This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data and keep it safe.
1. Legal Processing
Data protection law states there are several legal reasons why a company may collect and process personal data.
Contract – We will process your personal data to fulfil an order, deliver a service, essentially comply with our contractual obligations.
Legal Compliance – If the law or government requires us to, we may need to collect and process your data. An example might be passing on details of fraud to law enforcement.
Legitimate Interest – In cases, we require personal data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Examples might be using your postal or email details to send direct marketing information on content, products and services that we think might interest you with the aim of raising awareness of our business with yours and you, as an employee of that business. We may also use your browsing or purchase history to send you or make available personalised offers.
2. When do we collect, add to or amend your personal data?
● When you visit any of our websites or speak us on the phone.
● When you purchase a product or service or enter into negotiations to do so
● When you engage with us on social media.
● When you contact us by any means with queries, complaints etc.
● When you book any kind of appointment with us or book to attend an event, for example a meeting to discuss an opportunity.
● When you choose to complete any surveys we send you.
● Any individual may access personal data related to them, including opinions. So if your comment or review includes information about the Partner who provided that service, it may be passed on to them if requested.
● When you’ve given a third party permission to share with us the information they hold about you.
● We may collect data from publicly-available sources where you have given your consent for them to share information publicly such as online directories or LinkedIn.
3. What sort of personal data do we collect?
● Contact details at the company which you work for such as email address and phone number
● Details of your interactions with us through phone contact, email or online.
● Details of your visits to our websites, and which site you came from to ours.
● To deliver the best possible web experience, we collect technical information about your internet connection and browser as well as the country and telephone code where your computer is located, the web pages viewed during your visit, the advertisements you clicked on, and any search terms you entered.
● Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
4. How and why do we use your personal data?
We want to give you the best possible experience. One way to achieve that is to get the richest picture we can of who you are by combining the data we have about you. We then use this to offer you content, products and services that are most likely to interest you.
The data privacy law allows this as part of our legitimate interest in understanding our customers and potential customer and providing the highest levels of service.
Of course, if you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide the best experience.
Here’s how we’ll use your personal data and why:
● To process any orders or hold negotiations that you make by using our sales team or sales agents. If we don’t collect your personal data during negotiations or ordering, we won’t be able to process your order and comply with our legal obligations. We would then keep those details for reasonable period afterwards in order to fulfil contractual obligations
● To respond to your queries. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.
● To protect our business and yours from fraud and other illegal activities. We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.
● To market our product and services to you. We will use your personal data, preferences and details of your transactions to keep you informed by email, web, telephone about relevant content, products and services including information, tailored offers, discounts, promotions, events, competitions and so on. We market on the basis of legitimate interest and in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Our marketing will follow best practice laid out by the ICO when dealing with corporate subscribers under the PECR.
Of course, you are free to opt out of hearing from us at any time.
● To send you relevant, personalised communications by post or email in relation to updates, content, offers, services and products. We’ll do this on the basis of our legitimate business interest.
You are free to opt out of hearing from us at any time.
● To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, marketing data misuse issues, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.
● To develop, test and improve the systems, services and products we provide to you. We’ll do this on the basis of our legitimate business interests.
● To comply with our contractual or legal obligations to share data with law enforcement.
● To send you survey and feedback requests to help improve our services. These messages will not include any promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products or services more relevant to you.
Of course, you are free to opt out of receiving these requests from us at any time.
5. How is personal data protected?
We will treat your data with the utmost care and take all appropriate steps to protect it.
We secure access to our websites and apps using ‘https’ technology.
Access to your personal data is password-protected, and sensitive data is secured by SSL encryption.
We regularly monitor our system to identify ways to further strengthen security.
What specific information is obtained?
Our website does not collect specific, detailed information about you as a visitor to our site.
Where information is gathered, we will inform you of this along with the explanation of why it is required. This information will be for purposes such as responding to an enquiry made and we will ask for this information in order for us to get in touch and provide the relevant information which has been requested from you.
