Darius Development Limited Privacy Notice Data protection 1st July 2020 V1 

Company name: Darius Development Limited (‘the Company’, ‘we, ‘us’, ‘our’)

Contact details: John Downing

Document: Privacy Notice

Subject: Data Protection

Date: 1st July 2020

Version: V1

 

Darius Development Limited is a data controller for the purposes of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). We are responsible for ensuring that any processing of your personal information by us is done fairly and lawfully. Processing your personal data includes holding, obtaining, recording, using or sharing it. We take your privacy very seriously and will only process your personal data for the purposes set out in this notice. 

The person responsible for data protection enquiries is John Downing who can be contacted at Darius Development Limited 

Source of your personal data

 In all cases we obtain personal data directly from you. This data includes your contact details 

Details about the purposes for which your personal data may be processed and the basis of processing your personal data, together with details of your rights in relation to the processing of your data can be found at Privacy Policy 

The purposes for which your personal data will be processed 

We will need to process your personal data for the purposes of providing purchased products and related services to our clients.  

The basis for processing your personal data 

The legal bases upon which we may rely to process your personal data are: 

• Contractual obligation 

• Legal obligation 

• Legitimate interest 

• Consent 

We need to process certain categories of your personal data in order to enter into an agreement with you and to comply with our obligations under that agreement. We are also required to process certain categories of personal data in order to comply with our legal obligations under relevant legislation, including HMRC. You are not under any obligation to provide us with your personal data, but if you do not we may be unable to meet our legal obligations and so may not be able to provide you with your purchased products.

Our business involves providing products to our clients and so we may need to process your personal data in order to pursue our legitimate interests in achieving this. We may also need to retain personal data in case we need to establish or defend a legal claim. We rely on your consent in certain circumstances, for example to process your data for the purposes of sending you direct marketing by email or text message, to use cookies when you visit our website, or to process sensitive personal data. The bases upon which we may lawfully process your personal data are listed in the table below, with the most appropriate basis listed first. 

Personal Data 

 

Why we need it 

 

Our lawful ground for processing it

Name, address, DOB

To verify your identity 

To perform our services for you

Legal obligation (if applicable). Contractual obligation (if applicable). Legitimate interests

Contact details

To communicate with you

To perform our services for you

Legal obligation (if applicable). Contractual obligation (if applicable). Legitimate interests.

Direct Marketing

We would like to use your contact details to contact you about SaddleSpur products and services, news and information which we think may be of interest to you. However we will not contact you with marketing material unless you consent to our doing so, and you have the right to unsubscribe at any time, by clicking the link which appears in the email footers of marketing emails

 

Sharing your personal data

Your personal information will be processed by our staff and our subcontractors and will be provided to appropriate third parties such as parts’ suppliers in order to provide you with SaddleSpur products and services. Please let us know if you do not want your personal information to be disclosed to a particular third party or category of third parties. 

 

We will not share your personal data with any other organisation unless it is necessary and in connection with providing our work-finding and recruitment services. 

 

Overseas transfers

Data will be stored within the EEA on either local or cloud-based servers and will be subject to technical and organisation safeguarding protection measures. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.

 

Accuracy of your data

We will endeavour to keep your personal data accurate and up to date and will only process it for the specific purposes notified above. Data that is inaccurate or out of date will be deleted. Please notify us if your personal details change or if you become aware of any inaccuracies in the personal data we hold about you. 

 

Retaining your data

Different laws require us to keep different data for different periods of time. We are required by GDPR to keep purchaser client records for at least two years from the date of their creation or the date upon which we last provide a product or service.

 

We may also retain your personal data in order to pursue our legitimate business interests. We will not store your data for any longer than is necessary to comply with our legal obligations or to pursue our legitimate business interests. We will delete your data in line with our retention policy which is can be found at Privacy Policy.

 

Your rights

Whilst we are processing your data, you have the right to: 

1. request access personal data we hold about you; 

2. object to the processing of your personal data; 

3. ask to have inaccurate data held about you removed; 

4. ask to have inaccurate data held about you or corrected; 

5. if processing of your personal data is based only on consent, to withdraw that consent; 

6. request that your personal data is shared with a third party. 

 

Data security

We will ensure that appropriate measures are taken against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data. We have in place procedures and technologies to maintain the security of all personal data from the point of collection to the point of destruction. We will only transfer personal data to a third party if they agree to comply with those procedures and policies, or put in place adequate measures prior to receiving it. 

Maintaining data security means guaranteeing the confidentiality, integrity and availability (for authorised purposes) of the personal data. 

​

Further information and breach reporting

If you require any information about the way in which we process your data or if you wish to report a complaint or a data breach, please contact our DPO on GDPR@saddlespur.com as soon as possible. 

All enquiries will be responded to as quickly as possible and all data breaches will be taken very seriously. If for any reason you are dissatisfied with the way in which your personal data has been processed, you can complain to the appropriate supervisory authority for data protection: 

• United Kingdom Information Commissioner’s Office (ICO) Head office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 

• Scotland office: 45 Melville Street, Edinburgh EH3 7HL 

• Wales office: 2nd floor, Churchill House, Churchill way, Cardiff CF10 2HH 

• Northern Ireland office: 3rd Floor, 14 Cromac Place, Belfast BT7 2JB Phone Number: 0303 123 1113 or Website: https://ico.org.uk/concerns/.ICO Website