The type of personal information we collect
We currently collect and process the following information:
- Personal identifiers, contacts and characteristics. For example, name and contact details.
- Customer financial information
- Employee data
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- Storing our customers’ personal data in our systems for the purposes of administering our business.
- To verify your identity in anticipation that you exercise your rights in respect of your personal data.
- To offer and provide services and products you request from us or which we may think you are interested in, via email, telephone or other media.
We also receive personal information indirectly, from the following sources in the following scenarios:
- When an item is sold through a distributor, information about the delivery address may be required to be able to fulfil an order.
We use the information that you have given us in order to administer our business and fulfil our business obligation to our customers.
We may share this information with:
- Where deliveries are required, data is shared with our delivery partners in order to fulfil a shipment securely, where required.
- Where orders are made through us and are fulfilled by our trading partner Truestone, the required data for order fulfilment will be shared with Truestone.
We will not sell or rent your details to any third party.
We will not share your details with a third party except where specifically authorised to do so on lawful grounds: your explicit consent; to perform a contract, to fulfil a legal obligation; to protect your vital interests; to carry out public tasks or for legitimate business purposes.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
Your consent. You are able to remove your consent at any time. You can do this by contacting Brooke Makin, Director at Mayan Roofing Systems, firstname.lastname@example.org.
We have a contractual obligation.
We have a legal obligation.
We have a vital interest.
We need it to perform a public task.
We have a legitimate business interest.
How we store your personal information
Your information is securely stored in our registered offices, on password protected laptops. We make all reasonable endeavours to protect your personal data against loss, alteration or any form of unlawful use. We will store your data in the most secure environment possible, whether physically or electronically. A limited amount of people will have access to your personal data and only ever for the purposes and upon the grounds detailed in this Privacy Notice. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We keep personal customer account information and order information for 6 years following the customer's last transaction, unless a longer retention period is required or permitted by law (which is typically the case in the context of our obligations under tax law). We will then dispose your information by securely deleting it from our systems.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at Mayan Roofing Systems, 7 Kent Close, Granby Industrial Estate, Weymouth, Dorset, Dt4 9TF if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at Mayan Roofing Systems, 7 Kent Close, Granby Industrial Estate, Weymouth, Dorset, Dt4 9TF.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk