Privacy Policy
1. PRIVACY NOTICE
This Privacy Notice is written to help you understand how and why your personal data is processed at RSM Lining Supplies Global Limited and also displays what rights you can action in relation to the personal data that we process about you.
2. WHO ARE WE?
RSM Lining Supplies Global Limited (referred to in this Privacy Notice as “ RSM”, “we”, “us” or “our”)
Address: Atkinson Court, Coalpit Road, Denaby Main, Doncaster, DN12 4LH
Company Number: 06412005
ICO Registration: ZA628257
If you wish to contact us regarding any of the information contained within this Privacy Notice, please contact Data Protection Lead using the information below:
Email: info@rsm-web.com
Phone Number: +44 (0)1709 864 271
3. HOW DO WE COLLECT YOUR PERSONAL DATA?
Your personal data is collected and processed when:
- When you or your employer engages us to provide our services.
- When you talk to us on the phone, via email or at our offices.
- When you use our website.
- When you download and use our App.
- When you apply to work for us.
- When you send emails or letters to us.
- When you contact us via social media.
- When you sign up to our newsletters or marketing;
- When you give us feedback;
When we receive your data from third parties or publicly available sources (for example your employer or Companies House).
4. WHAT PERSONAL DATA WE COLLECT?
We will collect, use store and transfer different kinds of personal data which we have grouped together as follows:
- Identity Data – Name, Title, Date of Birth.
- Contact Data – Location, Full Address, Email, Telephone Number.
- Transaction Data – Details of the services or products you have purchased from us, including date and time of your instructions or our delivery and spend in relation to that transaction.
- Technical Data – Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
- Profile Data –Purchases or orders made by you, your interests, preferences, feedback and survey responses, preferences about the use of the services.
- Usage Data – Information about how you use our website and services.
- CV Data – Previous employment history, education, awards and references.
- Marketing and Communications Data –Your preferences in receiving marketing from us and your communication preferences.
- Payment Data – Any means by which you make a payment.
We do not collect any special category personal data outside of those mentioned above. This includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your genetic and biometric data.
5. HOW WE USE YOUR PERSONAL DATA
We are only allowed to use or process your personal data when we have a lawful basis to do so, and we are required to inform you what that lawful basis is.
We have displayed in the table below: what personal data we collect from you, how we use it, the lawful basis and if applicable, the special category condition we rely on to process your personal data.
In some circumstances, we can use your personal data if it is in our legitimate interest to do so, provided that we have told you what that legitimate interest is. A legitimate interest is when we have a business or commercial reason to process your personal data which, when balanced against your rights is justifiable, If we rely on legitimate interests, we will display in the table below what those interests are.
| Purpose | Information collected | Lawful basis | Legitimate Interests (if applicable) |
| To register you as a new or prospective customer | · Identity
· Contact |
· Contract | |
| To process and deliver our services | · Identity
· Contact · Transaction · Payment |
· Contract | |
| To manage payments or collect and recover money owed to us | · Identity
· Contact · Transaction · Payment |
· Contract
· Legitimate Interests |
To recovery any debts owed to us. |
| To manage our relationship with you, including notifying you about changes to our terms or privacy notices | · Identity
· Contact · Transaction |
· Contract
· Legal Obligation · Legitimate Interests |
To keep our records accurate and up to date. |
| To enable you to partake in a marketing, or to complete a survey | · Identity
· Contact · Transaction |
· Contract
· Legitimate Interest · Consent |
To study how customers use our services and to help us grow our business. |
| To administer and protect our business and our website | · Transaction
· Technical · Usage |
· Legitimate Interests | Running our business, provision of administration and IT services, network security. |
| To use data analytics to improve our website, products / services, marketing, customer relationships and experiences | · Technical
· Usage · Profile |
· Legitimate Interests | To define types of customers and contacts for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy. |
| To make suggestions and recommendations to you about the services that may be of interest to you | · Identity
· Contact · Marketing and Communications · Technical · Profile · Usage |
· Legitimate Interests | To develop our services and grow our business. |
6. WHO WE SHARE YOUR PERSONAL DATA WITH
In order to provide you with our services and continue to meet our legal obligations, we will disclose your personal data with 3rdparties, in the follow circumstances:
- To verify your identity.
