Longshawe understands the importance of data protection and respects the privacy of all our customers and suppliers. Longshawe will only collect personal data that complies to the harmonized data protection law called the General Data Protection Regulation (EU GDPR).
What does this privacy notice cover?
Under the EU’s General Data Protection Regulation (GDPR), personal data is defined as: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identified or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”
This means that personal data is any information that enables you to be identified. Personal data covers obvious information such as your name and contact details but also less obvious information such as identification numbers, electronic location data and other online identifiers.
This Privacy Notice sets out how Longshawe will use and protect your personal data: how it is collected, held and processed.
What personal data we may collect?
Longshawe may collect some or all of the following personal data (this may vary according to the nature of your relationship with us):
Your business name and relevant addresses.
Accounts departments if different from above.
Contact names, email addresses, and telephone numbers for key personnel within your company.
What we do with the personal data we gather
Under GDPR, Longshawe will always have a lawful basis for using personal data. This may be because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. We may use your personal data for one of the following reasons:
Providing and managing your account with us.
Supplying our products and services, as your personal details are required in order for us to enter into a contract with you.
Fulfilment of our legal obligations, for example tax and audit purposes.
Communicating with you, including responding to emails or calls from you.
We will always work to fully protect your rights and comply with our obligations under GDPR.
How we will store your personal data
We are committed to ensuring that your information is secure. We only store or transfer your personal data within the UK, so it is fully protected under GDPR. In order to prevent unauthorised access or disclosure, we have robust processes to safeguard and secure the information we collect. Indeed, we operate a credible enterprise resource planning (ERP) to ensure the lawful processing of data as well as an ability to erase personal data (so called “Right to be Forgotten”) and/or provide reports to inform individuals about the personal data Longshawe stores.
We will only keep your personal data for as long as is necessary in light of the reason why it was originally collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
The duration of the business relationship.
Appropriate statutory retention periods for records, e.g. accounts information must be kept for seven years.
How do I find out what personal data Longshawe holds about me?
Longshawe can supply the following information if requested (this is called a “subject access request”):
The type of data we process.
How the data was obtained.
How the data is processed (stored, retained and erased).
The purpose and lawful basis of the processing.
Details of how you can correct, withdraw or delete your data from our records.
Subject access requests must be made in writing and sent to firstname.lastname@example.org or by post to Longshawe Packaging, Leekbrook Way, Leek, Staffordshire, ST13 7AP.
We will respond to your subject access request within one month or as otherwise agreed with you if is not possible to respond within this timeframe. In certain circumstances, the company reserves the right to seek legal advice before releasing data.
Changes to the Privacy Notice
We may change this Privacy Notice for time to time. This may be necessary, for example if the law changes or we change our business in a way that affects personal data protection.
For further information, please contact email@example.com or 01538 373683