Who are we?
Melrose Interiors, Park View Mills, Wibsey Park Avenue, Bradford, BD6 3QA
privacy@melroseinteriors.co.uk
We are one of the UK’s leading manufacturers, importers and distributors of rugs and related flooring products. Also providing a 3rd party logistics service for a range of customers, we operate from Bradford, West Yorkshire.
What does this Policy cover?
At Melrose Interiors we take your personal data seriously. The new EU General Data Protection Regulation (GDPR) comes into force on 25 May 2018. This will impact every organisation which holds or processes personal data and introduces new responsibilities, including the need to demonstrate compliance.
Melrose Interiors places a high priority on protecting and managing data – in particular, data concerning customers and staff. We comply with applicable and prevailing GDPR regulations and have written this Policy to outline our approach and commitment to complete transparency and compliance.
This policy sets out:
- the types of personal data that we collect about you;
- how and why we collect and use your personal data;
- for how long we keep your personal data for;
- when, why and with who we will share your personal data;
- the legal basis we have for using your personal data;
- the effect of refusing to provide the personal data requested;
- different rights and choices you have when it comes to your personal data;
- how we may contact you and how you can contact us.
What personal data do we collect about you?
We collect the information necessary to be able to fulfil our customers’ orders. This information may include your company, name, address, telephone/mobile number, email address, order number and order details. We only collect sensitive personal data from you, and further process this data, on a Legitimate Interests basis.
Where do we collect personal data about you from?
The following are the different sources we may collect personal data about you from:
- The company you have ordered goods from who is engaging with us to fulfil your order;
- From an on-line buying platform within which you have placed an order.
How and why we use your personal data?
We use your personal data to match your order against our stock and to then despatch your order correctly. This data can be used to keep you informed of the status of a delivery. It can also be used to process and return or replace faulty/incorrectly despatched goods.
How long do we keep your personal data for?
We have a Legitimate Interest in keeping your personal data to enable any required communication to be managed (ie return/replacement of goods) after your order has been fulfilled.
After a period of 15 months your personal data will be securely deleted.
Who do we share your personal data with?
Your data will never be sold.
What legal basis do we have for using your information?
We have a Legitimate Interest in using your information to fulfil your order. By entering into a purchasing agreement by placing an order this engagement is on a lawful basis and does not require an individual contract. This may include contacting you to enable the delivery of goods.
How do we keep your data safe?
We know how much data security matters to both our staff and our clients. With this in mind, we treat all data with the utmost care and take all appropriate steps to protect it.
Our commitment to information security is evidenced by our Infrastructure partners’ commitment to maintaining Cyber Essentials Accreditations. This encompasses their Head Office and also for the servers located at their Data Centre/Disaster Recovery centre.
Cyber Essentials certification demonstrates that we effective cyber security controls and therefore enables us to develop a relationship of trust with our customer base.
We also recognise that information security is not simply about cyber security. Rather, it is only part – although a very important part – of a bigger security picture.
This awareness of information security in its broadest sense prompted our decision to embed an awareness of information security into our corporate culture.
What happens if you do not provide us with the information we request or ask that we stop processing your information?
If you do not provide the personal data necessary, we may not be able to fulfil your order. We that in mind it is essential that personal data/information provided is up to date and accurate
Do we make automated decisions concerning you?
In terms of any transaction we only use your data to fulfil and manage your order.
With regard to new customers, we use data from a credit application form to assess the financially suitability of your business.
This is then used within a credit check process.
Cookies
Like many websites when you visit this website we issue a ‘cookie’ or unique code that allows us to identify your computer. We use the cookie to note the different areas of this website recently accessed through your computer – it is only used in relation to this website and not in relation to any other websites you may visit.
We will use the information collected in this way to tell you about services or products, which might be of interest to you when you make further visits to this website.
Links To Other Websites
This Privacy Policy only extends to this website and does not, therefore, extend to your use of, provision of data to and collection of data on any website not connected to Melrose Interiors Limited to which you may link by using the hypertext links within this website.
Do we transfer your data outside the EEA?
No, we do not transfer your data outside of the European Economic Area.
What rights do you have in relation to the data we hold on you?
By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country.
Rights, what does this mean?
- The right to be informed – You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Policy.
- The right of access – You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this Privacy Policy). This is so you’re aware and can check that we’re using your information in accordance with data protection law.
- The right to rectification – You are entitled to have your information corrected if it’s inaccurate or incomplete.
- The right to erasure – This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
- The right to restrict processing – You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
- The right to data portability – You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
- The right to object to processing – You have the right to object to certain types of processing, including processing for activities such as direct marketing (however, Melrose do not participate in direct marketing).
- The right to lodge a complaint – You have the right to object to certain types of processing, including processing for direct marketing (as above).
- The right to withdraw consent – If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful, and due to our commercial relationship being on a transaction by transaction basis it is highly unlikely consent would be withdrawn). This includes your right to withdraw consent to using your personal data for marketing purposes (as in section 7).
We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:
- baseless or excessive/repeated requests, or
- further copies of the same information.
Alternatively, we may be entitled to refuse to act on the request. Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from receipt of your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know. We take your privacy seriously and therefore may require you to prove your identity before we can release any information. When submitting a request, someone from our Privacy Team will be in touch regarding what types of ID are required.
How will we contact you?
We may contact you by phone or email. If you prefer a contact means over another method or media, please just let us know.
How can you contact us?
If you are unhappy with how we’ve handled your information, or have further questions on the processing of your personal data, contact us here: Privacy Team, Melrose Interiors, Park View Mills, Wibsey Park Avenue, Bradford, BD6 3QA
Telephone: 01274 491277