- To handle complaints and improve customer service.
- To provide professional and legal advice.
- To manage and maintain the accuracy of your records.
- To administer marketing on behalf of RSM.
- If RSM is acquired by a third-party, the personal data held by us, will be transferred as one if its assets.
Before we disclose your personal data to a third-party, we will ensure that there is an appropriate lawful basis for doing so. We’ll never make your personal data available to anyone outside RSM for them to use for their own marketing purposes without your prior consent.
7. THIRD-PARTY LINKS
Where our website includes links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share personal data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the Privacy Notice of every website that you visit.
8. TRANSFERRING YOUR PERSONAL DATA OUTSIDE OF THE EEA
The European Economic Area (EEA) consists of EU member states, Iceland, Liechtenstein and Norway. If we transfer your personal data outside of the EEA, we must tell you.
In accordance with GDPR we need to meet one of the following safeguards when using your personal data for cross-border transfers:
- The country we transfer your personal data to holds an adequacy decisionmeaning that the country has been approved by the European Commission for providing an adequate level of protection to the personal data that they process.
- The recipient of your personal data has agreed to have Standard Contractual Clauses (SCC’s)in place which have been approved by the European Commission, obliging the recipient to safeguard your personal data.
We will only transfer your personal data outside of the EEA in very limited circumstances. We have ensured that the organisations we share your personal data with will look after it securely and hold similar processing standards. The organisations we share your personal data with are as follows:
| Third-party | Purpose | Country | Safeguard |
| Stripe, Inc | Payment Services | USA | SCC’s |
9. HOW LONG DO WE KEEP YOUR PERSONAL DATA
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected. When justifying what retention period is appropriate for your personal data, we will take the following into consideration:
- Any statutory or legal obligations;
- The purposes for which we originally collected the personal data;
- The requirements of our organisation and the services provided;
- The lawful basis on which we based our processing;
- The types of personal data we have collected;
- The amount of personal data; and
- Whether the purpose of the processing could reasonably be fulfilled by other means.
10. YOUR RIGHTS
In accordance with UK Data Protection law, you have the following rights in relation to your personal data that is processed within our organisation.
- Right to be Informed– We will always be transparent in the way we use your personal data. This Privacy Notice provides you with all the relevant information that you need to remain informed of our processing activities.
- Right to Access – You have the right to request access to the personal data that we process about you within our organisation.
- Right to Rectification– You have the right to request that we correct any of your personal details that appear to be inaccurate.
- Right to Erasure– You have the right to request that we delete your personal data in the following circumstances:
- Where the personal data is no longer necessary in relation to the purpose for which it was originally collected or processed;
- When you withdraw consent;
- When you object to the processing and there is no overriding legitimate interest for continuing the processing;
- When the personal data was unlawfully processed; and
- When the personal data must be deleted in order to comply with a legal obligation.
- Right to Restriction of Processing– You have the right to request that we restrict processing your personal data in certain circumstances such as:
- Where you contest the accuracy of your personal data, we will restrict the processing until you have verified the accuracy of your personal data;
- Where you have objected to the processing and your legitimate interests override ours;
- When processing is unlawful, and you oppose deletion and request restriction instead; and
- Where we no longer require your personal data, but you require the information to establish, exercise or defend a legal claim.
- Right to Object– You have the right to object to us processing your personal data in these circumstances:
- Where the processing is for direct marketing; and
- Where the processing is based on legitimate interests
11. NOT HAPPY?
If you are disgruntled with how we have processed your personal data, please contact us directly using our details found above in the ‘WHO ARE WE’ section.
If you are unhappy with our response or believe we have not processed your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Address: Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk