This Policy sets out the obligations of Natural World Products Ltd ("the Company") regarding data protection and the rights of customers, suppliers and employees ("data subjects") in respect of their persona; data under the General Data Protection Regulation ("the Regulation").
The Company are committed to safeguarding your data, whether held on computer or in manual files, whilst providing a valuable service. The primary purpose is to protect individuals against possible misuse of information about them held by others.
The Company is obliged to abide by the data protection principles embodied in the Regulation.
The Policy aims to ensure compliance with the Regulation. The Regulation sets out the following principles with which any party handling personal; data must comply. All personal data shall:
Personally identifiable information could include your name, address, telephone number, gender, business role, email address, job title, type of business & driver licence number.
In order to secure certain payments, we may also collect your credit card number and expiration date, billing address etc. In addition, we may collect financial information from you (e.g. your bank account information) as is necessary to facilitate payments and information required for VAT purposes.
Personal information such as name, telephone number and email address is collected via our website
e.g. when you express an interest in our product or service.
We may collect personal information offline at marketing events or during phone calls with sales representatives or when you place an inquiry via the telephone.
The Company requires personally identifiable information to:
The Company will only collect and process personal data where at least one of the following applies:
Except as provided in this policy, we will not provide your personal information to third parties.
The Regulation sets out the following rights applicable to data subjects:
The Company shall ensure that all personal data collected and processed is kept accurate and up-to date. The accuracy of data shall be checked when it is collected and periodically thereafter. Where any inaccurate or out-of-date data is found, all reasonable steps will be taken to amend or erase that data, as appropriate. If you wish to tell us of changes to your personal details or to correct details we hold about you, you should email the Company with your request to data.protection@nwp recycle.com
The Company shall ensure that all personal data collected and processed is kept secure and protected against unauthorised or unlawful processing and against accidental loss, destruction or damage. The Company shall ensure that all its employees, customers, suppliers or other parties working on its behalf comply with the following when working with personal data:
In addition to the measures above, when working with sensitive personal data the following added security measures and protection is applied:
We are committed to the security of your personal data and will not transfer data outside of the EU unless adequate safeguards are in place to ensure that your rights are protected.
The Company shall not keep personal data for any longer than is necessary considering the purposes for which that data was originally collected and processed. Notwithstanding we are required under UK tax law to keep your basic personal data (e.g. name, address, contact details) for a minimum of 6 years after which time it may be destroyed . Furthermore, where the expected life of a product
exceeds 6 years , customer sales invoices and relating vendor invoices are retained for longer periods to accommodate customers requiring access to their historical data after the 6-year statutory period has ended. When the data is no longer required, all reasonable steps will be taken to erase it.
The information we use for marketing purposes will be retained until you notify us that you no longer wish to receive this information. Please note that if you opt out of promotional and marketing messages, you may continue to receive certain communications from us, such as notifications about your account.
Data subjects may under certain circumstances request that the Company erases the personal data it holds about them. Unless the Company has reasonable grounds to refuse to erase personal data, all requests for erasure shall be complied with , and the data subject informed of the erasure , within one month of receipt of the data subject's request (this can be extended by up to two months in the case of complex requests, and in such cases the data subject shall be informed of the need for the extension).
The Company shall carry out Privacy Impact Assessments when and as required under the Regulation.
If you have any questions or concerns about this policy or wish to exercise any of your rights as a data subject you can contact us by email directed to the Data Protection Officer on data.protection@nwp-recycle .com or by mail addressed to the Data Protection Officer at Natural World Products Ltd, 32 Glenside Road, Dunmurry, BT17 OLH