Privacy policy

Introduction

Cedar Joinery & Building Ltd is committed to protecting and respecting your privacy.

This privacy policy was last updated in May 2018 in line with the new General Data Protection Regulation (GDPR).

This policy explains in detail the types of personal data we may collect from you when you interact with us. It also explains how we’ll store and use that data, and how we’ll keep it safe. This policy also details your rights, and other useful privacy and security related matters. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Who is the Data Controller?

The data controller is: Cedar Joinery & Building Ltd, 18 Ashfield Court, New Broughton, Wrexham, LL11 6FD

Information we may collect from you

Certain categories of information collected by Cedar Joinery & Building Ltd are necessary to use our Services, such as the information you must provide when transacting with us. This information may include your name, postal address, e-mail address, phone number, bank account details (if paying by cheque)

When you use our Services, we may collect the following data about you:

• Name and address
• Contact phone number
• Email address
• Bank account name, number and sort code (only payments by cheque)
• If you contact us, we may keep a record of that correspondence

Where we store your personal data

Your data is processed onto our systems and periodically backed up onto a hard drive which is stored at the office building.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

How we use your information

Your information will only be used for the processing of quotations, undertaking contracts, closing our sales.

Bank account details will be on cheques processed at our business bank.

On completion of quotations/contracts/sales we will hold the digital and physical files relating to them on record as required by the relevant contracts, which may be up to 6 years.

How your information is shared

We will only transmit your information to other parties if it is required to fulfil your request for a quotation or to complete a sale or contract works.

All data disclosures will only be relevant to the particular requirements of the quotation, sale or contract works.

We may disclose your information to third parties:

• Only as necessary to complete the required tender, quotation, sales order or subcontract. This information will be handled in accordance with the guidelines of the GDPR and again, will only be relevant to the requirements of providing our services.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, and other agreements; or to protect the rights, property, or safety of Cedar Joinery & Building Ltd, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of protection against fraud.

Your Rights

Under the General Data Protection Regulation (GDPR), you, as a data subject have a number of rights which are detailed below. Some of these only apply in specific circumstances and are qualified in several respects by exemptions in data protection legislation. We will advise you in response if we are relying on any such exemptions.

• Access to your personal data: You have the right to request a copy of the personal information that we hold about you. Should you wish to make such a request, please email: [email protected]. You should include adequate information to identify yourself. Your request will be dealt with as soon as possible.
• Correction of personal data: You can request us to rectify and correct any personal data that we are processing about you which is incorrect. Should you wish to make such a request, please email: [email protected].
• Right of erasure: You can request us to erase your personal data where there is no compelling reason to continue processing. This right only applies in certain circumstances.
• Right to data portability: This right allows you to obtain your personal data that you have provided to us with your consent or which was necessary for us to provide you with our Services in a format which enables you to transfer that personal data to another organisation. You may have the right to have your personal data transferred by us directly to the other organisation, if this is technically feasible.
• Right to restrict processing of personal data: You have the right to object to our use of your personal data which is processed on the basis of our legitimate interests. However, we may continue to process your personal data where there are compelling legitimate grounds to do so or we need to process the data in connection with any legal claims.
• Rights related to automated decision making and profiling: You have the right not to be subject to a decision which is based solely on automated processing (without human involvement) where that decision produces a legal effect or otherwise significantly affects you. This right means you can request that we involve one of our employees or representatives in the decision-making process. We are satisfied that we do not make automated decisions of this nature.

How to contact us

For any requests related to your personal information or any of your rights referenced above, you can contact us by:

• Telephone: 01978 513044
• Email: [email protected]