GDPR DATA PRIVACY POLICY
This Privacy Policy details how Kendon Rope and Twine Co. Ltd will process personal data that individuals may provide to us, or that we may collect from individuals.
Who are we?
Kendon Rope and Twine Co. Ltd is a private limited company, registered in England & Wales No. 0270 2974. Registered address: 7 Innova Way, Innova Park, Enfield, EN3 7FL.
Kendon Rope and Twine Co. Ltd is responsible for the personal data that individuals share with us.
We are defined as a Data Controller under the General Data Protection Regulation (GDPR) and Data Protection Act 2018.
Protection of personal information and privacy is important. We will only process personal data in accordance with this Privacy Policy.
Contact details
For any questions regarding this Privacy Policy or how we process personal data, please contact us as follows:
Kendon Rope and Twine
Perseverance Mills
Mill Lane
East Ardsley
Wakefield WF3 2BL
Telephone: 01924 870222
E-mail: admin@kendon-ropeandtwine.co.uk
What is personal data?
Personal data refers to any information or snippets of information that could identify individuals directly. This includes information such as name, office address, email address, telephone number.
How do we collect or receive personal data?
If you (The Customer) hold a trade account with us, we may have collected voluntary data by requesting completion of an account application form, either sent by email or delivered in person via a sales representative. We may also collect information when completing contractual agreements, correspondence on the telephone or general email, or we may meet individuals at a trade event.
Website and cookies
We may obtain personal information, e.g. when contacted about products and services, when registered with the website or via newsletter subscription. We may also collect information such as name, address email address, IP address, telephone number and information regarding what pages are accessed and when. Our website will not be e-commerce enabled at launch, so we will not request credit/debit card information.
Our website will use cookies. ‘Cookies’ are small pieces of information sent by an organisation to a computer and stored on the individual’s hard drive to allow that website to recognise individuals when they visit. They collect statistical data about browsing actions and patterns but do not identify individuals. This helps us to improve our website and deliver a more personalised service. It is possible to switch off cookies by setting browser preferences. Turning cookies off may result in a loss of functionality when using our website.
The information we collect
We process personal data including and not limited to:
- Personal name and job title
- Company name, company registration and VAT number
- Business addresses and postcodes
- Owners/Partners – first name and surname
- Trade references – company and sole trader
- Credit reports – company and sole trader
- Contact information including e-mail address, business telephone number, mobile no., fax
- Financial information including credit card and/or debit card information
- Invoice and delivery addresses
- Demographic information such as postcode and preferences
How and why we may use the data we collect?
- To establish a trade account so products may be purchased from us
- To process orders and to deliver goods to addresses voluntarily provided
- Internal record keeping
- To ensure delivery of customer services in matters relating to the sale or nature of our products
- To manage payments – please note that payment information (including credit/debit card numbers), is never kept on file
- Manage any contact regarding order status
- To improve products and services
- To meet legal requirements as a UK registered business
- To notify and communicate with our partners
- To send marketing information and/or to maintain current awareness of new products and services – unless the individual has opted out of such communications
- Manage and improve the website
Who has access to personal information?
- We may share personal information across the business so we can provide individuals with relevant products and services
- We may also provide information to 3rd parties, but only when it is necessary in order for us to fulfil service requirements. These include, but are not limited to: our data processors, 3rd party carriers for the delivery of goods and secure payment gateway services
- We will not sell or rent personal information to third parties
- We will not share personal information with third parties for marketing purposes
In all circumstances the information obtained will be retained and utilised in accordance with all relevant laws, in particular the Data Protection Act 2018 and GDPR.
Legal grounds for processing personal information
We will rely on the following legal basis under GDPR to process personal data:
Performance of a contract – processing necessary for the performance of a contract with the data subject or to take steps to enter into a contract.
How long is personal data stored for?
We will retain personal data for no longer than reasonably necessary to enable and support relevant activities:
- For actively trading customers we will retain data for as long as they remain active
- Personal information may be retained on our system for up to 7-years to assist us to meet statutory requirements
- On specific request for data not to be stored, we will contact you to agree all available options
Data security
We, in partnership with data processors, are committed to ensuring that personal information is secure. In order to prevent unauthorised access or disclosure we have put in place physical, electronic and managerial procedures to safeguard and secure information.
Our systems employ security programmes which work to:
- Protect data against accidental loss
- Prevent unauthorised access, use, destruction or disclosure
- Ensure business continuity and disaster recovery
- Notify individuals and any applicable regulator of a suspected breach as required by law
- Restrict access to personal information
- Conduct privacy impact assessments in accordance with law and business policies
Individual rights
At any time, individuals have the right: to request and receive disclosure of any personal data stored and processed; to request correction of any personal data found to be inaccurate or out of date; to request processing of personal data to be deleted or restricted; to withdraw consent to the processing of personal data; to object to the processing of personal data; to request that we transfer a copy of personal data to a 3rd party. Please contact us at admin@kendon-ropeandtwine.co.uk to discuss your requirements. We will always respond to the request within required guidelines.
Links to other websites
Our website may contain links to enable individuals to visit other websites of interest. Once these links have been used to leave our site, individuals should note that we do not have any control over the other website. Therefore, we cannot be responsible for the protection and privacy of any information provided whilst visiting such sites and such sites are not governed by this privacy statement.
Under-18
We are concerned with protecting the privacy of children. To register with our website and provide us with personal information, individuals must be at least 18-years of age. By entering details on our forms or registering with this website individuals confirm they are over the age of 18.
Marketing
We may contact individuals to make them aware of new products and services, unless explicitly requested not to do so. Individuals are provided with clear and positive opt-in actions during the account application process. Individuals can opt-out at any time by contacting admin@kendon-ropeandtwine.co.uk, or by responding to any marketing email with unsubscribe in the subject line.
We will never sell or share name and contact details with 3rd parties for marketing purposes. We do not use 3rd party service providers to send out marketing material.
Transferring personal information outside of Europe
As part of services offered, including our website, information provided to us may be transferred to countries outside the European Union (EU). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU; or, in order to fulfil contract obligations, we are required to transfer information to third party delivery agents outside of the EU. These countries may not have similar data protection laws to the EU. By submitting personal data, individuals are agreeing to this transfer, storing or processing. If we transfer personal information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that privacy rights continue to be protected as outlined in this Policy.
If individuals use our services whilst outside the EU, personal information may be transferred outside the EU in order to provide individuals with those services.
Automated Decision Making
We do not use any form of automated decision making in our business.
How to make a complaint
To ensure all relevant rights and complaints are fully dealt with, please first contact our Data Controller at admin@kendon-ropeandtwine.co.uk. If individuals find the matter is not managed satisfactorily, they have the right to complain to the Information Commissioners Office.
Changes to this Privacy Policy
Any changes we make to our Privacy Policy in future will be posted on our website and, where appropriate, notified to individuals by e-mail or other appropriate channels. Please remember – individuals can withdraw consent for the processing of personal data at any time by contacting admin@kendon-ropeandtwine.co.uk.