Statement
GDPR stands for General Data Protection Regulation and replaces the previous Data Protection Directives that were in place. It was approved by the EU Parliament in 2016 and came into effect on the 25th May 2018.
GDPR states that personal data should be ‘processed fairly & lawfully’ and ‘collected for specified, explicit and legitimate purposes’ and that individuals data is not processed without their knowledge and are only processed with their ‘explicit’ consent. GDPR covers personal data relating to individuals.
Introduction
We are committed to safeguarding the privacy of our website visitors and service users, any personal data we hold is protected in accordance to the data protection laws and is used in line with your expectations.
This privacy notice explains what personal data we may collect, why we collect it, how we use it and how we protect it.
In this policy, “we”, “us” and “our” refer to Surplus Test Equipment Ltd.
What Personal data do we collect?
We may process information contained in an enquiry you submit to us regarding goods and/or services, which may include your name, company details, email address and telephone number, this could be via our website, or other online facilities including third party web directories or telephone. The information you provide to us will only be used in relation to your enquiry. Should you make a purchase we will use your data to process orders and deliver goods to your address. The legal basis for this processing is contract.
We may process data about your use of our website and services, data may include your IP address, geographical location, browser type, operating system, length of visit, page views and navigation path, as well as information about the timing and frequency of your use. The source of the usage data is Google Analytics. The legal basis for this processing is consent and our legitimate interests namely monitoring and improving our website and services.
Who we share your data with
We will only share your data with third parties where it is necessary to do so for the purposes of processing of your order. For example, if you choose to pay via PayPal, we may issue a PayPal Invoice which contains your data. We may also provide your name, address and other contact details with an authorised courier to deliver your order, and your data will be used in accordance with their terms and conditions. We will not share your data with any other third parties without your explicit permission.
We will also share your data if:
- We are legally required to do so, for example, by law or by a court
- To enforce or apply the terms and conditions of your contract with us
How do we protect your data?
We protect unauthorised access to your personal data and prevent it from being lost, accidentally destroyed, misused, or disclosed by:
- Keeping printed data locked in filing cupboards in the office which is kept locked when not in use.
- Data is shredded when no longer needed
- Ensuring our servers are protected and encrypted at all times
- Computers, laptops and tablets are password protected
How long do we retain your data?
We will retain your data indefinitely in relation to your initial enquiry and any subsequent purchases you may make.
Your rights with respect to your data
You have the right to:
- Request access, amend or correct your personal data
- Request that we delete or stop processing your data
If you wish to exercise any of these rights at any time or if you have any questions, comments or concerns about this privacy notice, or how we handle your data please contact us. If you have concerns about the way your data is handled and remain dissatisfied after raising your concern with us, you have the right to complain to the Information Commissioner Office (ICO). The ICO can be contacted at Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK0 5AF or ico.org.uk
Changes to this notice
We keep this notice under regular review.