What information is retained?
Cookies and tracking software are used on a temporary basis and expire when the site has been left. These are used for purposes such as website improvement. Google Analytics is also used for the same reason of website improvement and understanding how you use it. This information is not shared with anyone.
The personal information we collect and hold via Tracking software is the following: –
● Browser used (Bing, Chrome, Internet Explorer etc.)
● Location (based on IP address)
● Age group
● Site searches
● Device(s) used
● Frequency on Site
● Session duration (time spent on the site)
● Page(s) visited
● Page session duration (time spent on specific page)
● Web Surfing Behaviours
We currently use the following companies that may process your personal data through website usage. Facebook, Twitter, LinkedIn, Google, HubSpot, SharpSpring, Instiller.
If you need to contact us then please find the relevant details below.
7. Customers / Enquirers
We hold information about customers/ enquirers as it is necessary for us to conduct our business activities.
What personal information is held?
The personal information we collect and hold is the following: –
● Full Name
● Company Name
● Company Address
● Company Website Address
● Email Address
● Phone Number
● Initial Requirement
This information may be linked together with what has already been gathered (as stated in the “what information is retained?” section) via Tracking Software.
How is this information gathered?
We gather this information through lead generation forms on our website and tracking software as mentioned in the “what information is retained?” section, as well as over the phone when relevant.
How long will the data be kept for?
For a reasonable period of time after you have stopped being an active customer, we may continue to contact you with information relating to our products and services. We deem a reasonable period of time to be three years after an order has been completed, or a relevant license period has expired. After this time, the data we hold will either be deleted, anonymised or retained providing you have asked us to do so.
Who will the data be passed to?
This information will not be passed on to anyone other than authorised employees of Certain Ltd and relevant processors, for example a company managing marketing on behalf of Certain Ltd.
Additionally, if a legal matter were to arise, then we may need to provide this information for those purposes.
● In this instance, we provide only the information required to perform the service
● The data will only be used for that exact purpose
● Partners are required to protect and respect your privacy
● If we stop using a partners service, your data will be deleted or rendered anonymous.
Examples of third parties we work with are:
● Direct marketing companies who help us manage electronic communications and telemarketing
● Google/Facebook/LinkedIn to show products that might interest you. This is based on consent or your acceptance of cookies on our website.
● Data Insight companies to ensure your details are up to date and accurate.
● IT Companies who support our website and business systems
What is the reason for holding/using the information held?
While you are a customer of Certain Ltd, the basis for processing your data is ‘contract’. When you are not or no longer an active customer of Certain Ltd the basis is ‘legitimate interest’ as we would like you order products/services from us.
We may use your details for the purpose of creating a profile to gauge decision making and for direct marketing purposes. For example, using information held, we may create profiles based on the following: –
● Email Address
● Telephone Number
● Geographic Location
● Job Title/Job Role
8. Data Subject Rights (Subject Access Request, Erasure, Rectification)
● You have the right to ask for information we hold for you (Subject Access Request) which will be provided free of charge and if requested, can be presented in a spreadsheet based format.
● The data we hold will be corrected when we are notified of errors.
● Information we hold for you will no longer be processed if requested to do so.
● Information we hold for you will be deleted if requested to do so. It is possible we may contact you at a later date as we will hold no record of you.
● You have to right to withdraw consent at any time.
● You have the right to stop the use of your personal data for direct marketing through selected or all channels.
● You have the right to stop processing your personal data under legitimate interest for individual reasons. We will comply unless we believe there is a legitimate overriding reason to continue processing.
9. To stop the use of personal data for direct marketing:
Click Unsubscribe Link in any email communication that we send you. We will then stop all emails
Westland Coffee and Wine
London N1 7LP
10. Our Details
If you need to contact us then please find the relevant details on our contact page.
11. To contact the regulator, please see below:
0303 123 113 or go to www.ico.org.uk