Privacy Statement

1) Within this Notice

a) ‘Company’ means Birchley Supplies Ltd. Martindale Rd, Exhall, Coventry CV7 9ET
b) The visitor/user of the Website is referred to as ‘you’ or ‘your’.
c) ‘Personal Information’ means any information from which you can be personally identified, including online identifiers like email address and I.P address (a digital address which identifies the device you access the internet with).
d) ‘Website’ means www.birchleysupplies.co.uk

2) The Company is a Data Controller under the General Data Protection Regulationsand is committed to safeguarding the privacy of website visitors and provides.

3) This Notice is to ensure that you have all the information regarding how the Company may collect and process your Personal Information when using our Website and to comply with our obligations and your rights created by applicable law.

4) Using our Website will be accepted as an affirmative action by you to confirm that you are over 13 years of age and agree to this Privacy Notice. If you are under 13 years of age or do not agree with anything within in this Privacy Notice, you should not use our Website.

5) The Company takes pride in keeping up to date with advances in technology and legal developments, this can result in changes to this privacy notice so you should refer to them on a regular basis to ensure that you are aware of our policies that are current at the time of your visit to our Website.

6) You can be assured your PersonalInformation will only be collected, processed and stored in accordance with this notice.

Your Personal Information
7) When visiting the Website the Company may collect the following information –

a) IP address
b) country
c) browser
d) operating system
e) screen resolution
f) web pages visited

8) This information is collected by third party processors who generate reports and statistics, which helps the Company to
a) monitor usage and performance of the Website;
b) maintain a Website that is user friendly and compatible with popular equipment and software;
c) Analyse and maintain the security of the Website and trace inappropriate or malicious use.
d) Improve the quality and delivery of the Website and services to you.

9) Where a third party is used to process your Personal Information who is based outside the EU the Company shall ensure that the third party meets standards in relation to the security of your Personal Data which are consistent with the General Data Protection Regulations, for example a third party based in the U.S.A must subscribe to the U.S. Privacy Shield.

10) The Company shall not use automated processing of your Personal Informationto form or make decisions.

11) The Company will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of Personal Information, including storingof data on a secure, password and firewall protected servers.

Advertisements
12) The Company may permit third parties to advertise on the Website. These third parties may use tracking features to enable them to record the number of views, clicks and the referral source.

13) If you visit an advertiser’s website they will have their own Privacy Notice which you should read and accept.

Enquiries

14) If you make an enquiry about any goods or services or request information using the Website, you are required to provide the Company with your name and an email address.

15) This Personal Information is processed

a) for a legitimate interest in order that the Company can respond to your enquiry or provide the requested information;
b) by consent to send commercial communications including the availability of new products, services, events, special offers and discounts, newsletters and notifications, where you request or permit such communications

16) In the event of a breach of the security measures taken to protect your personal information the Company will inform you as soon as is reasonably practical.

17) In order that the Company is able to provide you with an optimum service and to ensure that all obligations under UK Data Protection legislation are complied with, you must let the Company know if any Personal Information which you have provided changes or becomes inaccurate or out of date.

Sharing your Personal Information

18) The Companymay share your Personal Informationwith our employees, officers, agents, consultants, suppliers or subcontractors only insofar that it reasonably necessary

a) in order to deal with an enquiry or to provide requested information;
b) to consider whether to enter into a contract with you;
c) for the performance of a contractual obligation between you and the Company;
d) under a legitimate interest that is stated within this Privacy Notice;
e) required by Law or order of a Court;
f) necessary for the prevention of fraud or other criminal activity;
g) for the purposes of establishing, exercising or defending legal rights;
h) required to by a purchaser in the event of selling the Company;
i) otherwise with your consent, requestor instruction.

Data retention

19) Except where the enquiry progresses into a contract to provide services or you request or consent to commercial communications the Company shall not retain your Personal Information for more than six months.

20) Where you engage in a commercial relationship for the Company to provide goods or services the Company shall retain some of your details for six years after the completion of the transaction(s) as a result of legal obligations and to enable the Company to bring or defend any legal actions.

