WHO WE ARE
We are Ambient Electrical, part of The Underfloor Heating Store Limited, a company registered in England and Wales with company no. 05687171 and registered office at Lodge Way House, Lodge Way, Harlestone Road, Northampton, Northamptonshire, NN5 7UG. For the purposes of data protection law, we will be a controller of the personal data we hold about you. This means we make decisions about how and why your information is used, and have a legal duty to make sure that your rights are protected when we use it.
THE PERSONAL DATA WE COLLECT
We collect personal data (meaning anything that could identify you either by itself, or when combined with other data we are able to gain access to) from 3 main categories of data subjects:
- Consumers wishing to purchase our products;
- Candidates who apply for jobs with us; and
- Suppliers (or their employees).
The following table sets out the personal data we collect and about which categories of data subjects:
Types of personal data Category A Category B Category C Name X X X Contact Details X X X Place of work X X Current position X X CCTV Images of you (if you visit our premises) X X X Bank details X Date of Birth/Age X X Sex/Gender X Photograph X Education Details X Employment History X Immigration status – whether you need a work permit X Nationality/Citizenship/Place of birth X Your Curriculum Vitae X A copy of your Passport/Identity Card/Driving License. X Diversity information, including racial or ethnic origin, religious or other similar beliefs, and physical or mental health, including disability-related information. X Details of any criminal convictions, if this is required for a role that you are interested in applying for. X Details about your current remuneration, pensions and benefit arrangements. X
We collect most of the personal data listed above directly from you or your employer.
Personal Data We Collect When You Visit www.ambient-ufh.co.uk (Our “Website”)
When you visit our Website, we may collect technical data about the device you are using, including where available your IP address, operating system and browser type. This is used for system administration and to improve the look and feel of our Website.
A cookie is a small file of letters and numbers that we store on your browser or device if you agree. If you wish to find out more about the cookies we use, please visit this page.
HOW WE USE YOUR PERSONAL DATA
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- where we need to perform a contract with you (i.e. if you order products from us);
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (see the "Legitimate Interests" section below); and
- where we need to comply with a legal or regulatory obligation.
We may use personal data held about you in the following ways:
- to respond to queries from you prior to a purchase of our products;
- to take payment for and arrange delivery of our products;
- to respond to a warranty claim regarding a product you purchased from us;
- to interview candidates for positions at Ambient Electrical;
- to place orders with our suppliers; and
- to ensure that content from our Website is presented in the most effective manner for you and for your device.
When contacting you for the above purposes we may do so by phone, post, email or other electronic means, unless you instruct us not to do so.
Your data will be treated in accordance with applicable data protection law. It will not be disclosed to anyone outside of Ambient Electrical, our affiliated or associated companies, and any other parties named or described in section 7 below.
We may rely on legitimate interests to process your personal data, provided that your interests do not override our own. Where we rely on legitimate interests, these interests are:
- to grow our business and inform our marketing strategies;
- to keep our records updated and to study how our Website is used; and
- to administer and protect our business and web presence (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting).
KEEPING YOUR PERSONAL DATA SAFE
We employ a variety of physical and technical measures to keep your personal data safe and to prevent unauthorised access to, use or disclosure of it. Electronic data and databases are stored on secure servers, and we control who has access to them (using both physical and electronic means).
We cannot absolutely guarantee the security of the internet, external networks, or your own device, accordingly any online communications (e.g. information provided by email or through our Website) are at your own risk.
STORAGE AND RETENTION
Where we store your personal data
The data that we collect from you may be transferred to, and stored at, a destination outside the United Kingdom and the European Economic Area (“EEA”). It may also be processed by staff operating outside the UK or the EEA who work for us or for one of our suppliers. We will take all steps reasonably necessary to ensure that any personal data transferred outside the UK or the EEA is treated securely and in accordance with applicable data protection laws.
How long we keep it
If we have not had meaningful contact with you (or, where appropriate, the company you are working for or with) for a period of 25 years, we will delete your personal data from our systems unless we believe in good faith that the law or other regulation requires us to preserve it (for example, because of our obligations to tax authorities or in connection with any anticipated litigation).
DISCLOSING YOUR PERSONAL DATA
We may need to disclose your personal data to third parties. Where we do so, any such disclosure will be on the basis that these third parties are required to keep the data we give them confidential and secure, and will not use it for any other purpose than to carry out the services they are performing for us. We may disclose personal data as follows:
- personal data about customers will be shared with delivery companies to transport goods to you;
- we will share personal data with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this policy; and
- our professional advisors (e.g. accountants, lawyers etc.).
DISCLOSURES REQUIRED BY LAW
We are subject to the law like everyone else. We may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order.
We also may need to retain and disclose certain personal data about you to regulatory authorities and to appropriate agencies to conduct anti-money laundering checks and to assist with fraud prevention. We will disclose this information as is required by law.
LINKS TO THIRD PARTY WEBSITES.
We want you to remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- where your personal data is processed on the basis of consent, the right to withdraw that consent;
- the right to confirmation as to whether or not we are holding any of your personal data and, if we are, to obtain a copy of it;
- from 25 May 2018, the right to have certain data provided to you in a portable electronic format (where technically feasible);
- the right to have inaccurate personal data rectified;
- the right to object to your personal data being used for marketing or profiling, or on the basis of our or a third party’s legitimate interests;
- the right to restrict how your personal data is used; and
- the right to be forgotten, which allows you to have your personal data erased in certain circumstances (though this is not an absolute right and may not apply if we need to continue using it for a lawful reason).
If you would like further information about any of your rights or wish to exercise them, please contact us using the details given in section 1.
Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so (for example, because the information no longer exists or there is an exception which applies to your request).
If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you should contact the UK Information Commissioner's Office, which oversees data protection compliance in the UK. Details of how to do this can be found at www.ico.org.uk.
UPDATING THIS POLICY
We may update this Policy at any time. When we do, we will post a notification on the main page of our Website and we will also revise the updated date at the bottom of this page. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the personal data we hold.
This policy was last updated on 3 January 2019