top of page
High & Low logo

Privacy Policy

1. Important Information and Who We Are

This Privacy Policy explains how High & Low by Bobabeing Limited (“High & Low”, “we”, “us” or “our”) collects, uses, stores and protects your personal data when you visit our website, purchase products from us, contact us, subscribe to our marketing communications, or otherwise interact with us.

High & Low is a food brand offering high-protein, lower-carbohydrate, nutritionally balanced noodles with authentic Taiwanese flavours, developed and distributed by Bobabeing through the website www.highlownoodles.com.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, High & Low by Bobabeing Limited is the data controller in relation to your personal data.

This website is not intended for children, and we do not knowingly collect personal data relating to children.

It is important that you read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions, so that you are fully aware of how and why we are using your personal data.

2. Contact Details

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us using the details below:

High & Low by Bobabeing Limited
Unit 2, Fourways Trading Estate
Longbridge Road
Trafford Park
M17 1SW
United Kingdom

Phone: +44 758 733 9792
Website: www.highlownoodles.com
Email: hello@highlownoodles.com

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

3. The Personal Data We Collect

Personal data means any information relating to an identified or identifiable individual.

​

We may collect, use, store and transfer different categories of personal data about you, including:

​

Identity Data

This may include your first name, last name, title, username, or similar identifier.

​

Contact Data

This may include your billing address, delivery address, email address and telephone number.

​

Financial Data

This may include payment information necessary to process your order. Payment card details are processed securely via our third-party payment providers and are not stored by us unless required for lawful business purposes.

​

Transaction Data

This may include details about payments to and from you and other details of products you have purchased from us.

​

Technical Data

This may include internet protocol (IP) address, browser type and version, device type, time zone setting, operating system and platform, and other technology on the devices you use to access our website.

​

Usage Data

This may include information about how you use our website, products and services.

​

Profile Data

This may include your account details, purchases or orders made by you, preferences, feedback, and responses to surveys or promotions.

​

Marketing and Communications Data

This may include your preferences in receiving marketing from us and your communication preferences.

​

We do not knowingly collect any special category personal data unless you voluntarily provide it to us, and we do not require such information for ordinary customer interactions.

4. How Your Personal Data Is Collected

We use different methods to collect personal data from and about you, including:
 

Direct Interactions

You may provide personal data to us by filling in forms, creating an account, placing an order, subscribing to marketing communications, entering a competition, contacting us by email or telephone, or corresponding with us through social media or other channels.
 

Automated Technologies or Interactions

As you interact with our website, we may automatically collect Technical Data and Usage Data through cookies and similar technologies.
 

Third Parties

We may receive personal data about you from third parties such as:

  • payment service providers,

  • website and e-commerce platform providers,

  • delivery and logistics providers,

  • analytics providers,

  • advertising and marketing partners,

  • fraud prevention service providers.

5. How We Use Your Personal Data

We will only use your personal data where we have a lawful basis for doing so.
 

Most commonly, we will use your personal data in the following circumstances:

  • to register you as a customer;

  • to process and deliver your orders;

  • to manage payments, fees and charges;

  • to communicate with you regarding your orders or enquiries;

  • to manage our relationship with you;

  • to administer and protect our business and website;

  • to improve our website, products, services and customer experience;

  • to send marketing communications where permitted by law;

  • to detect and prevent fraud or other unlawful activity;

  • to comply with our legal and regulatory obligations.

6. Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases for processing your personal data:
 

Performance of a Contract

Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into such a contract. For example, when processing and delivering your order.
 

Legitimate Interests

Where processing is necessary for our legitimate interests, provided that your interests and fundamental rights do not override those interests. This includes operating and improving our website, managing our business, preventing fraud, and maintaining customer relationships.
 

Compliance with a Legal Obligation

Where processing is necessary for compliance with a legal or regulatory obligation to which we are subject, including tax, accounting and consumer protection requirements.
 

Consent

Where required by law, we will rely on your consent, for example in relation to certain marketing communications or non-essential cookies. You have the right to withdraw consent at any time.

7. Marketing Communications

We may use your Identity Data, Contact Data, Transaction Data, Technical Data, Usage Data and Marketing and Communications Data to form a view on what products, services or offers may be relevant to you.
 

Where permitted by law, we may send you marketing communications by email or other electronic means. Where consent is required, we will obtain your consent before doing so.
 

You may opt out of receiving marketing communications at any time by:

  • clicking the unsubscribe link in any marketing email; or

  • contacting us directly using the contact details above.

We do not sell your personal data to third parties for their own marketing purposes.

8. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users of our website, enhance your browsing experience, analyse website traffic, and support website functionality and marketing activity.
 

Cookies may be used to:

  • enable essential website functions;

  • remember your preferences;

  • analyse website performance and visitor behaviour;

  • support advertising and retargeting activities.
     

You can control cookies through your browser settings. However, if you disable or block certain cookies, parts of the website may not function properly.
 

A separate Cookie Policy or cookie banner may also apply when you use our website.

9. Disclosure of Your Personal Data

We may share your personal data with the following categories of third parties where necessary for the purposes set out in this Privacy Policy:

  • website hosting and e-commerce platform providers, including Wix.com;

  • payment processing providers;

  • delivery and logistics partners;

  • IT support and system administration providers;

  • analytics and marketing service providers;

  • professional advisers including accountants, insurers, lawyers and auditors;

  • regulators, governmental bodies, law enforcement agencies or courts where required by law.
     

We require all third parties to respect the security of your personal data and to process it in accordance with the law. We do not permit third-party service providers to use your personal data for their own purposes except where they act as independent controllers under their own privacy terms.

10. International Transfers

Some of our external service providers may be based outside the United Kingdom.
 

Where we transfer your personal data outside the UK, we will ensure that an adequate level of protection is afforded to it by using appropriate safeguards in accordance with UK data protection law, including where appropriate:
 

  • adequacy regulations;

  • international data transfer agreements; or

  • other lawful transfer mechanisms.

11. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, use, alteration or disclosure.
 

Access to your personal data is limited to those employees, agents, contractors and third parties who have a business need to know. They will only process your personal data on our instructions and are subject to duties of confidentiality.
 

We have procedures in place to deal with any suspected personal data breach and will notify you and/or the ICO where we are legally required to do so.

12. Data Retention

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, tax, accounting or reporting requirements.
 

In particular, we may retain basic customer, order and transaction data for up to six years after you cease being a customer, where necessary to comply with legal and accounting obligations or to resolve disputes.
 

In some cases, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

13. Your Legal Rights

Under UK data protection law, you may have the following rights in relation to your personal data:
 

  • the right to request access to your personal data;

  • the right to request correction of inaccurate or incomplete personal data;

  • the right to request erasure of your personal data;

  • the right to object to processing where we rely on legitimate interests or for direct marketing;

  • the right to request restriction of processing;

  • the right to request the transfer of your personal data to you or to a third party;

  • the right to withdraw consent at any time where we rely on consent to process your personal data.
     

If you wish to exercise any of these rights, please contact us using the details set out above.
 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise any of your other rights.
 

You will not usually have to pay a fee to exercise your rights, although we may charge a reasonable fee or refuse to comply with your request if it is manifestly unfounded, repetitive or excessive.

14. Third-Party Links

Our website may contain links to third-party websites.
 

We are not responsible for the privacy practices of those websites. We recommend that you read their privacy policies before providing any personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
 

Any changes will be posted on this page, and your continued use of our website will mean you accept those updates.

bottom of page