Privacy Statement:

C & R Powder Coating Welding and Fabrication Ltd. are committed to the processing personal data transparently, responsibly, and in compliance with GDPR - the latest legislation surrounding data protection.

• We will use details collected during the order process to fulfil your order
• We are committed to only using the minimum amount of personal data necessary.
• We have implemented robust security protocols for the storage of all personal data and have various IT security accreditations.
• We will not sell personal data to any companies outside of C & R Powder Coating Welding and Fabrication Ltd. or its parent group, Poole Bay Holdings Ltd.
• We will conduct necessary due diligence with any third parties involved in the processing of personal data and only use established, reputable and compliant partners to the best of our reasonable knowledge.
• We will ensure that a data subjects fundamental rights and freedoms are respected at all times.
• We may also use data for the purposes of ongoing fraud prevention.

1) C & R Powder Coating Welding and Fabrication Ltd & Your Data

C & R Powder Coating Welding and Fabrication Ltd. is a part of Poole Bay Holdings Ltd. – which is a registered data controller with the ICO. Thank you for choosing to purchase from C & R Powder Coating Welding and Fabrication Ltd. We value the trust of our customers and strive to respect your privacy when handling data.

This Policy describes how we collect personal data about you, the type of data we collect, how this data is used and how you, a valued customer, can control the use of your data by C & R Powder Coating Welding and Fabrication Ltd.

2) What Data Do We Collect?

In order to process orders and ensure the best possible levels of service, we collect certain personal and company information when you make a transaction. This includes:

• Your Title
• Your Name
• Your Company’s Name
• Your Delivery Address
• Your Payment Address
• Your Email Address
• Your Telephone Number
• Browsing & Shopping Activities

3) How We Use Your Data

We will primarily use your data to:

1. Keep you updated on the status of your order
2. Fulfil delivery of your order
3. Contact you if there is a query regarding your order
4. Verify your identity or perform security and credit checks in relation to larger orders or orders placed via Purchase Order
5. Assist with any customer queries

Cookies:

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

This website makes use of cookies to monitor visitor sessions. We may collect data about the type of device, internet browser and operating system that you use, and also which pages you visit and interact with. We do this so we can ensure you have best user experience and can be presented with more relevant content, such as products you have previously viewed.

Information stored in the cookie that is issued by the site is not personally identifiable by us. The value stored in the cookie is an anonymous identifier, which is not linked to any other personal information you may give us during your visit. If you do not wish to receive these cookies you can easily and safely disable them in your browser, though doing so may affect the functionality of our website.

We share cookie data with advertising and analytical providers such as Google and Bing for the purposes of conducting online analysis and making improvements to our websites.

General Retention Periods

C & R Powder Coating Welding and Fabrication Ltd. will retain customer data for as long as is reasonable and necessary – although typically invoices need to be retained for 6 years for HMRC purposes. We will however anonymise any personal data digitally held after 3 years.

More information on retention periods and the steps we have taken to keep data up to date is available on request.

During The Retention Period

The data we collect and use:

• Title
• Name
• Company’s Name
• Delivery Address
• Payment Address
• Email Address
• Telephone Number
• Browsing & Shopping Activities

We will store the details securely and back them up daily to secure cloud based servers provided by reputable data storage specialists.

We may use data for the purposes of preventing fraud in the future.

We will not sell or rent data outside of C & R Powder Coating Welding and Fabrication Ltd. or our parent group (Poole Bay Holdings Ltd.) regardless of how long data has been retained for and will adhere to all other terms set out in our Privacy Policy.

Expiration Of The Retention Period

C & R Powder Coating Welding and Fabrication Ltd. will retain customer data for as long as is reasonable and necessary – although typically invoices need to be retained for 6 years for HMRC purposes. We will however anonymise any personal data after 3 years.

Data Minimisation

C & R Powder Coating Welding and Fabrication Ltd. will not collect more personal data than the bare minimum for the purposes of fulfilling orders. Nor will we retain irrelevant information. We have concluded that the data we collect during the order process is the minimum amount we require in order fulfil the order.

4) Managing Your Personal Data And How It Is Processed

As a valued customer and in line with GDPR, you have full control over your data and how it is used by C & R Powder Coating Welding and Fabrication Ltd.

Your right to object and your right to restrict processing:

To restrict processing, or for subject access requests, please email sales@candrpowdercoating.co.uk

Updating Your Details – Your Right To Rectification

Should any of the information you have provided to us change, or require amending, please let us know the correct details by sending an email stating "Change Details" as the email subject, to info@candrpowdercoating.co.uk

Subject Access Requests – Your Right To Access

We respect an individual’s right to access any personal data that we hold on them. As such we have an internal process in place in order to handle subject access requests expediently and in accordance with GDPR requirements.

C & R Powder Coating Welding and Fabrication Ltd will:

• Provide a copy of the information free of charge. However, we will charge a reasonable fee based on administrative costs when a request is manifestly unfounded, excessive, or repetitive.
• Provide a response within one month of receipt.
• Take reasonable steps to verify the identity of the person making the request.
• Provide the information in a commonly used electronic format.
• Where possible, we will provide the information in a secure self-service system, such as a private link to the information hosted on a secure server.

Deletion Of Personal Data – Your Right To Erasure

We respect an individual’s right to delete any personal data that we hold on them.

We recommend that a global suppression may be more benefit to a data subject as opposed to a deletion. This is where we still store a minimal amount of individual’s personal data on our system, but mark it as not to be processed for any purpose.

Keeping the minimal amount of personal data we need in order to ensure that we do not contact an individual again may therefore by a preferable option. In this case we will explain to the data subject and offer a clear choice.

5) Data Breaches

C & R Powder Coating Welding and Fabrication Ltd. have a breach reporting procedure in place and in the unlikely event of a breach, will act as per requirements under GDPR.

6) Changes To This Privacy Policy

We may update this privacy policy from time-to-time by posting a new version on our websites. You should check this page occasionally to ensure you are happy with any changes.

We may also notify you of changes to our privacy policy by email.

Sale Of Business

If our business were sold or integrated with another business, your details may be disclosed to our advisers and any prospective purchasers' advisers. They may also be passed on to the new owners of the business, in order to continue providing the service that is currently provided. The purchaser however will be required to follow the practices disclosed in this Privacy Policy or to give you at least three months' notice of any proposed changes.