1. Why this privacy notice?
Widdop Bingham & Co Ltd is a “data controller”. This means that we are required under data protection legislation to notify you of how we will process your personal data. This notice will explain how we collect your personal data, its use, storage, transfer and security. We will also explain what rights you have in relation to how we process your personal data. It is important that you read this notice, together with any other privacy notice we may provide, so that you are aware of how and why we are processing your personal data. This notice does not form part of any contract to provide services. We may update this notice at any time.
2. What are our obligations to you in relation to how we process your personal data?
We are required by law to ensure that when processing any of your personal data that it is:
• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept in a form which permits you to be identified for only as long as necessary for the purposes we have told you about.
• Kept securely.
3. What personal data will we collect, use and store about you?
• Your name, salutation, (business-) addresses, contact numbers, and (business) email addresses.
• Location of employment or workplace.
• CCTV footage obtained through electronic means to monitor the car park(s) and reception.
4. How do we collect your personal data?
We collect your personal data by a variety of means. You can fill in a dorm on our website, you could call our customer services or you could have given us your details in an email or via a business card.
5. How will we use your personal data?
For the most part we will use your personal data for one of the following lawful bases:
a) Where we need to perform the business relationship we have entered into with you, for instance if you order products from us.
b) Where we need to comply with a legal obligation.
There are other rare occasions where we may use your personal data, which are:
c) Where we need to protect your interests (or someone else’s interests).
d) Where it is needed for official purposes.
6. When will we use your personal data?
We will use your personal information for specific purposes. The list below describes the purpose of our processing, the personal data involved (from clause 3 above) and the lawful basis for our processing (from clause 5 above):
Providing relevant information on our products (New products, Sale, Exhibitions, etc.)
Sending you information on orders placed, product deliveries and invoice enquiries.
Complying with health and safety obligations, completion of accident book and RIDDOR reporting
Prevention of fraud through CCTV monitoring
Gathering data analytics to assess conversion, retention and attrition rates
It’s possible that some of the grounds for processing will overlap.
7. Your failure to provide information
We will only ask you to provide information which we believe is necessary for the performance of the business relationship (for example business bank account details) or our associated legal obligations. If you fail to provide certain information when requested we may not be able to meet our contractual obligations to you or we may not be able to fulfil our legal obligations.
8. What happens if we need to use your personal data for a new purpose?
We will only use your personal data for the stated purposes, unless we consider that there is a need to use it for another reason and that reason is compatible with the original purpose. However, if we consider that it is necessary and reasonable to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.
There may be circumstances where we have to process your personal data without your knowledge or consent, where this is required by law and in compliance with the above rules.
9. Will we share your personal data with third parties?
In order to meet our legal obligations connected with your business relationship it is necessary to share your personal information with certain third parties (such as distribution companies). We also need to share your data when we have legitimate business reasons for doing so and also where it is necessary in order to perform your business contract.
10. Third party service providers and data security
Third party service providers are only permitted to process your personal data in accordance with our specified instructions. They are also required to take appropriate measures to protect your privacy and personal information. We do not allow your information to be used by the third parties for its own purposes and business activities.
11. Will we transfer your personal data outside of the European Economic Area (EEA)?
We do not transfer personal data outside the EEA
12. How do we ensure your personal data is secure?
We take your privacy and protection of data very seriously. Consequently, we have put in place appropriate security measures to prevent unauthorised use of your personal data. Details of the measures which are in place can be obtained from the company on request. We will notify you and any applicable regulator of any suspected unauthorised use of your personal data.
13. How long will we keep your personal data?
We will retain your personal data for as long as is necessary to fulfil the purposes for which it was collected for. Details of retention periods for specific purposes are available in our data retention policy which is available from the company on request. When your business relationship comes to an end with our business we will either retain or securely destroy your personal data in accordance with our data retention policy or other applicable laws and regulations.
14. Your duty to inform us of any changes
In order that we can ensure that the personal data we hold in relation to you is accurate, it is important that you keep us informed of any changes to that data.
15. What rights do you have in respect of how we use your personal data?
Subject to legal limitations you have the right to:
• Request access to your data: You can ask us to provide a copy of the personal data we hold about you.
• Request corrections to be made to your data: If you think that your personal data is incomplete, inaccurate you can ask us to correct it.
• Request erasure of your data: If you consider there is no lawful basis for us to continue processing your data you can ask for that data to be deleted or removed.
• Object to the processing of your data: If our lawful basis for processing your data relates to a legitimate business interest (or third party interest) you can raise an objection to that interest. You can also object to us using your information for direct marketing purposes.
• Request that processing restrictions be put in place: If you believe that your information is being processed without a lawful reason or that the information is incorrect you can request that a freeze/restricting is placed on the processing of the information until your concerns are addressed.
• Request a transfer of your personal data: You can ask us to transfer your personal data to a third party.
If you wish to exercise any of the above rights please contact the company in writing.
16. Will I have to pay a fee?
You will not be expected to pay a fee to obtain your personal data unless we consider that your request for access to data is unfounded or excessive. In these circumstances we may charge you a reasonable fee or refuse to comply with your request.
17. Confirmation of identity
Whenever you make a request for access to personal data, we may request specific information to confirm your identity. This is usually done to ensure that we are releasing personal data to the correct person.
18. Right to withdraw your consent
If we have asked for your written consent to obtain information, you have the right to withdraw your consent at any time. To withdraw your consent please contact the company or click the unsubscribe link in any email, addressed to you. Once we receive your notice of withdrawal we will cease processing your data unless we have any other lawful basis on which to continue processing that data.
19. Important information about this privacy notice
We reserve the right to amend or update this privacy notice at any time. We will provide you with a new notice when we make any updates.
20. How to make a complaint
To exercise all relevant rights, queries or complaints please in the first instance contact our sales team on firstname.lastname@example.org or contact us on +44 161 688 1226 . If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 03031231113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.