PSCL Privacy Policy

THE PLASTIC STRAPPING CO. LTD           

PRIVACY POLICY

The Plastic Strapping Company Ltd are committed to protecting and respecting your privacy.

Introduction.

• This Privacy Notice explains what we do with your personal data, whether we are in the process of helping you as a customer or dealing with individuals at our suppliers.
• It describes how we collect, use and process your personal data, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
• This Privacy Notice applies to the personal data of our Website Users, Customers, Suppliers and other people whom we may contact to undertake our business.
• It is important to point out that we may amend this Privacy Policy from time to time. Please just visit this page if you want to stay up to date, as we will post any changes here.  

Who we are.

• This Privacy Notice refers to The Plastic Strapping Company Limited. Our registered office is 21 Glaisdale Drive East, Bilborough, Nottingham NG8 4JJ.   Company Registration Number 1442855.
  
  
• If you have any cause for complaint, if you wish to exercise any of your privacy rights or if you just want to clarify how we use your personal data, you should contact us at info@pscl.co.uk

Whose data do we process?

• Customers:If you are a customer, we need to collect and use information about you, or individuals at your organisation, in the course of providing you with services and goods.
  
  
• We limit the data we collect about customers; we need to make sure that our relationship runs smoothly so we will collect the details of contacts within your organisation, such as names, telephone numbers and email addresses.
• We may pass on your details to our suppliers, in order that they are able to fulfil your order.
• In order to arrange delivery of our goods, we will pass on your personal data to logistics companies.
• We will also collect bank details, so that we can arrange payment for goods and services.
• We may also hold extra information that someone in your organisation has chosen to tell us.
  
  
• The main reasons for using your personal data are to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.
• There are occasions when we will use your name, address and email address for marketing purposes, to develop our business and to extend the level of services available to you. We believe that this is in our legitimate interest.  We always provide an ‘opt out’ option in all our marketing correspondence with you.
• In order to fulfil our marketing campaigns, we may share your personal data with our mailing house or email marketing service provider, we always ensure that this data is transferred securely and these organisations cannot use this data for any other purpose than specified by us. 

• We use ‘cloud storage’ and ‘office applications’ to assist us with our business operations. To ensure that your personal information receives an adequate level of protection, we have put in place appropriate procedures with the third parties we share your personal data with to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the law on data protection.

 

• When taking verbal payment by credit or debit card, we will process information relating to the purchase of goods and services. The transaction data may include your contact details and your card details. Proper records will be kept of these transactions and stored securely, but the CVC will always be immediately destroyed. Payments are processed via a terminal operated by First Data Europe Ltd.
  
  

• Please refer to:- https://www.firstdata.com/en_gb/privacy.html for further information.

 

• We may use your personal data if we deem this necessary for other legitimate interests, such as recovering any outstanding debts etc. 
• Suppliers and Professional Services:We limit the data we collect about Suppliers and our advisors – we need to make sure that our relationship runs smoothly so we will collect the details for our contacts within your organisation, such as names, telephone numbers and email addresses. We will also collect bank details, so that we can pay you. We may also hold extra information that someone in your organisation has chosen to tell us.
   
• The main reasons for using your personal data are to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.
• We utilise a UK hosted VOIP service which does contain personal data in the form of our address book however, we do not currently record any calls on this system other than any voicemail message which you may chose to leave.
  
  • We may use your personal data for the above purposes if we deem this to be necessary for our legitimate interests, such as recovering any outstanding debts etc.

Website.

We collect a limited amount of data from the users of our website, which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information such as how you use our website, the frequency with which you access our website, and the times that our website is most popular.

Our Website is hosted by Shopify Inc. and its affiliates, including Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., and Shopify International Limited (collectively, “Shopify”)

• When visiting or browsing our website, Shopify collect information about the device and browser you use, your network connection, your IP address, and information about the cookies installed on your device.
• When placing orders via our website, Shopify:- Collect customers’ name, email, shipping and billing address, payment details, company name, phone number, IP address, information about orders you initiate, information about the Shopify-supported merchant stores that you visit, and information about the device and browser you use.
• This information is used to provide us with their Services, including supporting and processing orders, risk and fraud screening, authentication, and payments. Shopify also use this information to improve our Services.
• If you opt into Shopify Pay, Shopify store and use this information to pre-fill your checkout information. They additionally use this information to help customize and improve your experience when you visit a merchant store by presenting to you goods and service that are more likely to be of interest to you.

