Privacy Policy

Important notice

Cotswold Trading Limited (t/a equisupplies) registered office:1 Cricklade Court, Cricklade Street, Swindon, SN1 3EY are committed to protecting and respecting your privacy, and use your personal data as further explained in this Privacy Policy. We are the “controller” of the personal data you provide to us.

This Privacy Policy describes how we obtain and use your personal data, why we are allowed to do so by the law, who has access to your personal data and what your rights are. Please read it carefully.

You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes. For more information about your rights and how you can exercise them, please see the section: Your Rights.

Personal Data we may collect and why

Personal data is any information which identifies you personally whether directly (for example, your name) or indirectly (for example, information about your use of our products and services).

The principles under data protection require personal data to be:

  1. Processed lawfully, fairly and in a transparent manner.
  2. Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
  3. Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  4. Accurate and, where necessary, kept up to date.
  5. Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
  6. Processed in a manner that ensures appropriate security of the personal data.

We may collect the following data about you:

  1. Contact details. Your name, business/home/delivery address, email address, and telephone number so that we can contact you in response to an enquiry you make or in relation to the products and services that we have agreed to provide to you.
  2. Correspondence. We collect any additional personal data you may provide to us from time to time if you contact us by email, letter or telephone, or by any other means.
  3. Transaction details. We or our third party providers will collect information relating to transactions you carry out for the purposes of fulfilling your orders.
  4. Credit card details. We do not keep or store credit card details once payment has been taken, unless specifically requested by you. In such case, you will be made aware of our policy and informed how the information is stored.

Analytics

We use google analytics to collect generic information with which to help improve our website and service to you. None of which is personally identifiable to you as an individual. Google Analytics uses Cookies to collect the information it needs, as described below. We have no links to other websites.

Cookies

Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.

Like many sites, we use “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

How we use your personal data

We use your personal data for the following purposes:

To provide you with the products and services you have requested.

  1. We use your personal data to accept you as a new or returning customer to provide you with the products and services you have requested.
  2. To send you service communications. We use the contact details you have provided to us so that we can communicate with you about the products and services that we provide, including to let you know about major changes to those products and services or to any related information.
  3. To provide and improve customer support. We use your personal data to be able to provide and improve the customer support we provide to you (for example, where you have questions about our products and services).
  4. To maintain our records and improve data accuracy. Like any business, we process personal data in the course of maintaining and administering our internal records. This includes processing your personal data to ensure that the information we hold about you is kept up to date and accurate.
  5. To respond to enquiries, complaints and disputes. We use the personal data we hold about you to help us respond to any enquiries or complaints you have made, or deal with any dispute which may arise in the course of us providing our products and services to you, in the most effective manner.
  6. To investigate, detect and prevent fraud and comply with our legal obligations. In certain circumstances, we use your personal data only to the extent required in order to enable us to comply with our legal obligations, including for fraud detection, investigation and prevention purposes. This may require us to provide your personal data to law enforcement agencies if they request it.

Legal grounds for processing

Data protection law requires us to only process your personal data if we satisfy one or more legal grounds. These are set out in data protection law and we rely on a number of different grounds for the processing we carry out. These are as follows:

  1. Consent: It is necessary for us to process your basic contact details, payment details and information about the business you represent to:
  2. Provide you with products and services; communicate with you about the products and services that we provide to you, including to let you know about major changes to those products and services or to any related information;
  3. Provide and improve customer support; and notify you about changes to our service. If you choose not to give some or all of the aforementioned information to us, this may affect our ability to provide our products and services to you.

In certain circumstances, we also use your personal data only to the extent required in order to enable us to comply with our legal obligations, including to detect, investigate and prevent fraud.

Who we share your personal data with

We may provide your personal data to our suppliers and service providers, who provide certain business services for us and act as “processors” of your personal data on our behalf. In addition, we may disclose your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property, or safety, of our business, our customers or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection.

In some cases, the personal data we collect from you may, for the purposes set out above, be transferred outside the European Economic Area (EEA) and such destinations may not have laws which protect your personal data to the same extent as in the EEA. We are required by data protection law to ensure that where we or our “processors” transfer your personal data outside of the EEA, it is treated securely and is protected against unauthorised access, loss or destruction, unlawful processing and any processing which is inconsistent with the purposes set out in this Privacy Policy.

How long we keep your personal data for

We retain your personal data for no longer than is necessary for the purposes for which it was provided. What this means in practice will vary between different types of data. When determining the relevant retention periods, we take into account factors including:

  1. legal obligation(s) under applicable law to retain data for a certain period of time;
  2. statute of limitations under applicable law;
  3. potential or actual disputes;
  4. guidelines issued by relevant data protection authorities.

In general, if you have made an enquiry about our products and services, but you are not a customer, your information is not necessary once your quote has expired. Customer information remains active for 2 years after the last transaction date

Your rights

You have the following rights regarding your personal data:

  1. Rights to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy.
  2. Right of access. You have the right to obtain access to your personal data (if we are processing it) and certain other information (similar to that provided in this Privacy Policy). This is so you are aware and can check that we are using your personal data in accordance with data protection law.
  3. Right to rectification. You are entitled to have your personal data corrected if it is inaccurate or incomplete.
  4. Right to erasure.  This is also known as ‘the right to be forgotten’ to enable you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
  5. Right to restrict processing. You have the right to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.
  6. Right of data portability. You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
  7. Right to object to processing. You have the right to object to us processing your personal data for our legitimate business interests (including any related profiling).
  8. Right to withdraw consent to processing. If you have given your consent to us to process your personal data for a particular purpose, you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).
  9. Right to make a complaint to the data protection authorities. You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law.

How to contact us

If you would like to exercise your data protection rights or if you are unhappy with how we have handled your personal data, please feel free to contact us by using the details set out on our site.

If you’re not satisfied with our response to any enquiries or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by:

Writing to: Information Commissioner’s Officer, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; calling: 0303 123 1113; or submitting a message through the ICO’s website at: ico.org.uk

Changes to this Privacy Policy

This Privacy Policy was last updated on 16 June 2020. This Privacy Policy may be updated from time to time, so you may want to check it each time you provide personal data to us.