Your rights

21) The General Data Protection Regulations provide you with a number of rights in relation to the use of your Personal Data, which the Company is happy to oblige.

Withdraw consent

22) Where processing of your Personal Information is based on your consent you may withdraw your consentat any time by informing the Data Controller or by using a link provided for that purpose in each commercial communication that the Company sends.

23) Upon receipt of a notice withdrawing your consent to process your Personal Information the Company shall stop processing the Personal Informationexcept:
a) Where there are compelling legitimate grounds for the processing, which override your interests, rights and freedoms; or
b) the processing is for the establishment, exercise or defence of legal claims.

24) Where you withdraw consent the Company shall inform all third parties (if any) that your consent to processing has been withdrawn.

Restrict processing

25) The Company shall restrict the processing of your Personal Information if the following circumstances arise

a) Where you contest the accuracy of the Personal Information, the Company shall restrict the processing until the accuracy of the Personal Information has been verified.
b) Where you have objected to the processing where it was necessary for the performance of a public interest task or purpose of legitimate interests, and the Companyis considering whether the legitimate grounds override your grounds.
c) When processing is unlawful and you opposes erasure and you request restriction instead.
d) If the Company no longer need the Personal Information but you require the information to establish, exercise or defend a legal claim.

26) Where processing of your Personal Information is restricted, the information shall be stored but no further processing shall occur and the Company shall

a) inform any third party to whom your Personal Information has been disclosed or shared that the Information is restricted;
b) inform you when any restricted period comes to an end.

Access to Personal Information

27) You may requirethe Company to provide you with

a) Confirmation whether or not your Personal Information is being processed; and
b) Access to any Personal Information that the Companyholds about you.

28) The Company shall provide the requested information within one month of receipt of the request.
29) This information will be provided free of charge except where a request is manifestly unfounded or excessive (for example it is a repetitive request, or where the Company needs to process large amounts of data) in which case the Company shall make a charge for reasonable administrative costs in dealing with the request or refuse to respond and provide a justifiable reason for refusing to respond which you may seek judicial remedy or complain to the Information Commissioners Office.

30) Any Personal Information that you provide for the performance of a contract which is stored electronically shall be heldin a portable format (readable in a format that will be commonly used on other computer systems) and the Companyshall provide this information toyou or directly to another organisation (where technically feasible) upon your request.

31) As the Company takes the issue of protecting your Personal Information seriously, the Company shall follow strict storage and disclosure procedures which mean you may occasionally be required to provide proof of identity prior to disclosing such information.

The right to rectify errors

32) Where any Personal Information that is processed is inaccurate or incorrect you have the right to instruct the company to correct the Personal Information.
33) The Company may, where the Company believes that the Personal Information is correct ask you for evidence to clarify or confirm that the Personal Data is wrong.

Right to erase Personal Information

34) You have the right in certain circumstances toinstruct the Company to erase your Personal Information where

a) The Personal Information is no longer necessary in relation to the purpose for which it was originally collected or processed.
b) The Personal Information was processed with your consent and you withdraw your consent.
c) You object to the processing and there is no overriding legitimate interest for continuing the processing.
d) The Personal Information was unlawfully processed or obtained.
e) The Personal Information has to be erased in order to comply with a legal obligation.
f) The Personal Information is processed in relation to the offer of information services to a child.

35) Where you have the right and you issue an instruction to erase your Personal Information the Company shall use all reasonable efforts to

a) Inform all third parties to whom the Company has disclosed or shared your Personal Information of the requirement to erase your Personal Information which they hold;
b) In the event that your Personal Information has been published online the Company shall endeavour to ensure that any links or references are also removed;

36) The Company may refuse to erase your Personal Information only

a) the processing is necessary for the performance of a contract;
b) to exercise the right of freedom of expression and information;
c) to comply with a legal obligation;
d) the processing is for the performance of a public interest task or exercise of official authority;
e) for public health purposes in the public interest;
f) archiving purposes in the public interest, scientific research historical research or statistical purposes; or
g) the exercise or defence of legal claims.

37) You can exercise any of your rights by contacting the Data Controller at Birchley Supplies Ltd. Martindale Rd, Exhall, Coventry CV7 9ET