Our company is responsible for the data we collect about you and as the data controller of such information we take your privacy seriously. The General Data Protection Regulation (GDPR) becomes law on the 25th May 2018 and impacts how organisations record, store and use personal data. This law will give you, as a ‘data subject’ greater control and new rights over how organisations record, store and use your data. If you have any questions about the use of your personal data, we can be contacted by clicking on this e-mail link: firstname.lastname@example.org
Wood Bros is registered as a company in England and Wales under company number 493172 and our registered address is Wood Bros (Furniture) Ltd, 21-27 Lamb’s Conduit, London WC1N 3GS.
Personal data we collect about you
We collect the following information and data about you:
- Postal address
- E-mail address
- Telephone numbers
The reasons why we collect this data can include:
- processing orders;
- informing you of new products, services and events and
- advising you about the delivery of orders or website enquiries.
We will have also obtained personal data about you when you purchased our furniture and as a result registered a product guarantee with us. Consequently, we may need to contact you to carry out our legal obligations resulting from the product guarantee agreements.
We also collect your computer IP address and cookies from whichever devices you may use to view our website. We collect visitor data anonymously through Google Analytics, a visitor reporting service provided by Google. Google Analytics collects standard internet log information and details of visitor behaviour patterns. We use Google Analytics to find out things such as the number of visitors to the various parts of the site. We also collate data from social media visits and again they are collected anonymously but they allow us to trace and predict trends. To reiterate, all the data are processed in a way that does not identify anyone.
What are cookies?
- Cookies are small snippets of data stored on your device by the web browser of your device.
- You can read and/or delete cookies at any time and even set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it.
- For more information about cookies and how to manage or remove them, please contact us at email@example.com to request our Cookies Policy.
How we use your personal data
Wood Bros ensures that your personal data is used legally, and they facilitate our legitimate business interests. In order to fulfil contracts our activities can be viewed as legitimate business interests under the terms of the GDPR and can include:
- fulfilling orders as part of our contract with you;
- ensuring goods and services are delivered;
- facilitating sales generated by visits to our showroom
- direct marketing to inform you about new lines, furniture offers etc.
- disclosure of personal data to a third party supplier for the purposes of fulfilling an order whereby goods and services are delivered through an appointed, local stockist (third party.)
At all times, we must abide by regulations and laws as part of our legal obligations, thus not only protecting your privacy but also improving the customer experience and enhancing our product lines as a result of analysing customer trends and requirements.
Visitors’ personal data
Wood Bros is the data controller of your personal data which we collect or you provide by:
- filling in our Contact forms on the Wood Bros website
- reporting a problem on our website or contacting us via the website
- visiting our website and accessing its pages
Job Applicants’ personal data
The information in a job application or CV may be used for any and all purposes usually associated with processing an employment application.
How to advise us about (or update) your contact preferences
Should you wish to modify your contact preferences or have any questions on the subject, please e-mail us at firstname.lastname@example.org
How we protect your data
We use McAfee e-Policy Orchestrator (ePO) which has the most advanced ransomware protection with APT (Adaptive Threat Protection including DAC (Dynamic Application Containment) and RP (Real Protect). Encryption is included therefore ensuring your communications are protected. McAfee-accredited engineers oversee our ITC systems. Such systems allow us to follow good practice in relation to data security breach management as recommended by the regulatory body, the Information Commissioner’s Office, that is also overseeing the implementation of the GDPR in Great Britain.
Retention of your data
We keep your personal data in order to comply with our legal and business obligations.
Rights to personal data
A ‘data subject’ has a number of rights with regard to their personal data. We set out below the rights that are relevant for the purposes of providing effective customer service.
The right of to be informed: we must tell individuals what data we collect, how we use and for how long we retain said data. In addition, we must tell individuals whether their data will be shared with third parties.
The right of access: individuals can submit a subject access request by telephone or in writing, obliging Wood Bros to provide a copy of any personal data concerning the individual.
We would have one month to produce such information but the process could take longer depending on the nature of the request. Under the GDPR, Wood Bros may charge a fee up to a maximum of £10.00 to fulfil a subject access request.
The right of rectification: we must rectify inaccurate or incomplete personal data upon request and would generally have one month to comply.
The right to erasure (‘the right to be forgotten’) allows an individual to request that Wood Bros deletes or removes said individual’s personal data. For example, where an individual withdraws consent.
The right to restrict processing is an alternative to erasure of data and allows an individual to contact Wood Bros if they wish to question the accuracy of their personal data or when if they no longer need the information but the organisation does.
The right to data portability means individuals can ask Wood Bros for their personal data in order to use it for their own purposes. However, this right applies to personal data that an individual has provided to data controllers.
The right to object can be instigated by an individual if they object to their personal data being used, for example for direct marketing. In this situation, Wood Bros must stop processing personal data unless there are legitimate grounds for doing so, such as adhering to the contract implicit in a Lifetime Guarantee.
23rd May 2018