CornishHamperStore

Privacy Policy
What is this Privacy Policy for?
Dash Group (SW) Ltd is committed to protecting and respecting your privacy and personal data. This Privacy Policy describes how we will use your personal information and how you can exercise your rights under the General Data Protection Regulation (GDPR).

Definitions
‘The Company’ is Dash Group (SW) Ltd and its subsidiary companies.

Communication
This policy is available at all premises occupied by the Company. The Company will make available to its employees, customers, the public and statutory authorities any relevant information about the Company’s activities that affect health, safety and the environment

Review
This policy will be reviewed on an annual basis and at other times if specific circumstances require it. This policy was last updated in May 2018.

Responsibility
All directors and staff are responsible for the practical application of these policies in accordance with best practice and existing and future legislation.

Data controller and contact information
The data controller is the Company. Our ICO registration number is ZA070507. If you have any questions, comments or requests regarding this Privacy Policy, please feel free to contact us at:

Data Protection Officer

Dash Group (SW) Ltd

Unit 2 Barncoose Ind Est

Redruth

Cornwall

TR15 3RQ

01209 313130

Contact@thedashgroup.co.uk

Purposes and lawful basis for processing personal data
We may collect, process and use your personal data in the course of supplying goods and services to you and to manage our relationship with you, in the following ways:

Processed under the lawful basis of Contract:

When you enquire about or purchase of goods or services from us, we will collect personal information to enable us to respond to your enquiry and to process and complete your purchase.
When you enquire about purchasing a vehicle on finance, we will collect information to enable third parties to provide finance quotes and agreements.
When you rent a vehicle or storage unit from us, we will collect information to enable third parties to provide insurance cover.
We collect personal information from you when you apply for a job with us to enable us to contact you and process your application.
We may share your details with other companies within our group.
Processed under the lawful basis of Legal Obligation:

We collect and process your personal information for producing invoices and accounting purposes which is required to meet HMRC legislation.
We collect personal information from employees to enable us to meet employment law obligations.
Processed under the lawful basis of Consent:

If you have given consent to receive marketing communications from us, we will collect information concerning your marketing preferences and send you communications based on those preferences.
Who we share your personal data with
We do not share your data with any other third parties except:

if you have given your consent.
if it is necessary to enable the provision of third party services you have requested (for example to facilitate warranty, insurance or finance quotes, agreements or claims).
if we are under a duty to comply with any legal obligation.
Third party recipients of your data
Data processors are third parties who provide elements of our business management services for us, who process or store personal data on our behalf. The categories of these recipients are accounting, marketing, software, and website providers.

We have contracts in place with our data processors to ensure they are looking after your data to GDPR standards, which means they cannot use, share or do anything with your personal data unless we have instructed them to do so.

Personal information provided by third parties
We may receive information about you from other sources (such as parcel companies with whom we are contracted to deliver goods and services on behalf of), which we will add to the information we may already hold about you. This is to enable us to provide services to you.

If you apply for a job with us, we may receive information from the people who provide references.

Personal information about other individuals
If you give us information on behalf of someone else as an alternate contact, referee or next of kin, you confirm that the other person has agreed that you can:

give consent on his/her behalf to the processing of his/her personal data;
receive on his/her behalf any data protection notices; and
if relevant, give consent to the transfer of his/her personal data abroad.
Use of cookies
A cookie is a small text file which is placed onto your computer (or other electronic device such as a mobile telephone or tablet) when you use our websites. We use cookies [and other similar tracking technologies such as [google analytics, Facebook Pixel] on our websites. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify you individually. We use analysis software to look at IP addresses and cookies to improve your experience as a user of our website. We do not use this information to develop a personal profile of you. If we do collect personally identifiable information, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

You can set your browser not to accept cookies and the websites below tell you how to remove cookies from your browser. However, some of our website features may not function as a result.

For further information on our use of cookies, please see our Website cookie policy.

For further information on cookies generally visit www.aboutcookies.org or www.allaboutcookies.org.

Children
We do not knowingly collect personal data relating to children under the age of 16. If you are a parent or guardian of a child under the age of 16 and think that we may have information relating to that child, please contact us. We will ask you to prove your relationship to the child but if you do so you may (subject to applicable law) request access to and deletion of that child’s personal data.

Retention periods
Unless otherwise listed below, your personal data will be kept for a period of 7 years in order to comply with HMRC requirements.

Personal data processed under consent will be kept for as long as you consent to its processing. We will seek to refresh your consent at appropriate intervals.

Your rights in regard to your personal data
You have a number of rights in regard to your personal data. These include the right to request access to, rectification or erasure of personal data we hold, or restriction of processing concerning your data, or to object to the processing as well as the right of data portability. If you wish to make any such requests, please contact us in writing using the contact details at the top of this page.

Right to withdraw consent
Where we have processed your personal data on the lawful basis of consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Complain
If you have any concerns about how we have handled your personal data, please contact us so we may address them.

You also have the right to lodge a complaint with the supervisory authority, the Information Commissioner’s Office, about how we manage your data.

Provision of data
In most cases, the provision of your personal data is necessary to enter into a contract with us.