Data Protection and Privacy Policy - Direct Sales Channel

  1. Introduction
    1. This Data Protection and Privacy Policy contains important information as to how we collect, process, store and use your personal data, records and information and about some of our key responsibilities under the Data Protection Act 2018 (the Act) and the General Data Protection Regulations 2018 (GDPR) and in respect of other laws; including how we may use that data to comply with our legal and regulatory responsibilities.
    2. We take our responsibilities under the Act and GDPR, very seriously and your data and its security is very important to us. Please read this Data Protection and Privacy Policy carefully and if you have any questions or queries please contact our Data Protection Officer at 01909 537380 or at www.anpariodirect.co.uk.
  2. Information we collect from and about you
    1. In the course of our business relationship with you (whether you are simply making an enquiry or buying the Products), we will collect, process and store, information about you that you may give us by phone, by email, via our website, in person, or otherwise. Some examples of how we collect this information includes:
      1. by using our website, we will collect, process and store, traffic data, weblogs, location data transaction data and content which you upload or otherwise supply (e.g. reviews and comments on our blog);
      2. if you pre-order/ order and/or register for an account, we will collect, process and store, the information that you provide on the website, via SagePay and in our stock system;
      3. communications via our website or by phone with our personnel where we will collect, process and store such information; and,
      4. where you have signed up to our newsletter provided testimonials.
    2. The personal data, records and information may include amongst other things, your name, address, email address, phone number as well as information about others which you provide such as your employees and customers/clients. We do not hold sensitive personal information about you or any third parties.
    3. This Data Protection and Privacy Policy applies to all personal data, records and information which we collect, process and store, from people who enquire about and/or buy our products, including:
      1. from visitors to our websites; and/or,
      2. which we collect from you via telephone or in person.
  3. Uses of information we collect from and about you
    1. We gather personal data, records and information about you and we use the personal data, records and information that you give to us and that we gather about you, in the following ways:
      1. to assist us in handling any enquiries/supplying the Products and to notify you about any changes to the Products;
      2. to carry out our obligations arising from any contracts between you and us (including fulfilling orders);
      3. to permit selected third parties who help us and who support our business (e.g. logistics and fulfilment companies (e.g. Parcelhub and Hallam Express), IT support (website provider/hosts IOCEA), Google Analytics and financial service companies (e.g. payment provider Sage Pay));
      4. in order to fulfil our legal and regulatory obligations e.g. crime prevention and compliance with health and safety obligations, pest, disease and hygiene control;
      5. where you have consented, to:
        1. provide you with information about/market to you our Products; and,
        2. selected Brand Partners/suppliers to provide you with information about/market their Products which may be of interest to you.
  4. Disclosure of the information we collect from and about you
    1. You agree that we have the right to share your personal data, records and information with third parties, being:
      1. associated or group companies;
      2. financial services companies;
      3. selected third parties including suppliers and sub-contractors who help us and who support our business;
      4. to governmental organisations (including regulators); and,
      5. where you have consented to our selected Brand Partners/suppliers
    2. We will disclose your personal data, records and information to such third parties:
      1. to assist us in handling any enquiries/supplying the Products and to notify you about any changes to the Products;
      2. to assist us in the performance of any contract we have with you and to enforce or apply our terms and conditions of business and other agreements;
      3. to help us monitor the usage of our website including to accurately estimate the number of visitors to the website and volumes of usage, to monitor user experience and moderate and review the content which you upload or otherwise supply (e.g. reviews and comments on our blog);
      4. if we are under a duty to disclose or share your personal data, records and information in order to comply with any legal obligation, or to protect the rights, property, or safety of Anpario plc and our other customers. This includes exchanging information with other companies and organisations for the purposes of crime prevention and compliance with health and safety obligations, pest, disease and hygiene control; and,
      5. where you have consented, to Brand Partners/suppliers to provide you with information about/market their Products which may be of interest to you.
  5. Where we store your personal data
    1. We will take all steps reasonably necessary to ensure that your data information and records are treated securely and in accordance with the Act and GDPR, including:
      1. using SSL cerificates and hashed password protection to protect your customer journey and account details;
      2. storing your data and information in a private cloud on secure servers which are located and hosted in the United Kingdom. We do not transfer data and information to any location outside the United Kingdom; and,
      3. using a respected and industry leading third-party, Sage Pay, to process your payment details.
    2. Please note, we do not hold or retain payment details and any payment transactions will be performed by Sage Pay through their website and those of your financial service providers (e.g. credit card companies).
  6. Cookies
    Our website uses cookies. Cookies are small files of letters and numbers that are downloaded on to your computer when you visit a website. Cookies are used by us to do a number of things, e.g. remembering your preferences, recording what you are looking at on our website, and counting the number of people looking at our website. To find out more see our Cookies Policy on cookies and how we use them.
  7. How long do we keep your personal data?
    1. We will keep your information for as long as is necessary to fulfil the purposes set out in this this Data Protection and Privacy Policy and for such longer period as may be proscribed by/to comply with applicable laws and regulations.
    2. In addition, in respect of information which you provide by consent (and subject always to our obligation to keep such information for such longer period as may be proscribed by applicable laws and regulations), we will use such information only for a period of up to two (2) years and no longer, unless renewed by opt in/consent.
  8. Your rights and access to your data, information and records
    1. You have the right at any time to ask us not to process or to restrict the processing of your personal data, records and information or to notify us that you no longer want to receive marketing information from us or from our selected brand partners. You can exercise your rights at any time by contacting us at 01909 537380 or at www.anpariodirect.co.uk or by post to Manton Wood Enterprise Park, Worksop, Nottinghamshire, S80 2RS
    2. The Act and GDPR, also gives you the rights in certain circumstances to access, rectify, amend, erase and transfer/port information held about you. You may exercise such rights at any time by submitting an information access request by contacting us at 01909 537380 or at www.anpariodirect.co.uk or by post to Manton Wood Enterprise Park, Worksop, Nottinghamshire, S80 2RS.
    3. However, you must be aware that in exercising these rights you may prevent us from performing our obligations in any contract we have with you.
  9. Consent of third parties
    1. To the extent that personal data, records and information is provided by you about third parties, including for example your customers and employees, YOU MUST obtain the necessary consent for the disclosure of this information on the same or equivalent terms as set out in this Data Protection and Privacy Policy and that you have the right permissions and authorisations.
    2. Before you release any such personal data, records and information to us; YOU MUST ensure that you have the right permissions, consents and authorisations to do so.
  10. Amendment
    We reserve the right to amend this Data Protection and Privacy Policy to ensure our compliance with new/replacement legislation, particularly following the enactment of the GDPR.