Under GDPR we must provide information and statements in a clear, concise, transparent, intelligible and easily accessible format. This policy seeks to do just that when explaining how we collect and manage your data.
How we collect your personal data
We never knowingly collect more personal data than is strictly necessary to perform our services.
Personal data includes but is not exhausted to name, email address, post address and contact number. If you choose not to provide this information, we may not be able to provide the corresponding CPLUS products and services or respond to your enquiries.
Personal data is collected voluntarily provided to us by customers when creating an account or signing up via our website, in person or via an affiliated partner. By providing your information requested, you enable CPLUS to provide you with the services you select.
During the time you are registered as active with CPLUS, we will log and record on our secure database calls, emails, meetings, texts, events and any other relevant information.
We also obtain data from publicly available sources, service providers, governing bodies and referees. CPLUS may combine information collected from these sources with information already in its possession.
In addition to the information provided we collect & check data from third parties such as Companies House and accredited bodies.
How we use your personal data
CPLUS will process your personal information for certain legitimate business purposes. Legitimate Interest means the interest of our company in conducting and managing our business to enable us to give you the best service/products and the best and most secure experience.
Your information will be collated onto our databases; all relevant paper documents are securely stored on each site. The database is managed by our support teams to provide good services. We process your personal data only for those purposes that we have communicated with you.
Information We Will Share
We share your information in very limited circumstances set out below:
- where we’re obliged to do so (for example a legal request),
- when we need to work with a third party or core service provider, for example a delivery service, insight companies, marketing communications providers or IT service providers. Each provider is carefully selected, and we’d only pass on the information required for them to perform that service on our behalf; they cannot use your data for any other purpose e.g. their own marketing purposes;
- with our group companies who may provide us with services;
- information with selected credit checking agencies for credit applications and fraud prevention purposes;
- with our insurance brokers or insurers for claims (or potential claims) purposes;
- any telephone calls between you and us in respect of extended warranty products are shared with manufacturers and distributors for quality assurance and compliance.
- We will never sell your information. We will always comply with all relevant data protection legislation (including the General Data Protection Regulation).
- We sometimes share anonymised information and analytics with third parties but not in a way that they could identify you as an individual.
- We use third party payment service providers which are integrated into our website. When you pay using one of these methods e.g. PayPal, you are redirected to the provider’s portal. Your use of these services are subject to the terms and conditions (and privacy policies) of the payment providers.
Basis For Processing
For CPLUS to be allowed to process your personal data, we must have a legal basis for the processing. The data protection legislation sets out what these bases are. We have described below the different bases that we rely on and provided examples of the processing.
There are some contractual reasons why we have to process your personal data. When you buy a product on our website, it creates a contract between us. We need to process the personal data that you provide in order to fulfil our part of the contract. If you do not provide your details we won’t be able to complete your order.
Sometimes we are required to process the personal data that we hold about you for legal reasons – for example, if there is a product recall.
We also rely on being able to process your personal data on the basis that it is in our legitimate interests. When we do this we will always consider your interests and balance any positive or negative impact relating to such processing and your legal rights relating to data protection. The legitimate interests of CPLUS do not automatically override your interests.
If you do not want us to process any of the personal data we have listed as being processed for legitimate purposes, you have the right to object. For more information see the section below relating to your rights. Please note that if you object we may still continue to process your personal data in certain circumstances. Please also remember that if we cannot process your personal data for these purposes your customer experience may not be as efficient.
Our legitimate interests include:
- analysing and understanding your customer journey and behaviour to improve efficiencies and interaction
- sending you email or SMS marketing messages, if you have previously bought something from us
- calling you to discuss your delivery and any other services that we would like to offer you
- promoting and advertising our products and services both on our website and elsewhere on the internet
- analysing our website’s performance and solving any problems
- staff training
- personalisation of your shopping experience
In some cases, we will ask whether you would like us to process your personal data. For example, if you would like us send you regular newsletters or product updates. If you provide us with consent, you may withdraw it at any time by contacting us.
Transfers To Third Countries
CPLUS may transfer your personal data outside of the European Economic Area. This will only be as a result of our service providers being based outside of this area e.g. cloud hosting service providers such as Amazon Web Services or Microsoft Azure. We will always ensure that such providers are in a country that has been assessed to provide adequate protection to personal data by the European Commission, or if the service provider signs a contract with us which contains the relevant protections for you; for example, if a company is based in the United States of America and has signed up to the Privacy Shield we may also send personal data to them for the limited purposes referred to above.
How we protect your personal data
Your personal data security is our highest priority. We have taken steps to protect your personal data by limiting the access to our network where your data is stored. It is our policy to maintain the integrity of any personal data in our possession. Our team only access data that is required to complete their job role.
Although we do our best to protect the information you share via the internet, anything you submit via the internet is done so at your own risk.
Your Rights to your personal data we hold on you:
- Request access to your personal data and obtain a copy
- Request data corrections of any incorrect or incomplete data
- Request to be removed from our databases and systems
- Request to remove consent of data processing
- Opt-out or unsubscribe from all non-essential emails by using the unsubscribe option at the foot of all our commercial communications
Data processing of children or minors
CPLUS will NOT knowingly collect personal data from children or minors (as defined by local requirements), and if we learn that we have personal data about a child or minor, we will delete it from our systems. If you are a child or a minor, you must request a parent or guardian to register for the service on your behalf.
Lodging A Complaint
CPLUS only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with us or the supervisory authority.
You can contact us to lodge a complaint using the following details:
4 The Courtyard
Telephone: 0118 989 9100
Contacting The Information Commissioner’s Office
If you are not happy with the way in which we have dealt with your personal data or your enquiries relating to that personal data, it is your right to make a complaint to the data protection regulator. The regulator is the Information Commissioner’s Office. You can find more detail at www.ico.org.uk.