New law on Data Protection

The Data Protection law is changing and we want to keep you up to date with the steps Barn Glass is taking.

On the 25th May the General Data Protection Regulation, known as GDPR, comes into effect.  GDPR imposes additional obligations on organisations and gives you extra rights around how your data is used.

1          Who are we?

Barn Glass Group/Works Ltd
Roof light and Patent Glazing Systems
7 Sandiford Road
Kimpton Road Industrial Estate
Sutton
Surrey
SM3 9RN

2          When might we collect your personal data?

We might collect your personal data:

  • When you buy products or services from us over the phone;
  • When you respond to any of our social media postings;
  • When you visit our premises that are protected by CCTV;
  • When any of our suppliers or business partners share your information with us;
  • If you have contacted us asking for information about any of our products or services;
  • If we need to collect your personal data for legal reasons;
  • If you apply to work for us we will collect information needed for your job application.

3          The types of personal data we collect:

We will only ever ask you for information that we need and is relevant. The personal data we might ask for includes;

  • Your name, address, date of birth, email address and telephone number;
  • Information about your order and /or delivery of your goods;
  • If you have opened an account with us we will keep your personal details in a locked filing cabinet;
  • Details of any credit check that we might have made before deciding whether to offer you credit;
  • Written notes of telephone conversations either on computer or on paper. We may also record any complaints or issues that you might have when you contact us;
  • Your bank account details if you are making a phone transaction;
  • CCTV images (if you have visited our premises).

4          Why do we need your personal data?

In order to be able to provide you with the products and services that you need and to maintain our relationship with you, we might need to store or process the personal data you have provided us with. We may also need to pass your data to one of our business partners so that they can help us to provide you with the goods or services you have asked for. Your personal data will only ever be used for the purposes of customer management, marketing or advertising to the appropriate degree. We will neither sell market nor disclose your data in any other way to third parties. If we do have to use the services of third parties, we will make sure that they have security measures in place to keep your data safe.

The sorts of people we might share your personal data with include:

  • Delivery couriers and postal firms
  • IT companies who support our systems and website
  • Marketing companies who work for us to help us run our electronic communications
  • Social media sites to show you products that might be of interest to you.
  • Sub- contractors who might act on our behalf and help us provide the service to you

Where we do share your data, we would only provide the information that is needed for the specific purpose and the third party will only be able to use your data for that purpose. The third parties will be people we trust to ensure that your privacy is respected at all times and they will be contractually obliged to keep your data safe. When they no longer work with us they will be expected to delete your data or make sure that it is anonymised.

We may also pass your data to third parties where we have a legal obligation to share information such as with the police or other regulatory or Government bodies.

5          The legal reasons for collecting your personal data

We will only collect your personal data if we have a legal reason for doing so. This might include one or more of the following:

Consent – This is where you have consented to us having your personal data. You might have agreed that we can send you such things as details of our promotions or products and services. If you have consented, we may send you personalised information about products and services that we think you would be interested in based on orders that you might have placed with us in the past of things that you might have looked at on our website. You can at any time change your mind and tell us that you no longer want to hear from us or that you want to change the way you receive information from us.

Compliance – In order to comply with legal requirements such as health and safety laws and tax laws, we may need to collect and process your data.

Contractual obligations – If we have a contract with you we will need to collect and process your personal details so that we can fulfil our contract.

Legitimate interest – This is where we might use your personal data to meet a reasonable business interest as long as we are not significantly impacting your rights. We might send you information about any of our products and services that we think you might be interested in.

6          How we keep your personal data safe

We will always treat your personal data with respect and care. All of our employees have been briefed on data protection laws and are contractually obliged to protect your personal data. We will make sure that all our suppliers and business partners have a contractual requirement to protect your personal data and to follow our code of conduct.

We will never keep your personal data for any longer than we need to. We have reviewed our processes to make sure that when we no longer need your personal data for the purpose for which it was collected, we will delete it from our systems.

7          Transferring your personal data outside the European Economic Area (EEA)

We currently do not transfer personal data outside the EEA. If we ever do need to do this (for example to process an order) we will make sure that we have procedures in place to ensure that your data receives the same protection that it receives when it is processed inside the EEA. Our suppliers will have contractual obligations to follow our standards and to comply with all applicable laws and this Privacy Notice.

8          Your rights

You have the right to copies of any of the personal data that we hold about you and as far as we are able to, we will provide this in an easy to understand format. We may not be able to do this if the data has been received from a third party or it is in a technical format that does not easily translate. If the data is incorrect or incomplete you can ask us to correct it. If you ask us to do this, we will need you to verify your identity before we can make any changes or supply any information to you. To do any of these things please contact us at:

Barn Glass Group/Works Ltd
7 Sandiford Road
Kimpton Road Industrial Estate
Sutton
Surrey
SM3 9RN

If you are unhappy with the way that we have responded to your requests or you have any other concerns about the use of your personal data you can contact the Information Commissioner’s Office on 0303 123 1113 or you can access further information and advice on the ICO website at www.ico.org.uk.

We want you to know that Barn Glass respects the information we hold on you and that we take the security of your information very seriously.

 

Kinds Regards

 

The Barn Glass Team