This is the privacy notice of C. A. Hendley (Essex) Ltd. In this document, "we", "our", or "us" refers to C. A. Hendley (Essex) Ltd.  

New data protection legislation came into force during May 2018, which aims to protect the privacy of all EU citizens and prevent data breaches. It will apply to any public or private organisation processing personal data.

Established key principles of data privacy will remain relevant in the new Data Protection Legislation but there are also a number of changes, and as such we have revised our privacy policy.

Introduction

This is a notice to inform you of our policy about all information that we record about you. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information.

We undertake to preserve the confidentiality of all information you provide to us, and hope that you reciprocate.

Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection Regulation (GDPR).

The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data. We do this now, by requesting that you read the information provided at www.knowyourprivacyrights.org

Information collection and use

When you interact with us we may collect information from you. We collect and retain information including but not limited to: name; business email address and email content; business telephone numbers; company details and job roles.

C. A. Hendley (Essex) Ltd is the sole owner of the information collected by us. We will not sell, share or use this information in ways different from what is disclosed in this statement.

All personal data and information is managed by our data controller, Kiri Hendley.

How we use the information we collect :

 •  To provide a good service and personalise your experience:  we use information about you to provide goods and services to you including processing transactions and providing customer support.

 •  To communicate with you about our goods and services:  we use your contact information to send transactional communications to you via email, provide customer support and/or technical advice.

 •  To provide customer support:  we use your information to resolve technical issues you encounter and to assist with any other enquiries you may have. When you contact us, whether by telephone, through our website or by e-mail, we collect the data you have given to us in order to reply with the information you need. We record your request and our reply in order to increase the efficiency of our business. We keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service.

 •  To process a complaint:  if we receive a complaint, we record all the information you have given to us and we use that information to resolve your complaint. If your complaint reasonably requires us to contact some other person, we may decide to give to that other person some of the information contained in your complaint. We do this as infrequently as possible, but it is a matter for our sole discretion as to whether we do give information, and if we do, what that information is.

The basis on which we process information about you

The law requires us to determine under which of six defined bases we process different categories of your personal information, and to notify you of the basis for each category.

Information we process for the purposes of legitimate interests

We may process your personal information for our legitimate business interests e.g. direct marketing / data analytics / modifying or improving our services / identifying usage trends / determining the effectiveness of promotional campaigns and advertising.

“Legitimate interests” means the interests of our company in conducting and managing our business to enable us to give you the best service/products and the best and most secure experience.

For example, we may process your data on this basis for the purposes of:

 •  record-keeping for the proper and necessary administration of our business

 •  responding to unsolicited communication from you to which we believe you would expect a response

 •  protecting and asserting the legal rights of any party

 •  insuring against or obtaining professional advice that is required to manage business risk

 •  protecting your interests where we believe we have a duty to do so

When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate business interests do not automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Information we process because we have a legal obligation

We are subject to the law like everyone else. Sometimes, we must process your information in order to comply with a statutory obligation.

For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal information.

Disclosure and sharing of your information

We do not share, or sell, or disclose to a third party, any information collected through our correspondence with you.

Access to your own information

To obtain a copy of your information you may send us a request at sales&service@hendley-essex.com. After receiving the request, we will tell you when we expect to provide you with the information, and whether we require any fee for providing it to you.

We will deal with your subject access request without undue delay and in any event within one month of receipt of your request. However, if the work involved is particularly complex or if numerous requests are made then we may extend this period by up to two additional months. In this case, we will inform you about the extension and explain the reasons.

We will not charge a fee for dealing with your request unless it is manifestly unfounded or excessive. If we charge a fee, we will inform you of this and explain the reasons for doing so.

If you are not satisfied by our actions, you can outline your dissatisfaction by email to us at sales&service@hendley-essex.com. If you remain dissatisfied, you have the right to refer the matter to the Information Commissioner or seek recourse through the courts.

Version 1.1  24 May 2018