May 2018
We respect your privacy and understand that privacy is important to you and that you care about how information about you is used, so this privacy notice sets out details about what data we collect and how we use it.
We hold data about you, generally so that we can perform the contract between us, we anticipate doing business together or for legal reasons.
Where we collect personal data via our website, we will be upfront about it and it will be obvious to you that you’re providing personal data and how we will be using it. A separate privacy policy is available.
Visitors calling to the office are either going to arrive at reception then go into the stock room or come upstairs to the office.
We have CCTV in our reception lobby which does not infringe on the public area. This is for us to identify who has arrived at our inner door. Whilst we can see images from this recording, it is overwritten every day and only the senior team have access to the information. We do not share it with anyone and the lobby has a notice that identifies that we are recording who is in there.
People arriving are identified by speaking to us through the intercom.
We have no signing in book and we keep no records of who has arrived on site, apart from CCTV.
Orders are normally placed by phone or email and written onto a job sheet.
We collect: Name, site address, billing address, email and telephone number at this stage.
This information is passed through Sage and the paper copies stored in our locked cabinets in the office.
We may share important technical documents via Dropbox but access to each file is restricted and shared only to the client/person[s] that we know requires that information in order to fulfil the contract. We do not openly share this. Dropbox’s privacy policy can be found here
https://www.dropbox.com/en_GB/privacy
For enquiries that do not proceed, the details are kept on paper until the outcome is known and it is then shredded. Not proceeding matters are not put on Sage. For details of this please see the section under retention.
As a business, we use Outlook and our information is stored by them in accordance with their own privacy policy
https://privacy.microsoft.com/en-gb/privacystatement
In our office, our computers are password protected. Our staff have smart mobile phones and the security of these is controlled by fingerprint and or password.
We use Facebook and Twitter to raise and maintain our profile. We do not target individuals or businesses. The information is stored and held in accordance with Facebook and Twitter policies. See below
https://en-gb.facebook.com/policy.php
https://twitter.com/en/privacy
We hold your data on Sage for accountancy and credit control reasons for 7 financial years. This is held on our password protected computer systems.
https://www.sage.co.uk/uk/hrpayrollhero/privacy-policy
We hold our employee’s data for the purposes of performing the employment contract and legal reasons. We have paper employee files which are kept in a locked cupboard and only accessed by authorised staff (Directors, HR personnel and accountants)
We have a separate employee privacy policy which has been given to all members of staff.
We collect Name, address, bank details, phone number, email address for remittances and payments. This information is held on Sage and paper copies are in a locked filing cabinet.
https://www.sage.co.uk/uk/hrpayrollhero/privacy-policy
Unless stated elsewhere in this document or in our terms of business we only store the data necessary to provide the services we provide to you. We will keep this data for as long as it is lawful for us to do so (this may be for as long as you are a customer or because of a legal obligation to retain the information, whichever is the longest).
For example we keep accounting information for 7 financial years and job sheets for 2 calendar years.
CCTV images are overwritten every day.
We destroy our paperwork by sending it to an authorised shredding company.
We use a number of third-party cloud-based services for the purposes of effectively running our business and providing our services to you. We also use a number of third-party organisations, e.g. accountants, HR support, etc.
Within the trade, we also send out to other businesses, plans, drawings and quotes to enable them to assist us in technical matters. In order for the correct identification to be recognised, we identify the address of the property at this stage. No other personal details are given.
In all cases where we are using a third-party service or company, we will only provide the minimal amount of information for the purposes of delivering the service to us and to meet our requirements.
We always carry out due diligence against all our third-party suppliers for the purposes of ensuring their compliance with data protection, maintaining adequate security of your data and ensuring they apply adequate data protection principles to the processing of the data we supply.
Sage is only accessed by senior members of the business team.
We don’t direct market anyone, we don’t keep data for those purposes. We do use Facebook and Yell.com for the purposes of raising our profile. When using these two applications, you will be directed to our web page. We do not collect individual data from this, and all details of our online privacy policy are given on our web page.
Under current data protection legislation in the UK, you have rights as an individual which you can exercise in relation to the data we store and process about you. You can find more information about your rights on the Information Commissioner’s website: https://ico.org.uk/for-the-public/
If you want to make a complaint about the way we are processing your data, you can contact us, using the contact details below. You also have the right to complain to the Information Commissioner’s Office: https://ico.org.uk/concerns/
Where we are processing your data and needed to ask your permission to do so, you are able to withdraw your consent at any time. If you wish to stop receiving our marketing emails you can do so, by clicking on the “unsubscribe” link at the bottom or the email. Otherwise, you can contact us, using the contact details below.
If you wish to raise concerns about the way we are processing your data or would like to raise an objection, then please email us via office@croombs.co.uk with your concerns.
It is important that any of your data that we process is kept up to date. We will from time to time ask you to verify your contact details but if you wish to update any information we hold about you, please contact us using the contact details below.
Under some circumstances, you may request us to delete your data from our systems. Where this is possible (e.g. we don’t have any legal purpose for continuing to process your data) we will erase it from our systems.
If you wish to exercise your right to be forgotten, please contact us via the contact details below.
Your right to portability allows you to request a machine-readable format of the data you supplied to us and associated service logs (where we store them). Please contact us, using the contact details below, if you wish to receive a CSV export of your data.
You have the right to ask us about what data we hold about you, how we process it and provide you with a copy of the information, free of charge and within one month of your request.
To make a request for any personal information we hold and process about you, we would prefer it if you could put it in writing or in an email to the addresses below. We will need to verify your identity before providing the information and where necessary may contact you further to ensure we understand what data you are requesting.
We do not share any personal data with any third parties unless it is lawful for us to do so, if required by law to do so or if you provide us with permission to do so. This includes the use of professional services for example accounting, HR, debt collection and legal.
For more information about your data rights and privacy or data protection in general visit the Information Commissioner’s Office website: https://ico.org.uk
If you have any questions about how we collect and use your information not covered in this privacy notice, or if you wish to speak to someone about our approach to data protection and privacy, please contact:
Ian Croombs (ian@croombs.co.uk)
We may change or update elements of this privacy notice from time to time or as required by law. The most current version of our privacy notice is available on our website at croombs.rewindclient.co.uk
v. 1 6.6.18 Ian Croombs – First version
In this privacy policy, unless the context requires a different interpretation:
This privacy policy applies only to the actions of Croombs Electrical Services Ltd. and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.
We may collect the following Data, which includes personal Data, from you:
(the data collected, unless for enquiries, is via Google Analytics to identify website performance.)
We may process information contained in any enquiry you submit to us regarding goods and/or services (“enquiry data”). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you that have been the basis for your enquiry.
This data is not used in any generic marketing, added to any marketing database or shared with any other third parties, except selected data processors, who may have access to our website. Any enquiry data supplied is only kept for the duration of your enquiry if it does not result in a specific provision of services.
Croombs Electrical Services Ltd. may, from time to time, employ the services of other parties for dealing with certain processes necessary for the operation of the Website. The providers of such services do not have access to certain personal Data provided by Users of this Website.
This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.
Wherever you are required to submit Data, you will be given options to restrict our use of that Data. This may include the following:
You have the right to ask for a copy of any of your personal Data held by Croombs Electrical Services Ltd. (where such Data is held) on payment of a small fee, which will not exceed £10.
Croombs Electrical Services Ltd. reserves the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations.
You may contact Croombs Electrical Services Ltd. by email at info@croombs.co.uk.
30 May 2018
