INTRODUCTION

1. This is a notice to inform you of our policy about all information that we record about you. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information.

2. We regret that if there are one or more points below with which you are not happy, your only recourse is to leave our firm or website immediately.

3. We take seriously the protection of your privacy and confidentiality. We understand that all our customers and visitors to our website are entitled to know that their personal data will not be used for any purpose unintended by them, and will not accidentally fall into the hands of a third party.

4. We undertake to preserve the confidentiality of all information you provide to us, and hope that you reciprocate.

5. Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection Regulation (GDPR)

6. The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data.

7. Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our face to face data exchange.

 

THE BASIS ON WHICH WE PROCESS INFORMATION ABOUT YOU

The law requires us to determine under which of six defined bases we process different categories of your personal information, and to notify you of the basis for each category.

If a basis on which we process your personal information is no longer relevant then we shall immediately stop processing your data.

If the basis changes then if required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.

 

1. INFORMATION WE PROCESS BECAUSE WE HAVE A CONTRACTUAL OBLIGATION WITH YOU

When you create an account with us or visit on our website, buy a product or service from us, a contract is formed between you and us.

In order to carry out our obligations under that contract we must process the information you give us. Some of this information may be personal information.

We may use it in order to:

1. sell products to you

2. provide you with our services

3. provide you with suggestions and advice on products, services and how to obtain the most from using our website.

We process this information on the basis there is a contract between us, or that you have requested we use the information before we enter into a legal contract.

Additionally, we may aggregate this information in a general way and use it to provide class information, for example to monitor our performance with respect to a particular service we provide. If we use if for this purpose, you as an individual will not be personally identifiable.

We shall continue to process this information until the contract between us ends or is terminated by either party under the terms of the contract.

 

2. INFORMATION WE PROCESS WITH YOUR CONSENT

Through certain actions when otherwise there is no contractual relationship between us, such as when you browse our website or ask us to provide you more information about our business, including job opportunities and our products and services you provide your consent to us to process information that may be personal information. Wherever possible, we aim to obtain your explicit consent to process the information, for example, by asking you to agree to our use of cookies or by filling our client information form. Sometimes you might give your consent implicitly, such as when you send us a message to which you would reasonably expect us to reply.

Except where you have consented to our use of your information for a specific purpose, we do not use your information in any way that would identify you personally. We may aggregate it in a general way and use it to provide class information, for example to monitor the performance of a particular page on our website.

If you have given us explicit permission to do so, we may from time to time pass your name and contact information to selected associates such as contractors, whom we consider may provide services or products you would find useful.

We continue to process your information on this basis until you withdraw your consent or it can be reasonably assumed that your consent no longer exists.

You may withdraw your consent at any time by instructing us at isabelle@lionmewsjoinery.co.uk.

 

3. HOW WE USE YOUR PERSONAL DATA

We will only use personal data when the law allows us to, and we will never use any information we gather for marketing purposes.

You may receive transactional emails from us. These will only ever be emails that are informational in nature, such as quotations, invoices or statements.

We will also use your data where we need to comply with a legal or regulatory obligation.

Your personal information will also be used to assist with any services you use with us, such as processing an order, dealing with an issue raised by you or any assistance you may require when you place an order with us.

If you fail to provide us with all of the necessary personal data we need to complete your request (such as place an order), then we may not be able to fulfil the specific services requested until we have the required information. In this case, we may have to cancel your order and refund you any costs associated with it, but we will attempt to contact you at the time if this is the case.

 

5. WHO WE SHARE YOUR PERSONAL DATA WITH

We may have to share your personal data with the parties set out below.

Internal Third Parties – employees, contractors, administrators

External Third Parties Service – When ordering goods from suppliers and stockists

Providers – IT support systems such as Sage

Professional advisers including lawyers, bankers, auditors who provide consultancy, banking, insurance and accounting services.

HM Revenue & Customs, regulators and other authorities based in the UK

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

​

​

6. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

 

7. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

OR

By law we have to keep basic information about our customers (including contact details, identity, financial data for a maximum of 6 years after they cease being a customers for tax purposes).

In some circumstances you can ask us to delete your data: see Your legal rights below for further information.

 

8. YOUR LEGAL RIGHTS

Unless subject to an exemption under the data protection laws, you have the following rights with respect to your personal data:

* The right to request a copy of the personal data which we hold about you;

* The right to request that we correct any personal data if it is found to be inaccurate or out of date;

* The right to request your personal data is erased where it is no longer necessary to retain such data;

* The right to withdraw your consent to the processing at any time, where consent was the lawful basis for processing your data;

* The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), where applicable i.e. where our processing is based on consent or is necessary for the performance of our contract with you or where we process your data by automated means);

* The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;

* The right to object to our processing of personal data, where applicable i.e. where processing is based on our legitimate interests (or in performance of a task in the public interest/exercise of official authority); direct marketing or processing for the purposes of scientific/historical research and statistics).

If you wish to exercise any of the rights set out above, please contact Isabelle Lauvergnat at Lion Mews Joinery Limited at the following address: Lion Mews, Units 2-4, Richardson Road, Hove, East Sussex, BN3 5RA.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

​

​

9. QUERIES, REQUESTS OR CONCERNS

To exercise all relevant rights, queries or complaints in relation to this policy or any other data protection matter between you and us, please in the first instance contact by email us at mail@lionmewsjoinery.co.uk or by post: Lion Mews Joinery Ltd, Lion Mews, Units 2-4, Richardson Road, Hove, East Sussex, BN3 5RA.

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 03031231113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England, UK.