Overview
MW Turfcare is committed to data protection and data privacy. With the General Data Protection Regulation (GDPR) becoming enforceable from 25 May 2018. We have undertaken a GDPR readiness programme to review our entire business. The way handle data and the way in which we use it to provide our services and manage business operations.
We hold data on all our customers and suppliers to meet legal obligations and to perform vital internal functions. This notice details the data we may retain. process and share with third parties relating to vital business operations. We are committed to ensuring that your information is secure, accurate and relevant. To prevent unauthorised access or disclosure, we have implemented suitable physical, electronic, and managerial procedures to safeguard and secure data we hold.
Introduction
We have issued this notice to describe how we handle information the data we hold about our Customers and Suppliers (collectively referred to as “you”).
We respect the privacy rights of individuals and are committed to handling information responsibly and in accordance with applicable law. This notice sets out the data that we collect and process about you, the purposes of the processing and the rights that you have in connection with it.
If you are in any doubt this notice, please contact Mark Wilton (details below).
Types of data we collect and process
The types of Business information we may process include, but are not limited to:
- Identification data — such as your name.
- Contact details — such as business address, telephone/email addresses.
- Employment details — such as job title/position, office location.
- Financial information — such as banking details.
We do not collect or hold any Sensitive personal data (‘special categories of personal data’ under the General Data protection Regulation)
Purposes for processing data
Legitimate business purposes.
We collect and use information when it is necessary for purposes, such as contact and accounting purposes.
We have policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed without authorisation and only accessed or used for specific legitimate purposes.
Legal basis for processing data
Our legal basis for collecting and using the data described above will depend on the data and the way we collect it. We will normally collect data from you only where we need it to perform a contract with you (i.e. to the relationship), where we have your freely given consent to do so.
Any processing based on consent will be made clear to you at the time of collection or use — consent can be withdrawn at any time by contacting Mark Wilton.
Who we share your data with
We take care to allow access to data only to those who require such access to perform their tasks and duties and we will implement appropriate measures to ensure the data is used in a manner consistent with this notice and that the security and confidentiality of the data is maintained.
Transfers to third-party service provider
In addition, we make certain data available to third parties who provide services to us. We do so on a “need to know basis” and in accordance with data protection and data privacy laws. For example, giving your address to couriers.
Transfers to other third parties
We may disclose data to third parties on other lawful grounds, including:
- To comply with our legal obligations, including where necessary to able by law, regulation or contract, or to respond to a court order, administrative or judicial process.
- In response to lawful requests by public authorities (including for national security or law enforcement purposes).
- As necessary to establish, exercise or defend potential. threatened or actual litigation.
- In connection with the sale, assignment or other transfer of all or pan of our business; or
- With your freely given and explicit consent.
- We do not share data for the purpose of marketing.
Data retention
Data will be stored in accordance with applicable laws and kept for as long as needed to carry out the described in this notice or as otherwise required by law. Generally, this means your information will be retained until the end of your business relationship with us plus a reasonable period of time thereafter to deal with any legal matters.
Your rights
You may exercise the rights available to you under data law as follows:
- The right to informed.
- The right of access.
- The right to rectification.
- The right to erasure.
- The right to restrict processing.
- The right to data portability.
- The right to object.
- Rights in relation to automated decision making and profiling.
We respond to all requests we receive from individuals wishing to exercise their data rights in accordance with data protection laws. You can read more about these rights at:
http://ico.org.uk/for-the-public/is-my-information-being-handled-correctly
To exercise any of these rights, please contact Mark Wilton.
Issues and Complaints
We try to meet the highest standards when collecting and using information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This notice was drafted with clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of information. However, we are happy to provide any additional information or explanation needed.
If you want to make a complaint about the way we have processed your personal information, you can contact the Information Commissioners Office in their as the statutory body which oversees data protection law – http://www.ico.org.uk/concerns.
Updates to this notice
This notice may be updated periodically to reflect any necessary changes in our privacy practices. In such cases, we will inform you by email.
Contact details
Please address any questions or requests relating to this notice to Mark Wilton.
Email: mark@mwturfcare.com
Annex A — Third-party processors
Key third-party processors
The following are our key third-party processors who will process your data.
Santander Bank
We use Santander Bank for our banking and credit needs. They hold records on our customers and suppliers for the purpose of making and receiving payments. Information may include:
• Company name
• Bank details
Phone Providers
We use BT for our phone provision. They hold records on our customers and suppliers for the purpose of mobile phone usage. Information includes:
• Phone number
• Details of mobile phone calls and messages