Adesas Ltd is committed to ensuring that your privacy is protected, we understand that your privacy is important to you and you care about how your personal data is used.
Introduction.
This Privacy Notice explains what we do with your personal data, whether we are in the process of helping you as a customer or dealing with individuals in our supplier chain.
It describes how we collect, use and process your personal data, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
This Privacy Notice applies to the personal data of our Website Users, Customers, Suppliers and other people whom we may contact to undertake our business.
We may change this Privacy Policy from time to time by updating this page. Please visit this page if you want to stay up to date, as we will post any changes here.
Information about Adesas LTD.
This Privacy Notice refers to Adesas Ltd, our registered office is Unit 9, Station Road Industrial Estate, Madeley, Telford, Shropshire TF7 5EF.
If you have any cause for complaint, if you wish to exercise any of your privacy rights or if you just want to clarify how we use your personal data, please contact our Privacy Compliance Officer on 01952 586330, by mail at Adesas Ltd, Unit 9, Station Road Ind Estate, Madeley, Telford, Shropshire, TF7 5EF or by email at sales@adesas.co.uk.
Whose data do we process?
Customers: If you are a customer, we need to collect and use information about you, or individuals at your organisation, in the course of providing you services such as:
Sale and delivery of goods.
Pricing or product queries.
Product and catalogue updates.
Occasional promotions and sale events.
We limit the data we collect about customers; but we need to make sure that our relationship runs smoothly, so we will collect details for our contacts within your organisation, such as names, telephone numbers and email addresses. We DO NOT collect or process “sensitive” data.
We may occasionally pass on your details to our suppliers, in order that they are able to fulfil your order direct.
We will pass on your data to logistics companies to deliver items to you directly. In some cases, our suppliers may also arrange delivery directly with our customers.
We will also collect bank details, so that we can arrange payment for products and services.
We may also hold extra information that someone in your organisation has chosen to tell us.
The main reasons for using your personal data is to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.
There are occasions when we will use your name, address and email address for marketing purposes, to develop our business and to extend the level of services available to you, we believe that this is in our legitimate interest. We always provide an ‘opt out’ option in all our marketing correspondence with you.
We may use ‘cloud storage’ to assist us with our business operations, this includes data storage as well as web applications. All of our data processed on the web is based in the UK.
We may use your personal data if we deem this necessary for other legitimate interests, such as recovering any outstanding debts etc.
Suppliers and Professional Services:
Data we collect about Suppliers and our advisors – we need to make sure that our relationship runs smoothly, so we will collect the details for all of our contacts within your organisation, such as names, telephone numbers and email addresses.
We will also collect bank details, so that we can pay you.
We may also hold extra information that someone in your organisation has chosen to tell us.
The main reasons for using your personal data is to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.
We may use ‘cloud storage’ to assist us with our business operations, this includes data storage as well as web applications. All of our data processed on the web is based in the UK.
We may use your personal data for the above purposes if we deem this to be necessary for our legitimate interests, such as recovering any outstanding debts etc.
Website Visitors: We collect a limited amount of data from the users of our website, which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information such as how you use our website, the frequency with which you access our website, and the times that our website is most popular.
We use cookies to distinguish you from other users on our website. A cookie is a small file which asks permission to be placed on your computer’s hard drive. If you agree, the file is added and the cookie helps analyse web traffic and can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We collect data to fulfil our contractual obligations with you, such as name, address, delivery address, email address, telephone number.
We may also collect your I.P address to help us protect our systems from fraud.
We collect data from you on our website if you enter any data into the web forms, such as ‘Contact Us’.
How long do we keep your personal data for?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.
If we have not had meaningful contact with you (or, where appropriate, the company you are working for or with), for an additional three years, we will review your data and make efforts to determine if it is still relevant to our relationship. If it is not, we will delete your personal data from our systems, unless we believe in good faith that the law or other regulation requires us to preserve it, (for example, because of our obligations to tax authorities or in connection with any anticipated litigation).
If we learn an individual has left a Company, either a customer or supplier we will delete that individual’s personal data from our systems unless we believe in good faith that the law or other regulation requires us to preserve it, (for example, because of our obligations to tax authorities or in connection with any anticipated litigation).
Storage of Data.
Any data is only stored in the UK. This means that it is fully protected under the GDPR or equivalent standards by law.
The security of your data is essential to us, and to protect your data we take a number of important measures, including the following:
Taking all measures to protect against unauthorised access, improper use, alteration, destruction or accidental loss of data.
Information stored in electronic form is on password protected IT hardware and UK based cloud storage.
We protect our server and computers containing data with the use of approved security software and firewalls.
We carry out regular back-ups and system updates
Paper data is kept in files, including data as per ISO 9001:2015, VCA COP.
Exercising your rights.
If we hold your data, you still have various rights in relation to it. To get in touch about these, please contact our Privacy Compliance Officer at sales@adesas.co.uk, by mail at Adesas Ltd, Unit 9, Station Road Ind Estate, Madeley, Telford, Shropshire, TF7 5EF or by phone at 01952 586330.
We will deal with your request without undue delay, and in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues, which you raise.
Right to object: If we are using your data because we deem it necessary for our legitimate interests to do so, and you do not agree, you have the right to object. We will respond to your request within 30 days. Generally, we will only disagree with you if certain limited conditions apply.
Right to rectification: If you have informed us that your personal data is inaccurate you have the right to have your data corrected on our systems. We will respond to your request within 30 days.
Right to restrict processing: Where we have obtained your consent to process your personal data or you object to any other processing which we deem in our legitimate interest, you may ask us to stop this processing. We will assess if our interests prevail and make a decision based upon this assessment. In the event that you are requesting that we stop marketing to you, we will do this straight away.
Data Subject Access Requests (DSAR): Just so it is clear, you have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or delete it. At this point we may comply with your request or, additionally do one of the following:
We may ask you to verify your identity or ask for more information about your request; and – where we are legally permitted to do so, we may decline your request, but we will explain why if we do so.
Right to removal: In certain situations (for example, where we have processed your data unlawfully), you have the right to request us to delete your personal data. We will respond to your request within 30 days and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will retain your name on our register of individuals who would prefer not to be contacted or have been deleted. That way, we will minimise the chances of you being contacted in the future where your data may be collected in an unconnected circumstance.
Automatic Decision Making: There are often occasions where organisations make automated decisions based upon personal data held. You have the right to have a person intervene in this decision-making process. We do not undertake any profiling or automated decision making on your personal data.
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority, if you want to exercise this right you should contact the Information Commissioners Office at www.ico.org.uk..