General Data Protection Regulation (GDPR) (EU) 2016/679
As you may be aware, new data protection legislation (GDPR) is due to came into force to force on 25th May 2018, which aims to protect the privacy of all EU citizens and prevent data breaches. This affects all companies and the way they keep information about their customers. Part of the regulation requires us to inform you about the data we keep, how we do it and what we do with it:
What personal information do we hold about you and why?
If you have purchased any product from us the personal information we hold about you may include your name and address and possibly your contact numbers and email address. This personal information is needed for the purposes of providing you with an estimate/quotation or we have issued and invoice(s) for the services or goods provided by us.
Who do we share your information with?
Your details will never be shared without good reason and will remain under our control and management always.
In some circumstances, such as direct delivery it may be necessary to share your personal information with a manufacturer or one of our trade suppliers and delivery services. The data passed will be limited to that necessary to complete the order.
We will never sell your data to a third party and personal data is not shared with anyone, unless we are legally obliged to do so.
Keeping your information safe.
We treat the security of storing your personal information seriously. All data stored on our servers is kept secured. We do however understand the risks of personal data breaches to you and will ensure we inform you if there are any personal data breaches that may affect your rights and freedom.
How long do we keep your information?
We keep your information only if it is necessary. If we have entered into a contract with you and received payment for goods/services provided it is necessary to keep your information for up to 7 years to satisfy HMRC tax regulations.
Access to your information and other rights.
You have the right to access the information we hold about you and to receive a copy. You should submit your request to us in writing, by post to Exall Jones Limited, PO Box 99 Morfa Road, Swansea, SA1 1YP or email to firstname.lastname@example.org. You can also request us to correct any information that you believe to be inaccurate or incomplete, or you can request that we erase/delete personal information, although you should be aware for legal reasons (tax and accounting as mentioned above) we may be unable to erase/delete certain information.
Exall Jones Ltd