing content is reviewed and approved before use.
• Where AI has been used for marketing purposes this will be clearly disclosed.

How do we secure your personal data?

We ensure there are reasonable security safeguards in place to prevent loss, misuse or disclosure of personal data.

Personal data may only be accessed by T&G employees, contractors, professional advisors, authorised third parties, and other service providers on a need-to-know basis, for the purpose(s) for which the personal data has been collected and only in support of legitimate purposes.

We will use all reasonable endeavours when selecting and engaging third parties to whom we will disclose your personal data to ensure that they meet the privacy standards required by Applicable Privacy Law.

We also take reasonable precautions to protect your personal data, including regularly assessing and addressing risks of misuse, interference, loss and unauthorised access, and conducting regular reviews and audits of our security measures.

How long is personal data retained?

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, and accounting obligations. Retention periods vary depending on the data type and are reviewed regularly.

If you believe we no longer have the right to retain your personal data, please contact us at and we will assess your request.

How do I access my personal data?

You have the right to:

• request confirmation of whether we hold personal data about you;
• request access to your personal data;
• request correction of any personal data that you believe is inaccurate, out of date or incomplete;
• request deletion of your personal data (“right to be forgotten”) in certain circumstances;
• request restriction of processing;
• object to processing, in certain circumstances, including direct marketing;
• request data portability; and
• withdraw your consent at any time (where processing is based on consent).

These rights apply regardless of whether the information was collected directly from you or from a third party.

We will respond to requests for access to personal data as soon as reasonably practicable and in accordance with our legal obligations. To make a request please contact us.

How can I correct my personal data?

Before using or disclosing personal data, we will take all reasonable steps to ensure it is accurate, complete, relevant, and up to date.

If you believe we hold incorrect personal data you can ask us to correct this by providing the details you believe are incorrect and any new information you would like recorded in its place. Please contact us if you would like to request a correction.

We may collect and use your personal data by way of cookies, as further detailed in our Cookie Statement linked here.

T&G Global Limited is the data controller for the purposes of the UK GDPR and EU GDPR. If you have questions or comments about this Privacy Statement, or if you wish to exercise your rights under the UK GDPR and EU GDPR (including access or correction), please contact the T&G Privacy Officer using the details below.

T&G Privacy Officer

Email:

Address: PO Box 56, Shortland Street, Auckland 1140, New Zealand

We have appointed representatives in the European Union/United Kingdom in accordance with Article 27 GDPR. For the purposes of the EU GDPR, our representative is T&G Europe, 3 rue Mary Lafon, F-82130 Lafrançaise, France. For the purposes of the UK GDPR, our representative is Steve Maxwell, Worldwide Fruit – Spalding, Apple Way, Wardentree Lane, Pinchbeck, Lincolnshire, PE11 3BB.

Complaints

If you want to make a complaint about how we have handled your personal data, we ask that you contact the Privacy Officer in the first instance using the details provided above, who will investigate the matter and report back to you. We may ask you to put your complaint in writing and to provide relevant details. We will respond to your complaint in a reasonable period of time, usually within 30 days. If you are still not satisfied after our response or believe we are not using your personal data in line with the law, you also have the right to complain to the regulator.

Where you are in the EU, you may contact your local Supervisory Authority — a full list of Supervisory Authorities in the EU can be found here. In the UK, the relevant regulator is the ICO, and you can make your complaint via the ICO’s website here.