Privacy Statement

 

KMR Engineering Ltd is committed to complying with the General Data Protection Regulation and the Data Protection Act 2018. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely.

If we make changes to this notice we will notify you by updating it on our website. KMR Engineering Ltd will be what is known as the ‘Data Controller’ of the personal data you provide to us, and we will sometimes refer to ourselves in this notice as “we” or “us”. By Data Controller, this means KMR Engineering Ltd determines the purposes and way in which any personal data are, or will be, processed.

 

Should you need to contact us please write to:

Data Protection Controller

KMR Engineering Limited

Lady Lane

Hadleigh

Ipswich

Suffolk

IP7 5DS

 

Information we collect

When you buy goods from us we collect certain information relating to you;

Name

Company name

Email address

Telephone number

Address

Company registration number

VAT registration number

Bank or credit/debit card details

 

 

 

How we use this information

To maintain a relationship with you whilst you are a customer

To process orders and provide agreed goods and service to you

For invoicing, processing payments, account set ups and maintenance

To communicate with you, including to respond to information requests, enquiries and/or to obtain your feedback on our products or services

For record keeping, statistical analysis and internal reporting and research purposes

To investigate a complaint you make or to provide evidence in any dispute or anticipated dispute between you and us.

 

Who we share your information with and why

KMR Engineering Ltd works with a number of trusted third party suppliers, agencies and businesses in order to provide you services you expect from us such as delivery companies and credit reference agencies amongst others. Some examples of the categories of third parties with whom we share your data are:

Third Party Suppliers
All suppliers are subject to thorough security checks, and will only hold the minimum amount of personal information needed in order to fulfil the orders you place or provide a service on our behalf.
Delivery Partners
In order for you to receive your goods, KMR Engineering Ltd works with a number of delivery partners. Again, we only pass limited information to them in order to ensure delivery of your items.
IT Companies
KMR Engineering Ltd works with businesses that support our website and other business systems.
Payment processing
KMR Engineering Ltd works with trusted third party payment processing providers in order to securely take and manage payments.
Credit Reference Agencies
if you apply for credit with us we will make searches about you with credit reference agencies. We do this to make sure customers who apply for credit accounts are able to manage the level of credit offered and not committing fraud by providing false or inaccurate information.

In order to process your application we will supply your personal information to credit reference agencies (CRA’s) and they will give us information about you, such as your financial history. We do this to assess your creditworthiness and product suitability, check your identity, manage your account, trace, recover debts, and prevent criminal activity.
 

We will also continue to exchange information about you with the CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organizations. Your data will be linked to the data any joint applicants or other financial associates.

The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at:
Experian Credit Reference Agency Information Notice
Call Credit Credit Reference Agency Information Notice
Equifax Credit Reference Agency Information Notice

We may use automated credit-scoring methods to assess your application and to confirm your identity. We will automatically check your credit history against our lending criteria and if you don’t meet our requirements you will be declined for credit. For more information see the CRAIN notices above. Should you wish to object to the use of automated credit scoring, please contact the Data Protection Controller.
 

How long we keep your information

If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws.

We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes we will delete/destroy this information the only exceptions to this are where:

 

The law requires us to hold your personal information for a longer period, or delete it sooner;

 

You exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;

 

We bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible;

 

Or in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

 

Security

We do take appropriate technical and organizational measures to safeguard the personal information that you provide to us, but no transmission over the internet can be guaranteed to be secure. Please note we cannot guarantee the security of any personal information that you transfer to us over the internet.

 

What are your rights?

You are entitled to request the following from KMR Engineering Ltd these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk

 

Right of access –to request access to your personal information and information about how we process it

Right to rectification –to have your personal information corrected if it is inaccurate and to have incomplete personal information completed

Right to erasure (also known as the Right to be Forgotten) – to have your personal information erased. Contact the Data Protection Controller on 01473 822622 or the address below.

Right to restriction of processing – to restrict processing of your personal information

Right to data portability - to electronically move, copy or transfer your personal information in a standard form

Right to object - to object to processing of your personal information

Rights with regards to automated individual decision making, including profiling –rights relating to automated decision making, including profiling

If you have any general questions about your rights or want to exercise your rights please contact KMR Engineering Ltd, Lady Lane, Hadleigh, Ipswich, Suffolk, IP7 6BD – 01473 822622

You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that you believe does not comply with data, however, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.