To comply with the requirements of the General Data Protection Regulation (GDPR), this policy outlines the specific requirements and business practices around privacy and data processing by Norwich Electrical Company ltd.
- WHAT INFORMATION WE COLLECT
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows;
- Identity Data includes First Name, Last Name, Title
- Contact Data includes Email Address / Telephone number
- Demographic data includes Address/Postcode
Personal data, or personal information, means any information about an individual from which that person can be identified.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Where we need to collect your personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
- HOW DO WE COLLECT THIS PERSONAL INFORMATION?
We use different methods to collect data from and about you including;
- Directly. You may give us your identity and contact by filling in forms or by corresponding with us by post, phone, email or otherwise.
- Request us to contact you to provide a quote. [Apply for our products or services;]
If you are an employee or provide services to us, we will collect information in line with your contract of employment or contract for services.
If you have purchased goods [or services] from us, we will collect information about your purchase history and projects you have delivered.
We obtain personal information from you when you use our website, enquire about our activities, register with us, send or receive an email, ask a question or otherwise provide us with personal information.
We may also collect technical information relating to your use of our website, including your browser type or the Internet Protocol (IP) address used to connect your computer to the internet.
We also gather general information about the use of our website, such as which pages users visit most often and which services, events or facilities are of most interest. We may also track which pages users visit when they click on links in emails. We may use this information to personalise the way our website is presented when users visit, to make improvements to our website and to ensure we provide the best service for users. Wherever possible we use aggregated or anonymous information which does not identify individual visitors to our website.
- WHY DO WE COLLECT THIS INFORMATION?
We collect this information for the purpose of enabling our customers to demonstrate compliance with the standards they wish to be certified for, or the products and services they want. The lawful basis for which we process your information is:
- your consent;
- processing is necessary for the performance of a contract to which you are a party. If you fail to provide this information, we may be unable to perform the contract;
- processing is necessary for compliance with our legal obligations as a Limited Liability Partnership. You are obliged to provide this information because so we can legally fulfil the products and services you have requested. If you fail to provide this information, we are unable to fulfil your order
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
- processing is necessary for the purpose of the legitimate interest pursued by us or a third party, except where your rights as a data subject override our legitimate interest. The legitimate interest we rely on is the protection of consumers and the right of consumers to achieve the service they have paid for – we may engage with Trading Standards, authorised departments of Government and Insurance bodies pursuant to the achievement of consumer rights and protection.
4. HOW DO WE USE YOUR PERSONNAL INFORMATION
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances
- Performance of Contract this means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
- For administration purposes including to create an account for you if you register with us and or to notify you about changes to our services.
- Legitimate Interest this means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
- Comply with a legal or regulatory obligation this means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
- For Marketing – At this time we do not participate in direct marketing
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
- WHO DO WE SHARE YOUR PERSONAL DATA WITH
Your personal data will be treated as strictly confidential
We may need to provide your information to our contractors and suppliers who provide services on our behalf, to the extent necessary to enable you to receive those services.
We may share your information with the service providers or other associated organisations as identified in this policy to use the information for their own purposes as described above.
We may also need to disclose your information if required to do so by law or as expressly permitted under applicable data protection legislation.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
- HOW DO WE PROTECT YOUR PERSONAL INFORMATION?
We take appropriate technical and organisational measures to ensure that the information disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
You should be aware that the use of the Internet is not entirely secure and although we will do our best to protect your personal data we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features such as encryption to try to prevent unauthorised access.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will use secure methods of disposing of personal data.
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
- YOUR LEGAL RIGHTS
You have a right to ask us to confirm whether we are processing information about you, and to request access to this information (‘right of access’).
You may ask us, or we may ask you, to rectify information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate or complete information which is incomplete (‘right to rectification’). If you inform us that your personal data is inaccurate, we will inform relevant third parties with whom we have shared your data so they may update their own records.
We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided us with changes, for example if you change your email address, name, payment details, please let us know using the contact details at the end of this policy.
You have a right to obtain your personal data from us and reuse it for your own purposes, perhaps for another service, without hindering the usability of the data (‘right of portability’). This right does not apply where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
You have a right to seek the erasure of your data (often referred to as the ‘right to be forgotten’). You may wish to exercise this right for any reason, for example where it is no longer necessary for us to continue holding or processing your personal data you may withdraw your consent. You should note that we are entitled to and reserve the right to retain your data for statistical purposes. This right is not absolute, as we may need to continue processing this information, for example, to comply with our legal obligations, or for reasons of public interest.
You have a right to ask us to restrict our processing of your information (‘right to restriction’) if;
- you contest its accuracy and we need to verify whether it is accurate
- the processing is unlawful and you ask us to restrict use of it instead of erasing it
- we no longer need the information for the purpose of processing, but you need it to establish or defend legal claims
- you have objected to processing of your information being necessary for the performance of a task carried out in the public interest, or for the purposes of our legitimate interests. The restriction would apply while we carry out a balancing act between your rights and our legitimate interests
- you exercise your right to restrict processing, we would still need to process your information for the purpose of exercising or defending legal claims, protecting the rights of another person or for public interest reasons.
You have a right to prevent us from processing your data for the purposes of marketing.
If you would like to exercise any of your rights above, please let us know using the contact details at the end of this policy.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable admin fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Our website will contain links to other websites of interest or be relating to the material shown on our website.
- CHANGES TO THIS POLICY AND YOUR DUTY TO INFORM US
Norwich Electrical Company Limited may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from September 1, 2019.
Please keep us informed if your personal data changes during your relationship with us. It is important that the personal data we hold about you is accurate and current
- HOW TO CONTACT US
To exercise all relevant rights, queries or complaints in relation to this policy or any other data protection matter between you and us, please in the first instance contact our Data Representative at Norwich Electrical Company Ltd Unit 5, Hellesdon Park Road, Norwich NR6 5DR firstname.lastname@example.org.