1. Who We Are
We are EH Smith (Builders Merchants) Limited, a company registered in England and Wales with company no. 800907 whose registered office is at Westhaven House, Arleston Way, Solihull, West Midlands, B90 4LH. For the purposes of data protection law, we will be a controller of the personal data we hold about you. This means we make decisions about how and why your information is used, and have a legal duty to make sure that your rights are protected.
2. The Personal Data We Collect
We collect the following types of personal data:
Data you give us
Data that you provide to us when using www.ehsmith.co.uk (our “Website”) including but not limited to your contact details, details about any requests for information you might make as well as details of your visits to our Website. This information may be provided at the time of requesting information about what we do or requesting a product. If you contact us, we may keep a record of that correspondence. If you send us personal data in connection with a job application, we may keep it for up to 6 months in case we decide to contact you at a later date.
When you visit our Website, we may collect technical data about the device you are using, including where available your IP address, operating system and browser type. This is used for system administration and to improve the look and feel of our Website.
Special Category Data (also known as sensitive personal data)
We do not collect any Special Categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
A cookie is a small file of letters and numbers that we store on your browser or device if you agree.
We use the following types of cookies:
You can refuse to accept some or all cookies by modifying settings within your browser. For guidance on how to do this visit http://www.aboutcookies.org. However, if you block strictly necessary cookies, you may be unable to access certain parts of our Website.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
We may use personal data held about you in the following ways:
When contacting you for the above purposes we may do so by phone, post, email or other electronic means, unless you instruct us not to do so.
Your data will be treated in accordance with applicable data protection law. It will not be disclosed to anyone outside of EH Smith, its affiliated or associated companies, and any other parties named or described in section 8 below.
We may rely on legitimate interests to process your personal data, provided that your interests do not override our own. Where we rely on legitimate interests, these interests are:
Where you are acting as an agent, employee or contractor of one of our business customers, we may send you information about our products and services by e-mail or post. If you wish to opt out of receiving such material, please either contact us using the details given in section 1 above, or click the “unsubscribe” link in any of our marketing e-mails.
6. Keeping your Personal Data Safe
We employ a variety of physical and technical measures to keep your personal data safe and to prevent unauthorised access to, use or disclosure of it. We control who has access to your data (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data protection procedures which they are required to follow when handling personal data.
7. Storage and Retention
Where we store your personal data
Electronic data and databases are stored on secure servers in the United Kingdom and we do not transfer your personal data outside of the European Economic Area.
How long we keep it
We collect and store personal data for purposes connected with our business. As such, we will only retain your personal data for as long as necessary for those purposes.
We keep information which forms part of our business record for the life of the product in order to guard against the risk of a legal claim or a request by the tax authorities to review our business records. As the lifespan of our products can differ depending on a range of factors, this period will be determined on a product-by-product basis.
8. Disclosing Your Personal data
We may need to disclose your personal data to third parties. Where we do so, any such disclosure will be on the basis that these third parties are required to keep the data we give them confidential and secure, and will not use it for any other purpose than to carry out the services they are performing for us. We may disclose personal data to:
9. Disclosures Required by Law
We are subject to the law like everyone else. We may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. We also may need to retain and disclose certain personal data about you to regulatory authorities and to appropriate agencies to conduct anti-money laundering checks and to assist with fraud prevention. We will disclose this information as is required by law.
10. Links to Third Party Websites
11. Your rights
We want you to remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
If you would like further information about any of your rights or wish to exercise them, please contact us using the details given in section 1.
Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so (for example, because the information no longer exists or there is an exception which applies to your request). If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you should contact the UK Information Commissioner’s Office, which oversees data protection compliance in the UK. Details of how to do this can be found at www.ico.org.uk.
12. Updating this Policy
We may update this Policy at any time. When we do, we will post a notification on the main page of our Website and we will also revise the updated date at the bottom of this page. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the personal data we hold.