You have a number of rights under data protection laws; these are summarised below.
- the right to be informed
- the right of access
You can access the personal data we hold on you by contacting us on 03330 164 059 or firstname.lastname@example.org. To process your request, we will ask you to send us two forms of proof of identity so that we can be sure we are releasing your personal data to the right person.
We will process your request within one month or, if the request is particularly complex, two months. We can provide you with a copy of your personal data in electronic format or hard copy.
If we consider the frequency of your requests is unreasonable, we may refuse to comply with your request. In those circumstances, we would notify you of your right to complain to the Information Commissioner’s Office.
- the right to rectification
We welcome feedback from you to ensure our records are as accurate and up-to-date as possible. If you think that the information we hold about you is inaccurate or incomplete please ask us to correct it by contacting us on 03330 164 059 or email@example.com or by updating your details at any time through the My Account section in your online account. We will process your request as soon as we receive it or within one month of receipt at the latest.
- the right to erasure
You can ask us to delete your personal data; however, this is not an absolute right. We can refuse to erase personal data which we need to keep (i) to comply with a legal obligation (for instance, we are required by HMRC to keep certain personal data for up to 6 years for VAT reporting purposes); and (ii) in relation to the exercise or defence of any legal claims.
When you ask us to delete your personal data, we assume that you do not want to hear from us again. To ensure that we do not send you any special offers in the future, we will retain just enough of your personal data solely for suppression purposes.
Other than as described above, we will always comply with your request and do so promptly. We would also notify any third parties with whom we have shared your personal data (for instance, our carriers for the purposes of delivering your order to you) about your request so that they could also comply.
Some customers would still like to order our products but do not want to receive any marketing communications from us. This is not a problem as you can simply update your marketing preferences by contacting us on 03330 164 059 or firstname.lastname@example.org.
- the right to transfer your personal data (known as data portability)
You have the right to move, copy or transfer your personal data from one organisation to another. We hold little information that would be much use to another resource supplier, but if you do wish to transfer your personal data we would be happy to help.
If you ask for a data transfer, we will give you a copy of your personal data in a structured, commonly used and machine-readable form (for instance, in a CSV file format). We can provide the personal data to you directly or, if you request, to another organisation.
Please note that we are not required to adopt processing systems that are compatible with another organisation, so it may be that the recipient organisation cannot automatically use the personal data we provide.
When making a transfer request, it would be helpful if you can identify exactly what personal data you wish us to transfer.
We will comply with your request within one month or, if the request is complex or there are a number of requests from you, within two months.
- the right to object
If you would like us to stop processing your personal data for marketing purposes simply let us know by contacting us on 03330 164 059 or email@example.com.