Who are we?
Melrose Interiors,
Park View Mills, Wibsey Park Avenue, Bradford, BD6 3QA
privacy@melroseinteriors.co.uk
We are one of the
UK’s leading manufacturers, importers and distributors of rugs and related
flooring products. Also providing a 3rd party logistics service
for a range of customers, we operate from Bradford, West Yorkshire.
What does this
Policy cover?
At Melrose
Interiors we take your personal data seriously. The new EU General Data
Protection Regulation (GDPR) comes into force on 25 May 2018. This will impact
every organisation which holds or processes personal data and introduces new
responsibilities, including the need to demonstrate compliance.
Melrose Interiors
places a high priority on protecting and managing data – in particular, data
concerning customers and staff. We comply with applicable and prevailing GDPR
regulations and have written this Policy to outline our approach and commitment
to complete transparency and compliance.
This policy sets
out:
- the types of
personal data that we collect about you;
- how and why
we collect and use your personal data;
- for how long
we keep your personal data for;
- when, why and
with who we will share your personal data;
- the legal
basis we have for using your personal data;
- the effect of
refusing to provide the personal data requested;
- different
rights and choices you have when it comes to your personal data;
- how we may
contact you and how you can contact us.
What personal data
do we collect about you?
We collect the
information necessary to be able to fulfil our customers’ orders. This
information may include your company, name, address, telephone/mobile number,
email address, order number and order details. We only collect sensitive
personal data from you, and further process this data, on a Legitimate
Interests basis.
Where do we
collect personal data about you from?
The following are
the different sources we may collect personal data about you from:
- The company
you have ordered goods from who is engaging with us to fulfil your order;
- From an
on-line buying platform within which you have placed an order.
How and why we use
your personal data?
We use your
personal data to match your order against our stock and to then despatch your
order correctly. This data can be used to keep you informed of the status of a
delivery. It can also be used to process and return or replace
faulty/incorrectly despatched goods.
How long do we
keep your personal data for? We have a Legitimate Interest in keeping your
personal data to enable any required communication to be managed (ie
return/replacement of goods) after your order has been fulfilled.
After a period of
15 months your personal data will be securely deleted.
Who do we share
your personal data with?
Your data will
never be sold.
What legal basis
do we have for using your information?
We have a
Legitimate Interest in using your information to fulfil your order. By entering
into a purchasing agreement by placing an order this engagement is on a lawful
basis and does not require an individual contract. This may include contacting
you to enable the delivery of goods.
How do we keep
your data safe?
We know how much
data security matters to both our staff and our clients. With this in mind, we
treat all data with the utmost care and take all appropriate steps to protect
it.
Our commitment to
information security is evidenced by our Infrastructure partners’ commitment to
maintaining Cyber Essentials Accreditations. This encompasses their Head Office
and also for the servers located at their Data Centre/Disaster Recovery centre.
Cyber Essentials
certification demonstrates that we effective cyber security controls and
therefore enables us to develop a relationship of trust with our customer base.
We also recognise
that information security is not simply about cyber security. Rather, it
is only part – although a very important part – of a bigger security picture.
This awareness of
information security in its broadest sense prompted our decision to embed an
awareness of information security into our corporate culture.
What happens if
you do not provide us with the information we request or ask that we stop
processing your information?
If you do not
provide the personal data necessary, we may not be able to fulfil your order.
We that in mind it is essential that personal data/information provided is up
to date and accurate
Do we make
automated decisions concerning you?
In terms of any
transaction we only use your data to fulfil and manage your order.
With regard to new
customers, we use data from a credit application form to assess the financially
suitability of your business.
This is then used
within a credit check process.
Cookies
Like many websites
when you visit this website we issue a ‘cookie’ or unique code that allows us
to identify your computer. We use the cookie to note the different areas of
this website recently accessed through your computer – it is only used in
relation to this website and not in relation to any other websites you may
visit.
We will use the
information collected in this way to tell you about services or products, which
might be of interest to you when you make further visits to this website.
Links To Other
Websites
This Privacy
Policy only extends to this website and does not, therefore, extend to your use
of, provision of data to and collection of data on any website not connected to
Melrose Interiors Limited to which you may link by using the hypertext links
within this website.
Do we transfer
your data outside the EEA?
No, we do not
transfer your data outside of the European Economic Area.
What rights do you
have in relation to the data we hold on you?
By law, you have a
number of rights when it comes to your personal data. Further information and
advice about your rights can be obtained from the data protection regulator in
your country.
Rights, what does
this mean?
- The right to
be informed – You have the right to be provided with clear, transparent
and easily understandable information about how we use your information
and your rights. This is why we’re providing you with the information in
this Policy.
- The right of
access – You have the right to obtain access to your information (if we’re
processing it), and certain other information (similar to that provided in
this Privacy Policy). This is so you’re aware and can check that we’re
using your information in accordance with data protection law.
- The right to
rectification – You are entitled to have your information corrected if
it’s inaccurate or incomplete.
- The right to
erasure – This is also known as ‘the right to be forgotten’ and, in simple
terms, enables you to request the deletion or removal of your information
where there’s no compelling reason for us to keep using it. This is not a
general right to erasure; there are exceptions.
- The right to
restrict processing – You have rights to ‘block’ or suppress further use
of your information. When processing is restricted, we can still store
your information, but may not use it further. We keep lists of people who
have asked for further use of their information to be ‘blocked’ to make
sure the restriction is respected in future.
- The right to
data portability – You have rights to obtain and reuse your personal data
for your own purposes across different services. For example, if you
decide to switch to a new provider, this enables you to move, copy or
transfer your information easily between our IT systems and theirs safely
and securely, without affecting its usability.
- The right to
object to processing – You have the right to object to certain types of
processing, including processing for activities such as direct marketing
(however, Melrose do not participate in direct marketing).
- The right to
lodge a complaint – You have the right to object to certain types of
processing, including processing for direct marketing (as above).
- The right to
withdraw consent – If you have given your consent to anything we do with
your personal data, you have the right to withdraw your consent at any
time (although if you do so, it does not mean that anything we have done
with your personal data with your consent up to that point is unlawful,
and due to our commercial relationship being on a transaction by
transaction basis it is highly unlikely consent would be withdrawn). This
includes your right to withdraw consent to using your personal data for
marketing purposes (as in section 7).
We usually act on
requests and provide information free of charge, but may charge a reasonable
fee to cover our administrative costs of providing the information for:
- baseless or
excessive/repeated requests, or
- further
copies of the same information.
Alternatively, we
may be entitled to refuse to act on the request. Please consider your
request responsibly before submitting it. We’ll respond as soon as we can.
Generally, this will be within one month from receipt of your request but, if
the request is going to take longer to deal with, we’ll come back to you and
let you know. We take your privacy seriously and therefore may require you to
prove your identity before we can release any information. When submitting a
request, someone from our Privacy Team will be in touch regarding what types of
ID are required.
How will we
contact you?
We may contact you
by phone or email. If you prefer a contact means over another method or media,
please just let us know.
How can you
contact us?
If you are unhappy
with how we’ve handled your information, or have further questions on the
processing of your personal data, contact us here: Privacy Team, Melrose
Interiors, Park View Mills, Wibsey Park Avenue, Bradford, BD6 3QA
Telephone: 01274
491277
privacy@melroseinteriors.co.uk