Data Privacy Policy

This privacy notice applies to all customers, suppliers and employees of C & R Tyres Ltd. The purpose of this privacy notice is to let you know how we promise to look after your personal information. This includes what you tell us about yourself, what we learn by having you as a customer or supplier, any data stored for legal reasons and the choices you make about what marketing materials we send you. This notice also explains your rights and how the law protects you under the General Data Protection Regulation (GDPR). We reserve the right to change this Data Privacy Policy from time to time without prior notice.

 

How does the law protect you?

Data Protection law states that we are only allowed to collect, store and use personal information if we have a legitimate reason to do so, this includes sharing the data outside our company. 
Under the law we must have one or more of these reasons to store your personal data:
• To fulfil a contract we have with you.
• When it is our legal duty.
• When it is in our legitimate interest.
• When there is a vital interest.
• When we are undertaking a public task.
• When you consent to it.

 

Types of Personal Data

The different types of personal data we collect and store and how we use it will depend on your relationship with us. The table below shows the information we hold, why we hold it and the basis on which it is held. 


Information

Purpose we hold Data

Basis

Customer and Supplier Account Information including Name, Address, Contact Details, Bank Details, VAT Details, Trade References

To open an Account with our business and to record any transactions

Contractual

Emails or any interactions regarding purchases, sales or services between our employees and existing or potential customers and suppliers.

To manage Purchase, Sales and Servicing enquiries

Legitimate Interest

Data recorded on CCTV system

For the security of our premises and employees

Legitimate Interest

Information on the vehicles and equipment you own

To ensure we can service your requirements and check compatibility of products supplied by us

Legitimate Interest

Copies of enquiry forms

To manage any enquiries received by the business

Consent

Marketing Information provided by the customer to give consent to receive either emails, texts or mailouts

To tell you about relevant products, news and offers

Consent

Employees Name, Address, Date of Birth, Bank Details, National Insurance Number, Tax Code

To process payroll

Contractual

 

How we protect your personal data

We will not transfer your personal data outside the EU without your consent.
We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse or unauthorised alteration or destruction. Please note however that where you are transmitting information over the internet this can never be guaranteed to be 100% secure.
For any payments which we take from you online we will use a recognised online secure payment system.
We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.

 

Where is your data stored?

Customer and Supplier data is stored against your customer or supplier account on our SAGE Accounting System. Employee data is stored on our SAGE Payroll System. Backups?

 

Who will we share your data with?

We will never sell your personal data.  We will not share your personal data with any third parties without your prior consent (which you are free to withhold) except as outlined below or under other circumstances as required by law.  
Data required for the delivery of goods will be shared with couriers and hauliers.
Information on financial transactions and payroll will be shared as required by law with HMRC.

 

How long will your data be stored for?

We will review all data held on a regular basis and will erase information that we are no longer entitled to process.  In accordance with current HMRC guidance, all customer and supplier account data will be held for a minimum of 7 years.  Our CCTV recording facility has a retention period of 28 days that complies with the ICO Code of Practice document.

 

Your rights

You have the right to: 
• Request to see the personal information we hold about you.
• Request for details about how we process your personal information.
• Request that any inaccurate information be corrected.
• Object to our use of your personal information.
• Ask us to delete or stop using your personal information if there’s no need for us to keep it.
You can withdraw consent to receive our marketing communications at any time. You also have the right to change ‘opt-in’ preferences and to unsubscribe from any email or text communications.
You also have the right to complain to the Information Commissioner’s Office.

 

How to Contact Us or Raise a Complaint

If you wish to receive a copy of your personal information, question whether the personal information we hold on you is correct or request we stop using your personal information then please contact us using the following e-mail or postal address:-
chris@candrtyres.co.uk
C & R Tyres Ltd, Station Yard, Sprouston Road, Kelso, TD5 8EU

 

You have the right to take any complaints about how we process your personal data to the Information Commissioner:
https://ico.org.uk/concerns/                                     Tel:        0303 123 1113
Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF