General Data Protection Regulation
Privacy Policy
This policy explains how we, Trade Van Windows (Vanpimps LTD company registration number 08865975) of Unit 1 Manor Drive, Sileby, Loughborough, Leicester LE12 7RZ, use your personal information which you provide to us when using our website, https://www.tradevanwindows.co.uk. We take our responsibilities for managing your personal data seriously.
When we say your “personal data” or “personal information” we mean any information that identifies you as a person.
Collecting your personal data – our relationship with you
Ordering goods from us
When you order goods from us we will require information from you in order to process your order. We will request you to provide your name, email address and your residential address for delivering your goods. In some cases we may also request your telephone number. These are all essential to enable us to perform our contract with you.
Payments from you are administered by our selected provider, SagePay. We do not store your payment details as all of this information is handled and processed by Sagepay who act as a data controller in this context. You can view the SagePay privacy policy here – https://www.sagepay.co.uk/policies/privacy-policy .
We may also pass on your name and postal address to couriers and other delivery agents in order to deliver your goods.
Signing up to our mailing list
When you sign up to our mailing list you will be required to consent to our using your personal information for marketing purposes. We use Remarkety for our email marketing, a copy of their privacy policy can be found here
Sharing your personal information with third parties
In order to provide our services and operate our website, we use various third parties which are carefully selected by us. These parties include companies such as Lightning Base (hosting services) and Veeqo (inventory management). All of these third parties have in place policies and procedures to ensure adherence to the General Data Protection Regulation (‘GDPR”). In some circumstances, your data may be transferred to or stored at a location outside the European Economic Union (“EEA”) or processed by individuals acting for one of our suppliers. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and the GDPR. Where it is necessary to process data outside the EEA, we ensure that the relevant third party processing the data has either provided the required contractual undertakings as specified by the EU or is a signatory of the EU-US Privacy Shield Framework.
There are certain scenarios where we may have to share your personal information with other parties (not listed in this policy) and examples of these scenarios are set out below:
– For legal reasons, we may be required to share your data with law enforcement agencies, governments, etc. This may be as part of an investigation, or it may be to prevent fraud prevention.
– Where your data may be required to protect against harm to the rights of property or person as permitted by law.
– Where your data may be required to prevent or protect against serious physical harm to an individual.
– If we are involved in an acquisition, a merger, sale of assets, or liquidation. If this circumstance arose, appropriate undertakings would be obtained from the third party.
Access to your information and your rights
You have the right to ask us for a copy of the personal information we hold on you, a “subject access request”. You have the right to have any inaccuracies corrected or removed, or to instruct us to cease processing of your data if no longer relevant, or if there are no other legal or contractual obligations for us to do so. There is no fee for this. However, subsequent copies of such information within an unreasonably short period may be chargeable.
To request a copy of the personal data that we hold on you please contact us using the form on this page.
You also have the right to have any inaccuracies corrected or removed and in certain circumstances you may ask us to erase your personal data. If you would like us to erase the personal data we hold about you, please get in touch specifying why you would like us to do so. You may also instruct us to cease processing your data if no longer relevant, or if there are no other legal or contractual obligations for us to do so.
If you have any enquiries and/or wish to exercise any of your rights in this privacy policy please contact us by using the form further down this page.
You also have the right to make a complaint about our data processing activities to the Information Commissioner’s Office. Further details can be found at https://ico.org.uk.
Retention of Data
We hold your personal data only for as long as is necessary for the specified purpose. Typically, your personal data is deleted within [24] months after your order has been completed. In the case of our mailing list your details are deleted immediately when you click “unsubscribe”.
Other Websites
Our website and our mobile application may have links to other websites. This Privacy Policy only applies to this website and our mobile application. You should therefore read the privacy policies of the other websites when you are using those sites.
Updates
This Privacy Policy is reviewed by us on a regular basis and may be updated from time to time. Please ensure that you are familiar with these changes.