Privacy Policy
Dear Customer / Supplier,
On 25th May 2018 the laws on data protection changed with the introduction of (GDPR) General Data Protection Regulation.
The new GDPR gives individuals more control over how their personal information is used and makes it easier to check and update information held by ourselves and other organisations.
This letter is to confirm our Privacy Policy and to inform you about the personal data that we hold, how we process it, along with your rights regarding your data.
Why we process your personal data
Under GDPR we must have a “lawful basis” for processing personal data.
We will only process personal data for the performance of a contract with you, the processing of payment, or a statutory obligation.
We process your personal data to enable us to:
- Supply products / services to you
- Manage your account, purchases, and payments
- When required, supplying your name, address and contact details to couriers for the delivery of products
- Communicate with you, to provide invoices, statements, product information and promotions. This may be in the form of emails or by post.
We do not carry out marketing campaigns by email, however should this change then we would obtain your prior consent, and you would always have a right to unsubscribe or opt-out at any time.
The types of personal date we collect and use
Types of personal data that we collect may include all or part of the following information, depending upon your relationship with us:
- Your name
- Job title
- Business name
- Your address / business address
- Your telephone number / business telephone number
- Your email address / business email address
- Information about your purchases / orders
How long will we retain or process your data?
Your personal data will be kept no longer than is necessary for the fulfillment of our contract, and no longer than is necessary for us to comply with any legal requirements or statutory obligations.
We will only share your personal data with third parties for the purpose of delivering products and processing payments, or unless we are legally required to do so.
Your personal data will only be stored in the UK and therefore is fully protected under the GDPR.
You can request your personal data is deleted as long as there are no statutory obligations on our part to retain it.
Your rights under GDPR
The new GDPR provides you with the right to;
- Delete your personal information
- Access your information
- Rectify your information
- Restrict processing of your information
- Data portability
- Object to usage and storage of your information
- Rights relating to Automated decision making and profiling
- Be informed through this Privacy Policy and our communications
Your rights to access your personal data
Under GDPR you have the right to request a copy of any personal data that we hold.
To obtain a copy by making a subject access request, please send your request in writing to; Whiston Motor Factors, 38 Wolseley Road, St Helens, Merseyside, WA10 2AG. We will respond to your subject access request within one month of receiving it.
There is normally not a charge for a subject access request, however, if your request is "excessive or manifestly unfounded" then a fee may be charged to cover the administrative costs.
Changes to this Privacy Notice
It may be necessary to change this Privacy Notice if we change our business in a way that affects how we use or store personal date, or should the law change in relation to data protection.