• Shopify use some of the personal information you provide them with to conduct some level of automated decision-making - for example, they use certain personal information (for example, IP addresses or payment information) to automatically block certain potentially fraudulent transactions for a short period of time.
• Shopify is responsible for all onward transfers of personal information to third parties in accordance with the EU-U.S. Privacy Shield Framework, the Swiss-U.S. Privacy Shield Framework, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

• Please refer to:- https://www.shopify.com/legal/privacy for further information.

Cookie Policy.

What is a cookie? A cookie is a small amount of data, which may include a unique identifier.   Cookies are sent to your browser from a website and stored on your device. Shopify use cookies, when you access our website. Cookies are designed to ensure a more effective and user friendly experience.

• Please refer to:-https://www.shopify.ca/legal/cookie for further information.

How long do we keep your personal data for?

• We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
• If we have not had meaningful contact with you (or, where appropriate, the company you are working for or with) for a period of two years, we will review your data and make efforts to determine if it is still relevant to our relationship.  If it is not we will delete your personal data from our systems unless we believe in good faith that the law or other regulation requires us to preserve it (for example, because of our obligations to tax authorities or in connection with any anticipated litigation). 
• If we learn an individual has left our customer or supplier we will delete that individuals personal data from our systems unless we believe in good faith that the law or other regulation requires us to preserve it (for example, because of our obligations to tax authorities or in connection with any anticipated litigation). 
   
• To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
• By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

How do we process your data internationally?

There are circumstances where we may transfer your personal data internationally, this may be:

• to third parties (such as advisers or other suppliers to our business);
• to overseas suppliers
• to overseas clients
• to a cloud-based storage provider; and
• to other third parties

To ensure that your personal information receives an adequate level of protection, we have put in place appropriate procedures with the third parties we share your personal data with to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the law on data protection.

• data from entities in the EU to entities in the United States of America or any equivalent agreement in respect of other jurisdictions
• Our website service providers are based in the US and we have confirmed that they have signed up to the EU-U.S. Privacy Shield Framework for the transfer of personal data from entities in the EU to entities in the United States of America or any equivalent agreement in respect of other jurisdictions

CCTV System

The Plastic Strapping Co. Ltd has a CCTV surveillance system in place at 21 Glaisdale Drive East, Bilborough, Nottingham.   NG8 4JJ. Please contact info@pscl.co.uk to request a copy of our CCTV policy, if required.

Exercising your rights

• Even if we hold your personal data, you still have various rights in relation to it. To get in touch about these, please contact us. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues, which you raise.
• Right to object:If we are using your data because we deem it necessary for our legitimate interests to do so, and you do not agree, you have the right to object. We will respond to your request within 30 days. Generally, we will only disagree with you if certain limited conditions apply.
   

Right to rectification: If you have informed us that your personal data is inaccurate you have the right to have your data corrected on our systems.  We will respond to your request within 30 days.
 

Right to restrict processing: Where we have obtained your consent to process, your personal data or you object to any other processing we deem in our legitimate interest, you may ask us to stop this processing.  We will assess if our interests prevail and make a decision based upon this assessment.  In the event that you are requesting that we stop marketing to you, we will do this unconditionally.
 

Data Subject Access Requests (DSAR): Just so it is clear, you have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or delete it. At this point we may comply with your request or, additionally do one of the following:

• we may ask you to verify your identity, or ask for more information about your request; and
• where we are legally permitted to do so, we may decline your request, but we will explain why if we do so. 

Right to erasure: In certain situations (for example, where we have processed your data unlawfully), you have the right to request us to "erase" your personal data. We will respond to your request within 30 days and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will retain your name on our register of individuals who would prefer not to be contacted or have been erased. That way, we will minimise the chances of you being contacted in the future where your data are collected in unconnected circumstances.

 

Right of data portability: If you wish, you have the right to transfer your data from us to another data controller. We will help with this – either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format. 

 

Automatic Decision Making: There are often occasions where organisations make automated decisions based upon personal data held.  You have the right to have a person intervene in this decision-making process.  We do not undertake any profiling or automated decision making on your personal data
 

Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority, if you want to exercise this right you should contact the Information Commissioners Office at www.ico.org.uk.