GDPR Policy

Outline

At Hampshire Sash Windows, we are committed to protecting and respecting your privacy and maintaining the trust and confidence of our clients. This privacy policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. We will never sell, rent or trade information provided to us, by you, with other companies and businesses for marketing purposes.

For the purpose of the Data Protection Act 1998 the data controller is Hampshire Sash Window Services Limited, 12 Lincoln Green, Alton, Hampshire, GU34 1SX

Information we may collect from you

You may give us information about you, by filling in forms on our website www.hantssash.co.uk or by corresponding with us by phone, e-mail, meeting our sales team, via our social media channels or otherwise.

We may collect and process the following information from you:

Your name

Your contact details: postal address including billing address, telephone numbers and e-mail address

This list is not exhaustive, and in specific instances, we may need to collect additional data from you to enable us to enter into a contract of engagement with you.

How we use the information we have about you

We use information held about you for the following purposes, and our lawful basis’ for processing your data are provided in italics below;

Responding to your initial enquiry - consent / anticipation of contract

Communicating with you to see if we can be of further assistance - anticipation of contract / legitimate interest

Issuing invoices for payment - contract

If you have opted in to our mailing list, we will use the information provided by you to occasionally email you

information deemed relevant to you on the services we offer, news, updates and competitions – consent.

How we process your personal data

Hampshire Sash Windows complies with its obligations where your personal data is concerned by keeping it up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data we hold.

Where we store your personal data

All information you provide to us is stored on our secure servers located in the European Economic Area (EEA).

Our security measures include encryption of data and security controls that protect our systems form external attack and unauthorised access.

Disclosure of your information

We may share your information with selected partners including:

Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.

We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Hampshire Sash Windows, our customers, or others.

This includes exchanging information with other companies and organisations for the purposes of fraud protection, insurance and credit risk reduction.

Types of data we collect

Website cookies

Cookies are text files which our web site, like most sites, places on your computer when you visit. For further information about cookies, visit www.aboutcookies.org or www.allaboutcookies.org.

We use cookies on our site based on the grounds of our legitimate interests, to help us monitor visitor use of our site through Google Analytics in order to improve it and to ensure that content is presented in the most effective manner for you and for your computer and keep our site safe and secure.

Google Analytics

When you visit www.hantssash.co.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site.

This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

How long we keep your personal data

For data processing for the purposes of contracted events, we will keep your personal data for as long as is required for legal reasons and to maintain records.

Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold about you at any time. Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

  1. The right to be informed

The purpose of this right is to allow individuals to obtain information on how and why we’re processing their personal data.

  1. The right of access

The purpose of this right is to allow individuals’ access to their personal data to enable them to know what data we hold and to verify the lawfulness of the processing.

  1. The right to rectification

This is also referred to as the right to have information corrected. Individuals have a right to have their data corrected if it’s inaccurate or incomplete.

  1. The right to erasure

This right is also known as the right to be forgotten. Basically, individual’s can request to have their data removed or deleted when there’s no reason to continue processing it. You should also inform third parties, which you’ve sent their data to, that you’re erasing it, unless it’s impossible or will involve a disproportionate effort. Individuals are entitled to know the identity of the third parties.

  1. The right to restrict processing

Individuals have the right to block or suppress the processing of their data in certain circumstances.

  1. The right to data portability

This right allows individuals to obtain and safely reuse their data across different services for their own purposes.

  1. The right to object

This means an individual has the right to object to their data being processed.

  1. Rights in relation to automated decision making and profiling

Individuals have the right not to be subject to a business’s automatic decision making in certain circumstances.

You have the right to lodge a complaint about the way we process your data with the Information Commissioners Office, details of the process can be found at https://www.gov.uk/data-protection/make-a-complaint

Please send written requests to our data protection officer Rob Gill – see contact details below.

Data protection registration

We are registered as a data controller with the UK Information Commissioner's Office.

Organisation name: Hampshire Sash Windows

Changes to our Privacy Policy

We regularly review our privacy policy and update it when necessary. Any changes we may make in the future will be posted on this page. Please check this page periodically to ensure you agree with any changes to this policy.

This policy was last updated on 12th September 2018.

Contact

Questions, comments and requests regarding this privacy policy should be addressed to our data protection officer Rob Gill by post to 12 Lincoln Green, Alton, Hampshire, GU34 1SX.