Privacy Notice
Introduction
Personal data relates to a living individual who can be identified from that data. The new General Data Protection Regulation (GDPR) which came into force 28th May 2018, gives you more control over how your personal information is used. Your privacy is important to us.
Richard Webster Nutrition Ltd is an independent Agricultural Merchant supplying products and services to farmers in the UK. As such we trade business to business, but in doing so, we will hold personal data on individuals related to both our customers / clients and to our suppliers.
This notice sets out how we collect and handle your personal information such as when you purchase products and services from us and when you contact us, how we store and use it, and how you can access and manage this information. We take your privacy seriously and take appropriate steps to protect the personal information we collect from you and to make sure that your personal information is kept secure.
What personal information do we collect about you?
We gather various sorts of personal information. It may be obtained directly from you when we speak to you or from another third party or organisation or may be personal information publicly available on the internet.
The personal information that we collect may include your name, address, contact telephone numbers, email addresses, bank account details, purchase history, payment history etc. We do not record sensitive personal data.
How do we use personal information?
We need personal information in order to set up a trading account, to process and deliver your orders, to notify you of your order status, to make and manage payments, to produce sales invoices, to manage your account, to collect and recover money that is owed to us, to respond to complaints and seek to resolve them, to obey laws and to comply with regulations that apply to us.
We also need information in order to contact you in order to provide customer service, product advice, technical support, for feedback and for marketing purposes. That said, whilst we may communicate with customers and prospective customers by email from time to time we do not buy, sell or exchange mailing lists with any other company and we do not run unsolicited electronic email marketing campaigns. Where we do contact you for marketing purposes you always have the right to email us to opt out of any further communication.
What is the legal basis for collecting this data?
Under Data Protection rules we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
- Contract - your personal information is processed in order to fulfil a contractual arrangement e.g. in order to fulfil orders and to supply our products and services to you.
- Legitimate Interests - this means where we have a legitimate interest in using information to manage our business e.g. to transfer your data to certain Third Party’s such as our suppliers, hauliers, carriers and delivery partners in order to deliver your orders. Or for sharing information with credit reference agencies or debt recovery agencies. Legitimate interest may also used for contacting you with regards to providing customer service, product advice, technical support, for customer feedback and also for marketing purposes.
- Legal Obligation - where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes.
Who we share your information with and why
At no time will we disclose any of your details to any third party, other than for legitimate purposes, or for processing and delivering your orders and providing a high standard of service to our customers. We do not buy, sell or exchange mailing lists with any other company and we will never do so. We do not sell or trade your information to third party organisations. We are an ethical company who are always pleased to take on comments and feedback and improve our processes, standards and customer service wherever possible. Please do not hesitate to email or telephone us if you would like to raise any issues with us.
Your personal data will be treated as strictly confidential and will only be shared for legitimate reasons. We may share your personal information with organisations who assist us in conducting our business or servicing you or your business.
We work with a number of trusted suppliers, agencies and businesses in order to provide you the high quality goods and services you expect from us.
Some examples of the categories of third parties with whom we share your data are:
- Suppliers - We work with trusted suppliers who supply and deliver products and services on our behalf. All suppliers will only hold the minimum amount of personal information needed in order to fulfil the orders you place or provide a service on our behalf.
- Delivery Partners - In order for you to receive your goods, we work with a number of hauliers, carriers and delivery partners. Again, we only pass limited information to them in order to ensure delivery of your items.
- Payment processing - We work with trusted third party payment processing providers in order to securely take and manage payments.
- Credit Reference and Debt Recovery Agencies - We may make searches with credit reference agencies when setting up trade accounts for new customers. We do this to make sure customers are creditworthy and to check their identity, manage their account and also to recover debts.
- Authorised service providers. We use other companies and individuals to perform certain functions on our behalf. Those functions may include payment card processors, delivery, analysing or hosting data on cloud-based servers, and other companies that help us improve our products and services. We use trusted businesses who support our website and other business systems. We may disclose your Personal Information to these companies and other individuals performing services on our behalf.
- Other disclosures. We may otherwise disclose personal information as permitted or required by law, when we believe in good faith it is necessary for safety purposes, required for legal reporting, or to protect our legal rights or enforce our Terms of Use, or to protect the rights of others. We may also disclose personal information to our auditors, legal advisers, or to respond to a court order. We may also aggregate information that we gather about you (e.g., online sales, traffic patterns) and provide these statistics to others in aggregate form.
We may share data with any party linked with you or your business, companies we have an agreement to co-operate with, our professional advisors and accountants, organisations that introduce you to us, companies that we introduce you to and companies you ask us to share your information with.
We may also share your personal information with other organisations if we sell, transfer, or merge parts of our business or our assets, or if we seek to acquire other businesses or merge with them. If any such change to our business happens, these other parties may then use your information in the same way as set out in this Privacy Notice.
When sharing personal information with other organisations we will always share only the minimum amount of data required. Any parties we share your information with are also covered by Data Protection rules and are trusted to keep all information supplied secure and protected from unauthorised access.
We may also share your personal information with companies, organisations or individuals if we believe that disclosure of the information is necessary for legal reasons.
Safeguarding your personal information
We take all reasonable precautions to keep your personal information secure and require any third parties that handle or process your personal information for us to do the same. Access to your personal information is restricted to prevent unauthorised access, modification or misuse and is only permitted among our employees and agents on a need-to-know basis.
The length of time that we keep personal data can vary, we retain data while it is still current and relevant. For accounting purposes we will normally keep data for a minimum of 6 years.
We make every effort to store and to destroy personal data securely. We avoid collecting or retaining excessive amounts of personal data, or any sensitive personal data. We will always endeavour to protect personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Your legal rights and your personal data
You have a number of rights over your personal data processed by us. These include your rights to request:
- Access to your personal data. You may request a copy of the personal data that we hold about you.
- Accuracy of your personal data. You may request that we correct incomplete, inaccurate or outdated personal data. We take sensible steps to make sure that personal data is accurate, complete, and current. You can help us do this by notifying us of any changes to your personal data.
- Transmission of personal data. You may request that we transfer personal data you have provided to us to you or to another person.
- Erasure of personal data. You may request that we delete your personal data.
- Opt outs. You have the right to opt out of email marketing communications by emailing us.
- That the processing of your personal data be restricted. You may request that our use of your personal data ends, is restricted or limited.
- The right to lodge a complaint with the Information Commissioner’s Office. Contact details are available at https://ico.org.uk/concerns/. We would always prefer you to contact us first though, to see if we can answer your concerns.
The extent of your rights are limited by law and we may not act on part or all of your request(s) where the right(s) are not applicable. If we don’t act on your request we will explain our reasons for not doing so when responding to your request.
If you require any further information about how we handle your personal data, or wish to make a request to exercise any of your rights under the relevant Data Protection Laws, please contact Richard Webster your data controller who is responsible for your personal information.
To contact Richard Webster click here.
Richard Webster Nutrition Ltd
Registered Office: Hollyfields House, Kniveton, ASHBOURNE, Derbyshire DE6 1JF
Registered in England & Wales Company No. 04445330. VAT
Reg. No. GB 772 1203 58
Directors: Richard Webster and Susan Webster