1. Who we are
2. Your information
Data Collection and Usage
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- To process your order and obtain payment
- Internal record keeping
- We may use the information to improve our products and services
- We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided
- From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests
3. Your rights
Data Subject Rights
We've listed the rights you have over your information and how you can use them below.
These rights will only apply in certain circumstances. Some of these rights will not be available if there are outstanding contracts between us, if we are required by law to keep the information or if the information is relevant to a legal dispute.
We will normally respond to or action (as applicable) requests within one month from receipt of your request and relevant proof of identification. This period may be extended by 2 further months if necessary taking into account the complexity or number of requests. If this is the case, we will let you know within one month of your original request.
In general, the information or action requested will be provided free of charge. However, if requests are manifestly unfounded or excessive (or repetitive in nature) we may charge a fee (or alternatively refuse to deal with the request).
It is important that we establish that the individual right is being exercised by the correct person. Therefore, we may need to ask you for information in order to verify your identity prior to processing your request. This may include asking you to confirm certain details we hold about you (such as post code or first line of your address) or to provide proof of identification.
You have the right to make the following types of request regarding the Personal Data Envy Bathrooms holds about you:
Right of access (subject access requests) – the right to request a copy of the Personal Data (if any) that we have concerning you and supporting information explaining how your Personal Data is used.
Right of rectification – the right to request that we rectify inaccurate or incomplete Personal Data concerning you.
Right of erasure (right to be forgotten) – the right, in some situations, to delete your Personal Data.
Right to restrict processing – the right, in some situations, to request that we do not use the Personal Data you have provided (e.g. if you believe it to be inaccurate). This is intended as a temporary right until the reason for such restriction has been resolved or rectified.
Right to data portability – the right, in some situations, to request that we transmit your data to you or another entity.
Right to object - the right to object to certain processing of your Personal Data (unless we have overriding compelling grounds to continue the processing) and the right to object to direct marketing/profiling. In certain circumstances, we will be exempted from responding to certain requests. We will use these exemptions to the extent appropriate.
The supervisory body for Data Protection in the UK is the Information Commissioner’s Office. They have information about your rights and how to enforce them, as well as processes for complaints. https://ico.org.uk/
4. Contact us
How to contact us
If you have any questions about this policy please contact our Legal team at email@example.com, or by writing to Head of Legal, Unit 3Q, Faraday Road, Newbury, RG14 2AD.
5. Changes to the policy
This policy may be changed from time to time and will be posted here. We encourage you to visit this area frequently to stay updated.
6. Other policies
In addition, cookies allow us to understand who has seen which pages and advertisements, to determine how frequently particular pages are visited and to determine the most popular areas of our website.
We are committed to keeping your personal information safe. We've got appropriate physical, technical and administrative measures in place to protect your information against accidental or unauthorised destruction, loss, access or alteration.
The person or organisation that determines when, why and how to process Personal Data. It is responsible for establishing practices and policies in line with the GDPR. We are the Controller of all Personal Data relating to our Company Personnel and Personal Data used in our business for our own commercial purposes.
Any information identifying a Data Subject or information relating to a Data Subject that we can identify (directly or indirectly) from that data alone or in combination with other identifiers we possess or can reasonably access. Personal Data includes Special Categories of Personal Data and Pseudonymised Personal Data but excludes anonymous data or data that has had the identity of an individual permanently removed. Personal data can be factual (for example, a name, email address, location or date of birth) or an opinion about that person's actions or behaviour.
Agreement which must be freely given, specific, informed and be an unambiguous indication of the Data Subject's wishes by which they, by a statement or by a clear positive action, signify agreement to the Processing of Personal Data relating to them.
Means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our Legitimate Interests.
Performance of Contract:
Means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.