We at Gap Metal Ltd take compliance with our legal duties in respect of your personal data seriously and are committed to protecting and respecting your privacy. This policy explains how we use any personal data we collect from you.
What information we may collect from you
Personal data means any information which we may use to identify you, such as your name, contact details and payment information. We may collect and store this information whenever you interact with us, for example, to open an account, place an order or contact us through our email address.
The information we keep is only what is necessary to ensure the smooth running of the business and to perform effective internal administration. Unless defined in this policy or unless you give us permission to do so, we will not use or share your personal data other than as specified in this policy.
*We receive Google Analytics relating to activity on our Company website but this information will not have any identifying data. No personal details are shared that could identify you.
Where is your data stored?
All of the information provided to us is stored on our secure servers. Access to your personal data is limited to authenticated and approved staff.
While we will use reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet or emails is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet or email. Transmission of any personal information is at your own risk.
What is your data used for?
All of the personal data we collect is necessary in order to fulfil our contract with you to provide a service; the legal basis for such processing of this data can be found in Art. 6 (1)(b) GDPR. Without such information we will not be able to send you any order-related communications or fulfil your order.
We may use information held about you in the following ways:
We rarely send marketing correspondence or newsletters but do occasionally have the need to, for example, to inform you of new or improved equipment. You will only receive this information if you have opted-in, at which point you will be added to our marketing database. You can opt-out of this at any point by emailing us at firstname.lastname@example.org.
Who we may share your data with
We will only share your personal information with third parties if we are under a duty to do so to comply with any legal obligation or in order to fulfil our contract with you, e.g. couriers. Your personal information may be shared internally within the Company if access to your personal information is necessary for the performance of their roles.
Your rights under GDPR
You have the right to request access to personal data that we may process about you. If you wish to receive a copy of the personal data which is stored, you may contact us to request this and this will be sent to you.
If you believe any of the information we are storing is incorrect or incomplete, you have the right to notify us of this in which case we will update this immediately.
If you wish us to remove your personal data then you must contact us to request this. We will remove the data as far as practical, however, will continue to store any data which we are legally obliged to keep. Please note that this will mean that we will no longer be able to store any of your information and will affect our ability to conduct business with you.
You can ask us to move, transfer or copy your data so that you can use this information for a different service.
Where you have given us consent, you can withdraw it by contacting us via email at email@example.com. If you have any concerns or questions as to the way in which we process your information please do contact us. In addition, you have a right to bring a complaint with the Information Commissioner’s Office. More information on the Information Commissioner’s Office and your rights is available at www.ico.org.uk.
How long will we store your information?
We store your personal data and other information for as long as necessary in order for you to get the full use and benefits of our services or until you ask us to remove it.
If you have a question relating to the retention period or wish for us to delete your data, please contact us using the details provided above.
In some circumstances, such as to meet legal or regulatory obligations, resolve disputes, prevent fraud, or enforce our terms and conditions, we may hold on to your personal information after we’ve finished providing services to you.
Transfer of your data outside of the European Economic Area
We will not transfer your data outside of the European Economic Area (EEA).