This privacy notice is provided to inform about how and why your personal data is used so that we can be as transparent, and to ensure that you are aware of your rights under data protection legislation.
Who is the Data Controller?
Aspex Furntiture Ltd (also known as All Aspex Group) is the Data Controller for your personal data and our address is 77 High Street, Caterham, Surrey, CR3 5UF. We can be contacted on info@allaspexgroup.com or on 01883 342424
Which personal data do we process and why?
We process your personal data so we can engage with you and supply our services. We use your personal data for account management purposes, invoicing, maintaining communication, running projects and providing service based information.
As a client or prospective client, we process your name and contact data as well as job title and details and type of the organisation you work for. The lawful basis we use for this is Article 6.1.f UK GDPR (Legitimate Interest). The legitimate interest we pursue is to grow our business through expanding and retaining our client base and provide excellent customer service. As with any legitimate interest processing, you have the right to object to this and you can do so by contacting us using the information provided above.
Where we require personal data to enter a contract, if you fail to provide the information required, we will be unable to provide the agreed products and services to you.
Who are the recipients of your data?
As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:
- It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation. Our lawful basis for this is Article 6.1.c -legal obligation.
- We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. We would do this as under the basis of Article 6.1.f – legitimate interest as we have a legitimate interest in developing our business.
What about data processed by third parties on our behalf?
We use the services of other organisations in the processing your data. We use cloud-based platforms for email and document storage, accounts and video conferencing. We ensure these third party providers manage your data is handled in accordance with the requirements of the UK GPDR.
Do we transfer your data outside of the UK?
We do not transfer personal data outside of the UK.
How long do we keep your data?
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain the personal data of our clients for a minimum of 7 years for financial reporting purposes.
These are your rights.
The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:
- You have the right to get access to and copies of your personal data.
- You can ask us to rectify any inaccurate information we may be holding.
- You can request we restrict our processing of your data.
- You can ask us to erase your personal data if it is no longer required for the purpose we collected it or have no legal obligation to retain it.
- You have the right to object to processing we undertake under a legitimate interest basis.
If you want to exercise any of these rights, please contact us using the above contact details.
You have the right to lodge a complaint about our processing with a supervisory authority, in the UK, this is the Information Commissioner’s Office.
The Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Helpline number: 0303 123 1113