Privacy Policy

GDPR: DATA PRIVACY POLICY FOR CLIENTS AND SUPPLIERS

Introduction

Alan Bush (Engineering Services) Limited ("We") are committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

The rules on processing of personal data are set out in the General Data Protection Regulation (the “GDPR”).
1. Definitions


Data controller - A controller determines the purposes and means of processing personal data.


Data processor - A processor is responsible for processing personal data on behalf of a controller.


Data subject - Identifiable living person.

Categories of data: Personal data and special categories of personal data

Personal data - The GDPR applies to ‘personal data’ meaning any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. For example name, telephone number, home address or private email address. Online identifiers include IP addresses and cookies.

Processing - means any operation or set of operations which is performed on personal data or on sets of personal data, such as obtaining, storing, acting on, modifying, updating, deleting and manipulating.

Third party - means an identifiable living person or legal person, public authority, agency or body other than the data subject, controller or processor.

2. Who are we? 

Alan Bush (Engineering Services) Ltd is the data controller. This means we decide how your personal data is processed and for what purposes. Our contact details are: Unit A, 45 High Street, Morley, Leeds, LS27 0BU. For all data matters contact Jenny Holman on jenny@abush.co.uk.

3. The purpose(s) of processing your personal data

We use your personal data for the following purposes:

To enable us to provide manufacturing services, promote our goods and services, and to maintain our accounts and records. We also process personal information using a CCTV system to maintain the security of the premises and for preventing and investigating crime.

4. The categories of personal data concerned

With reference to the categories of personal data described in the definitions section, we process the following categories of your data: 

Personal data - name, email address, telephone number, postal address, bank account details, details about payments to and from you, details of products and services you have purchased from us and details about products and services you have supplied to us.

We have obtained your personal data from direct interactions with you. You may have given us your identity, contact and financial data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

- apply for our products or services;

- sell us your products or services;

5. What is our legal basis for processing your personal data? 

a) Our lawful basis for processing your general personal data is a legitimate business interest to register you as a new customer, to process and deliver your order, to purchase goods and services from you, to manage our relationship with you, or to respond to a general enquiry or correspondence from you.

b) We have a legal obligation for processing your general personal data such as for HMRC, accountancy and insurance purposes.

6. Sharing your personal data 

Your personal data will be treated as strictly confidential, and will be shared only with professional advisors including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

HMRC, regulators and other authorities who require reporting of processing activities in certain circumstances.
Service providers who provide services such as IT and system administration services.

Credit checking facilities and debt collectors.

7. Supplier responsibility

We expect all suppliers to comply with GDPR and to keep all private data safe and secure and to only share it with 3rd parties identified in their privacy notice.

8. How long do we keep your personal data? 

We keep your personal data for no longer than reasonably necessary and we only retain your data for the following purposes and use the following criteria to determine how long to retain your personal data. 

At quotation stage we will retain your personal data for a maximum of 7 years from the last point of contact in order to enable us to requote at a later date without the need to reobtain these details.

When we enter into a contract with you the retention period will be increased to in perpetuity for insurance purposes and in case of any legal claims/complaints.

9. Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: 

• The right to request a copy of the personal data which we hold about you;

• The right to request that we correct any personal data if it is found to be inaccurate or out of date;

• The right to object to the processing of personal data, (where applicable i.e. where processing is based on legitimate interests for direct marketing.

10. Transfer of Data Abroad

For the provision of goods and services supplied or delivered outside the EEA we will only supply the minimum amount of data required for that purpose.

11. Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.

12. How to make a complaint

To exercise all relevant rights, queries or complaints please in the first instance contact Jenny Holman by email on jenny@abush.co.uk.

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioner's Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.


Update

This Privacy Policy was last updated: 23rd May, 2018.

Share by: