1. WHAT INFORMATION WE PROCESS ABOUT YOU
We collect, store and process your full name, email address, direct telephone numbers, postal/billing address, job title and place of work.
We also store information gathered using cookies. Cookies are small pieces of text that track your patterns of behaviour and store them in your web browser. Cookies are used to make your internet browsing more useful to you, by storing your preferences and enabling the delivery of relevant advertisements and functions to you.
You can choose to accept of decline cookies. Most web browsers accept cookies, but you can modify your browser settings to decline them if you prefer. This may prevent you from taking full advantage of our website.
2. WHEN WE COLLECT INFORMATION ABOUT YOU
3. WHY WE NEED TO COLLECT AND PROCESS YOUR DATA
There are a number of different lawful bases on which we rely on for collecting and processing personal data. These are as follows:
This means that we have received clear consent from you to process your personal data for a specific purpose. An example of this would be if you were to tick a box confirming that you would like to receive email newsletters. Your consent will be ‘granular’, which means you will be able to give separate consent for separate things (e.g. receiving emails, telephone calls, direct mail).
The consent lawful basis applies to our data collection through our website’s contact form, our newsletter signup form, and any competitions or surveys we organise.
If you are, or if you become, a customer of ours, we are contractually obliged to hold your personal data on record. This will allow us to communicate with you via email or telephone, in order to carry out the service you have requested from us.
Similarly, if you have requested a quotation from us to carry out a service, we are contractually required to process your data to deliver on our agreement.
We may need to collect and process your data, if we are required by law to do so. This can include passing on details of people involved in criminal or fraudulent activity.
Your data may be processed under the legitimate interests’ basis, in ways you would reasonably expect from us. This would have minimal privacy impact and would not affect your individual rights or freedom.
Examples include using information about your previous purchases from us to build a picture of your current situation and potential need for our services.
We will also use your email address and telephone number to contact you directly with marketing messages and educator pieces which we feel would be relevant and beneficial to you.
Legitimate interests covers our data sourcing from external GDPR compliant suppliers, inbound enquiries, being handed a business card, and social media engagement.
4. HOW WE USE YOUR PERSONAL DATA
5. WHO WE SHARE YOUR DATA WITH
Where necessary, your details may need to be shared with one of our third-party suppliers who provide us with an outsourced service.
Where possible, we aim to keep the relationship between our clients and suppliers anonymous, however for services such as delivery of an item we may need to pass on name and address details of an individual.
On these occasions, we will notify you of the third party that is involved and gain explicit consent before doing so.
Our suppliers may only use your data for the intended purpose and we work closely with them to ensure that your data is protected.
6. HOW WE STORE AND PROTECT YOUR INFORMATION
We apply careful consideration to how we store and protect data.
Your data is stored in Accounting Software on SQL Server in which we log your details, purchasing activity and notes from when any communication occurs with you. Our system is password protected with a limited number of log-ins and users.
Our electronic communication systems such as emails and social media channels are password protected with a limited number of administrators.
We monitor our systems regularly and carry out updates and maintenance where required, in order to strengthen the security of our storage and processes.
When we collect your personal data, we will keep it for as long as we feel is necessary for the purpose for which it was collected. This can be up to six years unless you request to opt out of our communications. It also includes our direct marketing activity that is covered by our ‘legitimate interests’ basis.
7. HOW YOU CAN REQUEST ACCESS OR CORRECTIONS TO YOUR PERSONAL DATA
You have the right to request a copy of the personal data that we hold about you, and to correct it if it is incorrect or incomplete. This will be free of charge.
If you would like to access the information we hold about you, please contact us at firstname.lastname@example.org or write to us at Unit 1B Pond Farm, New Years Green Lane, Harefield, Uxbridge, UB9 6LX
8. HOW YOU CAN REQUEST WITHDRAWAL OF YOUR PERSONAL DATA
There are a number of ways in which you can opt out of communications from us.