Brookside Fire Service Ltd is committed to fully comply with the requirements of the General Data Protection Regulations (GDPR) 2018. We will therefore follow procedures which aim to ensure that all staff who have access to any of your personal information held by Brookside Fire Service Ltd, are fully aware of and abide by their duties under the GDPR.
We are legally required to tell you about your personal information we hold and how we process this information. The lawful and appropriate treatment of your personal information is very important to the successful service we provide and essential to maintaining confidence with you as a customer.
What Personal Data Do You Collect?
We may collect some or all of the following personal data (this may vary according to your relationship with us):
* Name
* Address
* Email address
* Telephone number
* Business name
* Job title
* any other personal information that you choose to provide to us with at point of contact
How Do You Use My Personal Data?
Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. Your personal data will be used for the following purposes:
* Providing and managing your account.
* Supplying our products and services to you. Your personal details are required in order for us to enter into a contract with you.
* Personalising and tailoring our products and services for you.
* Communicating with you. This may include responding to emails or calls from you.
* Supplying you with information by email and /or post that you have opted-in to (you may unsubscribe or opt-out at any time).
* To maintain our relationship with you whilst you are a customer;
* To process orders and provide agreed goods and services to you;
* For invoicing, processing payments, account set up and maintenance;
* To communicate with you, including to respond to information requests /enquiries submitted and/or to obtain your feedback on our products and services;
* For record keeping, statistical analysis and internal reporting and research purposes;
* To ensure data security and to provide you with access to secure areas of our Websites;
* To notify you about changes to our products and services;
* To decide on and notify you about price changes;
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email and/or post with information, news, and offers on our products and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
How Long Will You Keep My Personal Data?
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data is kept for a period of 6 years and shredded by a professional waste company.
How and Where Do You Store or Transfer My Personal Data?
We will only store or transfer your personal data in the UK. This means that it will be fully protected under the GDPR.
Who sees or has access to your personal information?
Brookside Fire Service Ltd staff are the only individuals who have access to or can see your personal information. Paperwork which details your personal information is not left in view in any of our company vehicles.
Office staff have been made aware of their duties under the GDPR of how they should process your personal information. They are also aware of phishing emails, bogus telephone calls and the posting of information relating to the business activities on social networks.
Do You Share My Personal Data?
We may contract approved third parties to supply products and/or services to you on our behalf. These may include payment processing, delivery, installation or servicing. In some cases, those third parties may require access to some or all of your personal data that we hold.
If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law.
In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
Security of Cloud Back Up?
Our cloud backup is provided by VSL, please see statement from them below.
“VSL (Vitanium Systems Limited) are an ICO (Information Commissioner’s Office) registered Company. ICO Data Protection Registration Reference: ZA202119
You can rest assured that any data backed up or processed by VSL is securely stored in our UK certified data centres and we comply with all the required security standards – most notably full encryption at rest and in transit.
VSL are very conscious of our need to comply to the Data Protection Act 1998 and as a UK company we follow the guidelines provided by the Information Commissioners Office, which states:
Anyone who processes personal information must comply with eight principles, which make sure that personal information is:
* Fairly and lawfully processed
* Processed for limited purposes
* Adequate, relevant and not excessive
* Accurate and up to date
* Not kept for longer than is necessary
* Processed in line with the users’ rights
* Secure
* Not transferred between locations without adequate protection
With this in mind, all VSL staff are trained on compliance to the Data Protection Act and, in particular, the eight principles above.”
Also our IT company change the administrator passwords every 90 days. Only key personal have access to the Admin login. No information is farmed from Brookside and any equipment permanently removed from site is subject to format by Killdisk with certification.
Your Individual Rights
The GDPR includes your following rights:
* The right to be informed about the collection and use of your personal information.
* The right to access your personal information.
* The right to have your personal information rectified.
* The right to have your personal information erased, where there is no compelling reason for the information to be processed.
* The right to restrict or block the processing of your personal information.
* The right to obtain and use your personal information being processed, based on legitimate interests.
* The right not to be subject to automated decision-making including profiling.
You have the right to withdraw your consent to us and processing your personal information. If you wish to do so, please contact:
Brookside Fire Service Ltd
30 New Road
Rubery
Birmingham
B45 9HU
0121 457 8484
Email sales@brooksidefireservice.co.uk
You can also download a copy of our privacy statement here.
