The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore the way this website processes, stores and protects user data and information will also be detailed within this policy.
Kernow Oils Ltd (Company Registration: 04773016) gathers and processes personal data in accordance with it’s privacy notice and compliance with the General Data Protection Regulation 2016/18 (“GDPR”) and all applicable laws.
GDPR principles guide our processing activity with Kernow Oils Ltd committed to protecting personal data and ensuring, it is processed in a lawful, fair, and transparent manner. This notice provides the framework along with the necessary supporting information to provide an overview of personal data processing along with your rights and our obligations in regard to the data process.
What information do we collect and how is that information used?
Kernow Oils Ltd has a policy to collect only the minimal personal data required to customer queries, requests or orders. This information includes basic personal information such as name, e-mail, address, and phone number. We may however collect further relevant information from you however, this will only be requested if the data is necessary and will be obtained directly from you with your express and freely given consent.
All personal data is processed with your consent or when necessary to comply with legal requirements, critical for the performance of a task, contract obligations in which you are party, or the purposes of the legitimate interests pursued by the Company.
Personal data may be processed for the following purposes:
- To perform and improve the management of ongoing business operations.
- To provide you with relevant company, product, or service information. You retain the right to unsubscribe from marketing communications at any time. Please see “Rights”
- To enable us to provide products and services.
- To maintain CRM standards and offer a more personalised customer service.
- To enable the timely and accurate response to customer queries and questions.
- To enable accurate communication purposes.
- To fulfil contractual obligations with clients.
- Accounts and trading purposes.
- Legitimate interests, including but not limited to the ongoing development, security and protection of the business such as business development, changes or improvements to security measures, software, organizational and administrative purposes, detection and prevention of fraud, corruption and illegal activities, or any other purposes which enables the organization to continue conducting business in a compliant and lawful manner.
Who do we share personal data with?
The Company may share personal data with its customers, affiliates, service providers, suppliers, or governmental authorities where specifically requested.
Personal data may be transferred within the European Economic Area (EEA) and to third countries given the location of recipients. For such, we ensure that the country in question has an adequate level of protection by the existence of an “Adequacy decision” enacted by the European Commission or, in the absence of a decision, providing appropriate safeguards.
How long do we hold personal data?
Kernow Oils holds personal data for no longer than is necessary for the purposes for which the personal data are processed. These periods adhere to legal requirements as well as industry standards and guidelines.
Once the personal data’s useful life has expired and is no longer needed for the purpose it was gathered, the data is deleted or anonymized. Personal data may be stored for longer when intended for archiving purposes. Customers on whom we are holding personal data retain the ‘right to be forgotten’ at any time. Where this request is made, any personal details held by the company with be anonymised or deleted within 72 working hours of the request receipt. Please see the “Rights” section for further information on personal data deletion.
You can exercise your rights at any time by contacting our head office on 01736 757002 where we will process your request and make any data necessary, or carry out your request within 72 working hours.
Requests for personal data rectification or deletion will be carried out by the company free of charge. Any information requested will be provided by the company to you free of charge unless the requests are unfounded or excessive. In such cases cases the Company is legally entitled to charge a reasonable fee or refuse to act on the request.
Right to access: You have the right at any time to ask and obtain from us confirmation as to whether or not your personal data are being processed and, where that is the case, access to the personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (v) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (vi) the right to lodge a complaint with a supervisory authority; (vii) where the personal data are not collected from the data subject, any available information as to their source; (viii) the existence of automated decision-making, including profiling, and (ix) appropriate safeguards when persona data are transferred to a third country or to an international organization.
As well as your right to access, you also retain the following additional personal data rights:
- Right to withdraw consent
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to object
- Right to data portability
- Individual decision making
Cookies are small files saved to a user’s computer hard drive that track, save and store information about the user’s interactions and website usage. This allows the website, through its server to provide the users with a tailored experience within this website. Users are advised that if they wish to deny the use and saving of cookies from this website onto their computers’ hard drive they should take necessary steps within their web browser’s security settings to block all cookies from this website and its external serving vendors.
External vendors may store other cookies to your computer’s hard drive when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved or collected.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate/engage upon them with due care and caution in regard to their own privacy and personal details. Neither this website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Display Advertising and Remarketing
To opt out of customised Google Display
Network ads please visit https://www.google.com/settings/ads/onweb/
To find out more about how Google uses any data it collects please visit http://www.google.com/policies/technologies/ads/
Resources & Further Information
For further information we have listed a number of useful reference links below as an aid.
• Data Protection Act 1998
• Privacy and Electronic Communications Regulations 2003
• Privacy and Electronic Communications Regulations 2003 – The Guide (Easier to understand)
• Google’s Privacy & Terms site
Notification of a Data Breach
A “personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Kernow Oils applies appropriate technical and organizational measures to protect your personal data against unlawful processing or accidental loss. If despite this, a data breach does occur that originates from the company and as a result affects your data in a manner that is likely to result in a risk to your rights and freedoms we will communicate it to you as soon as reasonably feasible along with information regarding the nature of the breach as well as recommendations to mitigate any potential adverse effects to allow you to take any necessary precautions.
Should you have any suspicions of a data breach originating from Kernow Oils, please report it to us immediately via email to firstname.lastname@example.org or via phone at 01736 757002 and we will get in touch with you.