We take your privacy very seriously. The below policy explains how we use your information to ensure you and your orders are dealt with efficiently, without bias and giving you the best customer service we can offer.
We are committed to putting our customers (you) first and therefore we are transparent on how we collect, use and protect your details. We at Gloveman Supplies Ltd, along with our integrated divisions of Nicholsons SW Ltd and WSB Tackle, are data controllers and are referred to in this policy as "we", "us" or "our".
Here’s a breakdown of what our Privacy Policy explains:
As a supplier of goods we ask for certain details (data) that enables us to function as a company in the completion of orders.
The data collected for customers and their orders is accessible by us at our two offices in Redruth, Cornwall and our warehouse in Pettistree, Suffolk, so orders can be completed in a satisfactory manner.
Below are details (data) we collect and then hold on you:
We collect no other personal data on you as a customer or in conjunction with your order. For card payments we process these in SagePay either online when supplied by you, or by our staff over the telephone to SagePay via Sage 200. No payment card details are stored by us at all.
Delivery email addresses and/or mobile telephone numbers will be entered on delivery instructions as these are used by our courier networks to inform you when your delivery may be expected.
Where orders are placed on your account we keep the following necessary information on transactions:
The data we hold for each customer and their orders also enables us to enquire on your behalf when the goods ordered may have been lost in transit by the delivery company, incorrectly picked in our warehouses or arrive damaged. Where goods are lost or arrive damaged, the data we hold will be passed to the delivery services used. This typically means the delivery full name, delivery company name (if applicable), delivery address and items ordered. This is essential to complete investigations for errors to be rectified.
Besides ourselves the data we hold on our servers is accessible by third-party data controllers – Micross Logic for Sage 200, Aspidistra for Sage 200 and Zynk for Sage 200. These third parties provide software and support used by us in our day-to-day operation as a company where orders are taken verbally and imported electronically. These third party organisations also have their own privacy policies and are not connected in any way to this privacy policy. Written confirmation of their privacy policies can be supplied on request by emailing [email protected].
If you have given your consent to receive email marketing, only your email address will be used by a third party email service called Campaign Monitor. No other personal information is kept on this website as it is not required. There Policy can be viewed online here https://www.campaignmonitor.com/policies/ (please refer to section 7 on their website).
When using our following e-commerce websites www.gloveman.co.uk we use GoB2B (https://gob2b.com/) and for www.wsbtackle.com we Absolute Web Design (https://www.absolutewebdesign.co.uk/). Data used on these websites falls under their privacy policy at the time of collection. When that data is passed to us for order fulfilment we then become the controller and your data will fall under our privacy policy. EKM Servers are located in the UK and therefore your data will not go outside the EAA.We will also disclose your data for legal reasons to collection agencies and/or legal representatives if payment is outstanding on orders for goods purchased, which under our Terms and Conditions, still remain the property of Gloveman Supplies Ltd and their integrated divisions.
Your data will also be disclosed to legal authorities if required to do so by Law.
We will only collect and use your data (as described above “What we collect and why” and “Your data and other organisations”) in accordance with data protection laws. Our grounds for processing your personal information are as follows:
Consent – Where necessary we will only collect and process your data if you have consented for us to do so in business operation or buying goods for sole use. For example, when you create an account with us for ordering purposes we will use your data to provide the services and goods as mentioned in “What we collect and why”. Company marketing correspondence via email to you will only be made with your consent. We will never assume you want to receive emails of which an order is not associated. Our websites will ask you for specific permission to receive marketing emails. Also our staff will ask you via the telephone if you would like to receive marketing emails and a record of consent is kept alongside customer data.
Legitimate Interests – We may use and process some of your details (data) where we have sensible and legitimate business reasons for doing so. Under European privacy laws there is a concept of "legitimate interests" as a justification for processing your data. Our legitimate interests for processing your data are:
We do not knowingly collect or store any personal information about children under the age of 16. If you are aged under 16 please get your parent’s or guardian's permission before you provide any personal information to us.
You have the following data rights under GDPR legislation which will apply from May 25th 2018:
We have the right to refuse or charge for requests that are manifestly unfounded or excessive. Upon refusal we will explain fully to you why the decision was made. If this does occur you have the right to complain to the supervisory authority (ICO - https://ico.org.uk/) and to a judicial remedy which will be dealt with in the period of one month (30 days).
We store and use your data while your account is active and it will remain live and be stored indefinitely, including archiving, unless you request it to be deleted permanently as long as there is a current and regular transaction history associated with you and Gloveman Supplies Ltd and its integrated divisions.
If you have not ordered for seven years your data will archived at the end of each financial year (by 31st March) on the seventh year of non-trading. Seven years is the amount of time we as a company have to keep financial transaction records (invoices) for HMRC retention purposes.
Any data breach will be dealt with immediately and if a breach occurs you will be notified at the time of the breach. If the breach will result in a risk to your rights and freedoms, the breach will be instantly reported to the ICO.
Gloveman Supplies Ltd and its integrated divisions use a third party IT partner - CF Systems. As such CF Systems have the ability to access our electronic data through their role as an IT support partner. They do not and will never store this data on their servers or share outside of CF Systems. In addition, CF Systems have a robust security infrastructure and processes that protect against data breach, and they are Cyber Essentials certified and carry certification to ISO9001. Their work with Gloveman Supplies Ltd and its integrated divisions has included implementing a layered IT and data security system, which includes fully configured firewall protection and an end point anti-virus to help minimise the companies technical vulnerability to data breach.