Updated 22 May 2018
Painttechnics North East is committed to protecting your personal information when you use services from us. We only use your personal information to administer your account and to provide the products and services you have requested from us. We will never sell, share or use your personal information other than as described here.
This policy sets out how we will use and share the information that you give us.
We aim to process information about you fairly and in a transparent manner and the aim of this document is to provide you with sufficient information for you to be able to understand what we are doing with your data. If you are unsure how we are handling information about you please contact the data controller using the contact details listed below.
When you provide such information, we are legally required to use your information in line with laws concerning the protection of personal information. This includes the Data Protection Act 1998 and the General Data Protection Regulation (GDPR), effective from 25th May 2018.
GDPR is Europe’s new framework for data protection. The EU’s GDPR website explains that the legislation is designed to harmonise data privacy laws across Europe and give greater protection and rights to individuals. Despite the UK’s plans to leave the EU, The UK still needs to comply with GDPR.
This means that all businesses that hold and process personal information need to have proper processes and policies in place for handling this type of data. That includes our business and your data.
In line with GDPR, Painttechnics North East have been working across our organisation to make improvements to our data security ahead of 25 May 2018.
Website Privacy Statement
Under the Data Protection Act and GDPR, we have a legal duty to protect any personal information we collect from you.
Painttechnics North East does not capture and store any personal information about individuals who access this web site, except where you voluntarily choose to give us your personal details via email by using an electronic form, or enquiring about any of our services. In these circumstances, any personal information you supply will only be used to provide the information or service you have requested. Personal information is not disclosed to third parties unless this is indicated on the web page and / or relevant form at the point of collecting information from you, or as required by law.
We automatically collect statistical data about usage patterns on our website. This information is not used to identify any individual. It is only collected to provide us with an understanding of the areas of interest on our site and kept only for as long as required for this purpose. All data is collected and stored in line with the Data Protection Act 1998.
The information that Painttechnics North East may collect about you online includes:
- The IP address of your computer
- Your internet browser details
- Your worldwide geographical location
- The date and time of your visit
- Which site referred you to Painttechnics North East’s website
- Search terms
- How long you stayed on our website
- The pages you looked at on our website
- Personal information that you choose to send us via our web form
This information is used to:
- Improve the information we provide via our site and how it is accessed
- Gain an insight into what information is important to our target audience
- Give visitors to our site a better user experience
You can set your browser not to accept cookies and there are websites that will tell how to remove cookies from your browser. In a few cases, some of our website features may not function if you remove cookies.
How and why we use information about you
We will only use your personal information to provide the services you have requested from us, subject to your instructions and the data protection law.
For business to business customers (B2B) our lawful reason for processing your personal information will be ‘legitimate interests,’ whereby we can process your personal information if we have a genuine reason and are not harming any of your rights and interests.
For individual customers our lawful reason for processing your personal information will be ‘a contract with the individual’, whereby we provide the services you have requested, or to fulfil obligations under an employment contract. This also includes steps taken at your request before entering into a contract.
If our work for you requires us to pass your information to our third-party service providers, subcontractors and other associated organisations for the purposes of completing tasks and providing the services to you on our behalf, we disclose only the personal information that is necessary to deliver the services. Contracts in place with these third parties require them to keep your information secure and not to use it for their own direct marketing purposes.
We collect information on our website only to process your enquiry and give advice based on that enquiry.
We will not use your information for marketing purposes and neither will we share it with companies so that they may offer you their products and services.
When you give us sensitive personal information, such as bank or credit card details, we take steps to make sure that it is treated securely. No details are stored on any database and information which is not required for a legitimate reason is securely destroyed.
Non-sensitive details, such as your email address, are sent over the Internet, which cannot be guaranteed to be 100% secure. Although we endeavour to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our own systems.
We will not send you information about our services and we do not store contact details on a marketing list.
Please note that unless encrypted, email messages sent via the internet may not be secure and could be intercepted and read by someone else. Please bear this in mind when deciding whether to include personal or sensitive information in any email messages you intend to send to us.
Holding your data
We are required to hold your data for core business purposes only.
Comprehensive reviews will be conducted periodically to ensure that no more than the minimum data required is held. Any data held in excess of the minimum will be securely destroyed.
Client and contact data
To provide services and information to customers and contacts, we hold and process personal data. The type of personal information we may hold on you is set out below.
Some of the personal information we may hold on you and how we use this information:
Your name To fulfil our contractual obligations to you.
Your telephone number To fulfil our contractual obligations to you.
Your email address To fulfil our contractual obligations to you.
Your location To fulfil our contractual obligations to you.
Access to your information
The Information Commissioner’s Office website (www.ico.org.uk) lists the data protection rights for individuals under GDPR. They include:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
You can request a copy of the information that we hold about you and also ask us to correct or remove some/all of your information.
If you would like a copy of some or all your personal information, please email firstname.lastname@example.org or write to us at the following address: Mr Nicholas Knox, Unit 11 Gurney Way, Aycliffe Business Park, Newton Aycliffe, Co Durham DL5 6UJ. Your request for information will be responded to within 28 days of receipt.
You may also ask us to correct, remove some/all of the information we hold about you by sending an email to: email@example.com. or writing to us at the above address.
It is your right to lodge an objection to the processing of your personal data, unless we demonstrate legitimate grounds which override your interest, rights and freedoms, or the processing is for the establishment, exercise or defence of a legal claim.
If you feel that your personal data has been processed in a way that does not meet GDPR compliance, you have the right to lodge a complaint with the relevant supervisory authority. The supervisory authority will then tell you of the progress and outcome of your complaint. The supervisory authority in the UK is the Information Commissioner’s Office.
How to contact us
- By email: firstname.lastname@example.org
- In writing to: Mr Nicholas Knox, Unit 11 Gurney Way, Aycliffe Business Park, Newton Aycliffe, Co Durham DL5 6UJ