About this Policy

This privacy policy and general privacy notice has been drafted in accordance with the requirements of the General Data Protection Regulations (“GDPR”). This notice explains how we handle your personal data in all situations where it is collected, and sets out your privacy rights. It also explains how the law and our approach to privacy and data protection works to safeguard your information. This notice supplements any other privacy notices provided to you at the point of data collection and should be read in conjunction with those notices.

Information We Collect

We will collect, process, and store personal data provided directly by you. This may occur when you use our website, enquire about our services, become a customer or supplier, or in other interactions. Personal data includes any information that identifies you as an individual. Examples of such data include:

• Identity Data: Names, date of birth, gender, marital status, and usernames.
• Contact Data: Billing addresses, home or work address, email addresses, and phone numbers.
• Financial Data: Bank account and payment card details.
• Special Category Data: Information such as health, race, religion, or political opinions.
• Transaction Data: Details of payments made to or from you.
• Technical Data: Internet protocol (IP) address, browser type, time zone settings, and device data.
• Profile and Usage Data: Enquiries, feedback, and details on how you interact with our website and services.
• Marketing Data: Information about your preferences for receiving marketing communications from us.

How We Collect Your Personal Data

Data may be collected through various methods, including:

• Direct interactions: In person, by post, phone, or email.
• Automated technologies: Interaction with our website or online forms.
• Third parties: Data from publicly available sources or third-party providers.

Data Accuracy

It is important that the personal data we hold is accurate and up-to-date. Please inform us of any changes to your information.

Use of Your Information

We use your personal data for several purposes, including:

• Providing services and fulfilling contractual commitments.
• Communicating changes to our business, products, or services.
• Contacting existing customers with relevant service information.
• Sending marketing communications, where consent has been provided.
• Complying with legal obligations.
• Protecting our legitimate interests, where these do not override your rights.

Marketing-related data will only be used with your explicit consent, and we will always seek consent before sharing your data with third parties for marketing purposes.

Disclosure of Your Information

We may disclose personal data in the following circumstances:

• Regulatory bodies: To comply with legal requirements and assist in fraud prevention.
• Suppliers: To fulfil service contracts.
• Third-party marketing: With your consent, to share your data with selected third parties.
• Business sale: In the event of a sale or transfer of business assets.

We may also provide aggregated data to advertisers, but this will not include any information that can identify you personally.

Controlling the Use of Your Data

You can revoke or amend your consent for data processing at any time. Should you wish to do so, please contact us via email or postal address.

Data Storage and Transfer

Your personal data may be transferred and stored outside the European Economic Area (EEA), particularly if we use cloud services or suppliers based outside of the EEA. In such cases, we will ensure that your data is protected according to GDPR standards.

Security

While we strive to protect your personal data, the transmission of information via the Internet is not completely secure. We have put appropriate measures in place to protect your data, but cannot guarantee its security during transmission.

Data Retention

The duration for which we retain personal data depends on the reason for its collection. For example, we are legally required to keep certain types of data for a minimum of six years, including Contact, Identity, Financial, and Transaction Data. Marketing data will be retained until consent is withdrawn.

Your Rights

Under the GDPR, you have several rights regarding your personal data, including:

• Access to the data we hold about you.
• Requesting correction of inaccurate or incomplete data.
• Erasure of data where there is no lawful reason for us to retain it.
• Objecting to the processing of your data.
• Restricting how we process your data.
• Requesting data transfer to you or a third party.
• Withdrawing consent for data processing.

You can exercise these rights by contacting us via email or post.

Third-Party Links

Our website may contain links to third-party websites. Please be aware that we are not responsible for the privacy practices of these sites and encourage you to review their policies.

Complaints

If you have any concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). We encourage you to contact us first to resolve any issues.

Changes to This Policy

We may update this policy from time to time to reflect changes in our services or feedback from customers. Please review this policy regularly to stay informed about how we protect your data.

Version: January 2024