For the purpose of the Data Protection Act 1998 the data controller is Hampshire Sash Window Services Limited, 12 Lincoln Green, Alton, Hampshire, GU34 1SX
Information we may collect from you
You may give us information about you, by filling in forms on our website www.hantssash.co.uk or by corresponding with us by phone, e-mail, meeting our sales team, via our social media channels or otherwise.
We may collect and process the following information from you:
Your contact details: postal address including billing address, telephone numbers and e-mail address
This list is not exhaustive, and in specific instances, we may need to collect additional data from you to enable us to enter into a contract of engagement with you.
How we use the information we have about you
We use information held about you for the following purposes, and our lawful basis’ for processing your data are provided in italics below;
Responding to your initial enquiry - consent / anticipation of contract
Communicating with you to see if we can be of further assistance - anticipation of contract / legitimate interest
Issuing invoices for payment - contract
If you have opted in to our mailing list, we will use the information provided by you to occasionally email you
information deemed relevant to you on the services we offer, news, updates and competitions – consent.
How we process your personal data
Hampshire Sash Windows complies with its obligations where your personal data is concerned by keeping it up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data we hold.
Where we store your personal data
All information you provide to us is stored on our secure servers located in the European Economic Area (EEA).
Our security measures include encryption of data and security controls that protect our systems form external attack and unauthorised access.
Disclosure of your information
We may share your information with selected partners including:
Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.
This includes exchanging information with other companies and organisations for the purposes of fraud protection, insurance and credit risk reduction.
Types of data we collect
Cookies are text files which our web site, like most sites, places on your computer when you visit. For further information about cookies, visit www.aboutcookies.org or www.allaboutcookies.org.
When you visit www.hantssash.co.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site.
This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
How long we keep your personal data
For data processing for the purposes of contracted events, we will keep your personal data for as long as is required for legal reasons and to maintain records.
Access to your personal information
You are entitled to view, amend, or delete the personal information that we hold about you at any time. Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
1. The right to be informed
The purpose of this right is to allow individuals to obtain information on how and why we’re processing their personal data.
2. The right of access
The purpose of this right is to allow individuals’ access to their personal data to enable them to know what data we hold and to verify the lawfulness of the processing.
3. The right to rectification
This is also referred to as the right to have information corrected. Individuals have a right to have their data corrected if it’s inaccurate or incomplete.
4. The right to erasure
This right is also known as the right to be forgotten. Basically, individual’s can request to have their data removed or deleted when there’s no reason to continue processing it. You should also inform third parties, which you’ve sent their data to, that you’re erasing it, unless it’s impossible or will involve a disproportionate effort. Individuals are entitled to know the identity of the third parties.
5. The right to restrict processing
Individuals have the right to block or suppress the processing of their data in certain circumstances.
6. The right to data portability
This right allows individuals to obtain and safely reuse their data across different services for their own purposes.
7. The right to object
This means an individual has the right to object to their data being processed.
8. Rights in relation to automated decision making and profiling
Individuals have the right not to be subject to a business’s automatic decision making in certain circumstances.
You have the right to lodge a complaint about the way we process your data with the Information Commissioners Office, details of the process can be found at https://www.gov.uk/data-protection/make-a-complaint
Please send written requests to our data protection officer Rob Gill – see contact details below.
Data protection registration
We are registered as a data controller with the UK Information Commissioner's Office.
Organisation name: Hampshire Sash Windows
This policy was last updated on 12th September 2018.