• What information we collect
• The legal basis for processing we use in relation to processing your personal data
• How we use your personal information and how long we keep it for
• Who we share your information with and on what basis
• How you can control our use of your personal information
• Your rights
• Who to contact if you want more information
When we collect your personal information
We collect personal information about you as soon as you access our website www.suttonsheds.co.uk using a smartphone or computer and also when you call us. The specific information we collect depends on whether you are a customer or a website visitor. If you buy a product from our website, you become a customer of Sutton Sheds. The specific information we collect is detailed below in the What personal information we collect section of this document.
What personal information we collect on our website
The personal information we collect from you when you access our website comes in two parts: the information you give us when you complete our website forms, and the information we automatically gather from the device you use to access our website.
Information you give Sutton Sheds : this includes the following data items (although you can visit and use our website without giving us this information, if you do not place a transaction or an enquiry during your web visit to us):
• Your first name or initial, and surname
• Your email address
• Your telephone number
• Your postal address
• Payment details: if you order products from our website, your payment details will be processed by our payment processors Opayo. Sutton Sheds does not store any of your payment details; we are given a transaction ID by our payment processor
What personal information we collect by post and by phone
Information you give Sutton Sheds : if you order via the phone we will collect the following information about you;
• Your first name or initial, and surname
• Your email address, to which we send order confirmation.
• Your telephone number
• Your postal address
• Payment details, if you order products from our website, your payment details will be processed by our payment processors Opayo, Sutton Sheds does not store any of your payment details, we are given a transaction ID by our payment processor. If you pay by cheque, this is banked, no details of your bank account are stored by us.
Why we collect your personal information
There are three main purposes for gathering your personal information: for marketing activities, for deliveries, and for transaction processing.
Transaction processing: when you purchase from us either from our website, by email or in person, you become a customer of Sutton Sheds, so we retain personal information on you whilst you remain an active customer of ours and also for a short time when you no longer order from us. When you make an enquiry about a product of ours, we also retain the personal information you give us in your enquiry for a limited period of time. Our Data Retention policy below explains how long we keep your personal information. In all cases for transaction processing, our legal basis for processing your personal data is contract.
Deliveries: We will need to print your name and address on delivery notes, in order to deliver any goods you order from us..
Product offers: from time to time Sutton Sheds will send you discounted product offers via email , SMS or post. These offers are based on our knowledge of the products you have ordered or enquired about and your visits to our website, if you have visited it. The legal basis for processing is legitimate interest
Site optimisation: the device-level information we automatically gather about you allows us to optimise the speed and performance of the website for you. The legal basis for processing is legitimate interest.
Anonymous web analytics: The website aggregates and anonymises all the activity on our website for traffic analysis, to help measure and improve the website performance. We also use this anonymised data to monitor the effectiveness of our advertising. Your personal data is anonymised in this process, so there is no requirement under GDPR for a legal basis for processing.
How we protect and where we store your personal information
The personal information we collect about you is stored within our secure UK Data Centre. No personal information is stored or shipped to non-UK/EU locations. Your personal information is stored in databases which are encrypted, providing the highest level of security. All personal information is moved to and from our website www.suttonsheds.co.uk via an HTTPS connection, which means that the transfer of data is also encrypted. Access to your personal data held on databases managed by Sutton Sheds or its' authorised subcontractors, is granted only when there is a need to use the data, no permanent access exists.
How long we keep your personal information
If you made a purchase from us: we will keep the information you gave us and details of what you bought for up to seven years from the date of the last transaction with us. After that time your personal data will be anonymised, but we will keep your purchase and marketing history.
If you enquired about a product, but did not make a purchase: we will keep the information we have on you as an enquirer for up to three years.
If you wrote to us: we will keep any correspondence with you for six years, although we do keep this information longer if your correspondence is a complaint.
Sharing your personal information with other organisations
Subcontractors: Sutton Sheds use carefully selected subcontractors to assist in the preparations of your base, prior to our arrival and only under instruction from you. The information these subcontractors process includes the personal information such as Name, Address and contact information, this will be used by our contractors to contact you to book visits and work.
Requesting a copy of your personal information
You can contact Sutton Sheds using the information below, to request a copy of the personal information we hold on you. If you request this information, you will need to provide proof of your identity. We will return the information to you electronically in a text file. You are legally entitled to request this information under the General Data Protection Regulation, there is no charge for this service.
To request a copy of your personal information, please email us at firstname.lastname@example.org. Please be sure to include your full name, email address and postal address.
We will supply you the following information:
• Your contact details: which may include your email address, phone and mobile numbers, your previous address, your previous or second email address.
• Your transaction history: if you have ordered from us, you will receive details of your order, including products purchased, date of purchase and the cost of the products
• Email correspondence: we will search our email server to see if your email address is in any email message headers, if we find it, we will send you the email(s)
How to control your personal information on the Suttonsheds.co.uk website
If you do not want to receive communications from Sutton sheds, you can opt-out by emailing us or calling us on 01526342777.
This privacy statement reflects the rights that you have under the General Data Protection Regulation, which specifically charges Sutton Sheds with providing you access to your personal information, and to ensure that your data is used appropriately & securely with specific reference to the rights of you, the data subject. Those rights regarding your personal data are as follows:
The right to access a copy of your personal information that we hold
The right to object to our processing of your personal data, if doing so causes you distress
The right to prevent Sutton Sheds processing your data for direct marketing purposes
The right to object to decisions being taken using automated means that includes your personal data
The right to have inaccurate personal data rectified, or destroyed
The right to have your data erased from our IT infrastructure
The right to data portability
The right to be informed about the collection and use of your data
You can find out more about your rights regarding your personal data in the UK from the Office of the Information Commissioner www.ico.org.uk.
Data Controller: under the General Data Protection Regulation (GDPR), organisations that collect, process and store your personal information are defined as Data Controllers, which makes Sutton Sheds the Data Controller for your personal data collected from our website.
Data Subject: GDPR classifies individuals as data subjects. So you, the customer or enquirer of Sutton Sheds are a data subject under GDPR if you purchase or enquire about our products.
Data Processor: a data processor is an organisation other than the data controller, who processes your personal data on behalf of the data controller. A good example of this is Opayo, who are one of the payment processing options for any products that you buy online. The data processors who handle your personal information gathered by our website have the same duty of care in handling your personal information.