This policy sets out how we collect, process and hold your personal data if you visit our website or otherwise provide personal data to us. We are Henley Limited a company incorporated under the laws of England whose registered office Henley Stoves and Fireplaces LTD, Half Acre Industrial Estate, Straight Furlong, Pymoor, Ely, Cambridgeshire, CB6 2EG UK
We are the data controller of your personal data.
This policy affects your legal rights and obligations so please read it carefully. If you have any questions, please contact us at firstname.lastname@example.org or call us on +44 (0) 1353 698800
2. Personal data we collect
We collect, process, store and use the following kinds of personal data when you register as a customer or a director of a customer by filling out our account application form: your name, company name, address (and previous address if you lived at your current address for fewer than 3 years), date of birth, telephone number, mobile number, and email address together with payment information and trade references. You agree that you have obtained the consent of your trade references to pass their details to us. We shall contact them only to check the information that you provide to us and will delete their details when we are satisfied that we have verified the information.
We collect, process, store and use the following kinds of personal data when otherwise order products: Name, email, telephone number and delivery address.
We collect, process, store and use the following kinds of personal data when you use our ‘Contact us” form on our website: Name, email and telephone number
All personal data that you provide to us must be true, complete and accurate. You must not register under someone else’s name. If you provide us with inaccurate or false data, and we suspect or identify fraud, we will record this. In addition, we may search at fraud prevention agencies for information on you as part of our due diligence to ensure we comply with anti-money laundering legislation.
You do not need to provide us with any personal data to view our website. However, even we may still collect the information set out in paragraph 3 and you may agree to receive marketing communications from us in accordance with paragraph 4.
When you contact us by email or post, and we may keep a record of the correspondence and we may also record any telephone call we have with you.
3. Data we automatically collect
When you use our website, we, or third parties on our behalf, automatically collect and store information about your device and your activities. This information could include (a) your computer or other device’s unique ID number; (b) your IP address; (c) technical information about your device such as type of device, web browser or operating system; (d) your preferences and settings such as time zone and language; and (e) statistical data about your browsing actions and patterns. We collect this information using cookies in accordance with paragraph 11 and we use the information we collect on an anonymous basis to improve our website and the services we provide, and for analytical and research purposes.
4. Marketing communications
If you agree to receive marketing communications from us you consent to the processing of your data to send you such communications, which may include newsletters and information about new features or products together with information about changes to this policy. We retain evidence of the details of your consent.
You can choose to no longer receive marketing communications by contacting us at email@example.com or clicking unsubscribe from a marketing email. If you do unsubscribe to marketing communications, it may take up to 5 business days for your new preferences to take effect. We shall therefore retain your personal data in our records for marketing purposes until you notify us that you no longer wish to receive marketing emails from us.
5. Lawful processing of your personal data
If you complete a ‘Contact us’ form, you consent to the lawful processing of your personal data to respond to your message.
If you complete an account application form, we will use the information collated on this form to make a search with credit reference agencies to assess your credit worthiness. The credit reference agency may make a record of that search. We may also make a search on the personal credit file of all principal directors/proprietors. For the purposes of credit referencing, fraud prevention and money laundering regulations we may also share your account information and trade payment performance with other carefully selected third parties such as credit reference agencies. Should it become necessary for us to review your account, then again, a credit reference agency search may be conducted and a record kept of that search. By signing the application form you confirm to us that you have obtained the consent of all relevant individuals noted on the application form to the processing of their personal data for these reasons.
If you register as a customer on the website, you consent to the lawful processing of your personal data to enable you to access the customer portal on the website, and order products. If you order the products, you further consent to the lawful processing of your personal data in relation to the delivery of the products.
We may also use your personal data for our legitimate interests, including dealing with any customer services you require, for regulatory and legal purposes, for audit purposes and to contact you about changes to this policy.
6. With whom do we share your data?
We may share your personal data with any service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers, IT service providers, delivery companies, packaging companies, accountants, auditors and lawyers.
Under certain circumstances we may have to disclose your personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or protect a third party’s rights, property, or safety or to enforce our Conditions of Sale.
We may also share your personal data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
7. Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the European Economic Area (the EEA) for any reason, including for example, if our email server is located in a country outside the EEA or if any of our service providers are based outside of the EEA. We shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data.
We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. All information you provide to us is stored on our secure servers. Any payment transactions are encrypted using SSL technology.
Where we have given, or you have chosen a password, you are responsible for keeping this password confidential.
However, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure.
9. Your rights
You have a number of rights under applicable laws.
You have the right to access data that we hold about you, the right to correct and update data that we hold about you, the right to have your data erased, the right to object to processing of your data, the right to ask us to stop contacting you for marketing purposes, the right to request that we transfer your data to another controller and the right to object to automated decision making and/or profiling.
To exercise these rights, or any other rights you may have under applicable laws, please contact us at firstname.lastname@example.org and we shall process your request in accordance with applicable laws.
Please note, we reserve the right to charge an administrative fee if your request is manifestly unfounded or excessive.
If you have any complaints in relation to this policy or otherwise in relation to our processing of your personal data, you should contact the UK supervisory authority: the Information Commissioner, see www.ico.org.uk.
We will retain your personal data for as long as you remain a customer on the website portal.
If you have consented to receive marketing communication, we shall retain your email address until you opt out of receiving such communications.
If you otherwise contacted us with a question or comment, we shall retain your personal data for 6 months following such contact to respond to any further queries you might have.
A cookie is a small file that asks permission to be placed on your browser’s memory or alternatively your hard drive.
Cookies help us to provide you with a better experience by enabling us to monitor which pages you find useful and which you do not. You can delete cookies at any time or you can set your browser to reject or disable cookies although this may disable some of the functionality of the App.
On our website we may use the following cookies:
Analytical/performance cookies: They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies: These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences (for example, your choice of language or region).
Targeting cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Google Analytics operates on our website. We also use a LinkedIn widget for social tracking purposes.
If any provision of this policy is held by a court of competent jurisdiction to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties and all other provisions shall remain in full force and effect.
This policy shall be governed by and construed in accordance with the law of England and Wales, and you agree to submit to the exclusive jurisdiction of the English Courts.
We may change the terms of this policy from time to time. We will try to give 30 days’ notice of when changes take effect, by email and/or in your account if applicable, except where changes do not materially adversely affect you or are beneficial. If you continue to use our website after the time we state the changes will take effect, you will have accepted the changes.