Wetherby Group Limited
Who we are
For the purpose of applicable data protection laws, the data controller is:
Wetherby Group Limited
Dalton Industrial Estate
Telephone: 01845 578555
Information Covered by this Policy
This policy covers all personal information collected and used by Wetherby Group Limited. In this policy “personal information” means information that (either in isolation or in combination with other information held by us) enables you to be identified as an individual or recognised directly or indirectly.
General principles of Wetherby Group Limited collection, use and disclosure of personal information
Whenever we collect personal information Wetherby Group Limited will:
- provide timely and appropriate notice to you about our data practices
- collect your personal information only for specified and legitimate purposes. The information we collect will be relevant, adequate and not excessive for the purpose it is collected
- process your personal information in a manner consistent with the purposes for which it was originally collected or to which you have subsequently consented
- take commercially reasonable steps to ensure that your personal information is reliable for its intended use, accurate, complete and, where necessary kept up to date
- not use your personal information for direct marketing purposes with giving you an opportunity to opt out
- take appropriate measures by contract, or otherwise, to provide adequate protection for personal information that is disclosed to a third party by necessity to fulfil contractual obligations
Personal information Wetherby Group collects
We may collect the following types of personal information from different sources detailed below:
Information you provide
- Contact information such as name, company name, address, email address and telephone number
- Financial information needed to process payments if you make purchases, such as credit card or account information or tax identification references
- Information about your preferences, such as your preferred methods of communication
Information we collect about you
When someone visits www.wetherbygroup.com we use a third party service, Google Analytics, to collect internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it. For more information on how Google collect and use data when you visit our website please visit: www.google.com/policies/privacy/partners/
Wetherby Group Limited’s lawful basis for processing your personal data
Processing on the basis of legitimate business interests
When we process personal information on the basis that the processing is necessary for our legitimate business interests, such interests include: (i) providing, improving, and promoting Wetherby Group Limited internet sites, products, and services; (ii) communicating with current and potential customers, other Business Partners, and their individual points of contact; (iii) managing our relationships with our customers and other Business Partners, and their individual points of contact; (iv) other business development purposes; (v) sharing information within the Wetherby Group, as well as with service providers and other third parties; and (vi) maintaining the safety and security of our products, services and employees, including fraud protection.
Processing on the basis of performance of a contract
Examples of situations in which we process personal information as necessary for performance of a contract include material supply contracts and installation contracts in which you purchase a product or service from Wetherby Group Limited.
Processing on the basis of consent
Examples of processing activities for which Wetherby Group Limited uses consent as its legal basis include: (i) sending promotional emails when consent is required under applicable law; and (ii) processing personal data on Wetherby Group Limited internet sites through cookies and similar technologies when consent is required by applicable law.
Processing because Wetherby Group Limited is under a legal obligation to do so
Examples of situations in which Wetherby Group Limited must processes personal data to comply with its legal obligations include: (i) payment of taxes and other government levies; (ii) providing your personal data to law enforcement agencies and other governmental bodies when required by applicable laws; (iii) retaining business records that are required to be retained by applicable laws; and (iv) complying with court orders or other legal process.
Additional information about the retention of your personal data
To determine the period for which your personal data will be retained in accordance with this Policy, Wetherby Group Limited considers criteria such as: (i) any applicable legal requirements to retain data for a certain period of time; (ii) any retention obligations related to actual or potential litigation or government investigations; (iii) any retention requirements in relevant agreements with our Business Partners; (iv) the date of your last interaction with Wetherby Group Limited (including with websites, communications, etc.); (v) the length of time between your interactions with Wetherby Group Limited; (vi) the sensitivity of the data; and (vii) the purposes for which the data was collected.
Your individual rights
In accordance with the applicable laws in the European Union, you have the following rights with respect to your personal data, which apply differently in different circumstances: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability and right to object to processing. Most of these rights are not absolute. You can exercise your rights by sending your request to us at firstname.lastname@example.org.
For further information on your rights regarding your data visit the ICO website at https://ico.org.uk/
Access to personal information
In accordance with GDPR, Wetherby Group Limited will be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘Subject Access Request’ under the General Data Protection Regulation. If we do hold information about you we will:
- give you a description of it
- tell you why we are holding it
- tell you who it could be disclosed to
- let you have a copy of the information in an intelligible form
If you make a request to exercise your rights, we will respond within one month, but have the right to extend this period by two additional months, where necessary. If we extend the response period, we will let you know within one month from your request.
For further information on how to request your personal information go to the ICO website at https://ico.org.uk/for-the-public/personal-information/.
Wetherby Group Limited will use its best efforts to address and settle any requests or complaints brought to its attention. In addition, you have the right to approach the competent data protection authority with requests or complaints. This can be the supervisory authority in the country where you live. The overall competent supervisory authority for Wetherby Group Limited in Europe is:
Information Commissioner’s Office (ICO)
Security and performance
Wetherby Limited uses a third party service to help maintain the security and performance of the Wetherby Group Limited website. To deliver this service it processes the IP addresses of visitors to the website.
We will monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
Under the GDPR we use the lawful consent basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the “Processing of your personal data” section. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third-party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.
Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.
Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences, you can also unsubscribe from all MailChimp lists, by following this link, otherwise contact the EMS provider.
Our EMS provider is; Mailchimp. We hold the following information about you within our EMS system;
Subscription time & date
Some cookies are required to enjoy and use the full functionality of this website.
Cookies that we use are;
- Consent Cookie – this stores the users cookie consent for the Site.
- Collect Cookie – this is used to send data to Google Analytics about the visitors device and behaviour. It tracks the visitor across devices and marketing channels.
- _ga Cookie – this is used to register a unique ID that is used to generate statistical data on how the visitor uses the website.
- _Gid cookie – this is used to register a unique ID that is used to generate statistical data on how the visitor uses the website.
- _Gat Cookie – this is used by Google Analytics to throttle request rate
- NID Cookie – this registers a unique ID that identifies a returning users device. The ID is used for targeted ads.
Links to other websites
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
Changes to this privacy notice
Resources & further information
Overview of the GDPR – General Data Protection Regulation
Data Protection Act 1998
Privacy and Electronic Communications Regulations 2003
The Guide to the PECR 2003