This is the privacy statement of the Tudor Griffiths Group. At the Tudor Griffiths Group (“Tudor Griffiths Group” or “we”) we are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you; that you provide us or that we receive from others about you will be processed by us. It includes data that we hold electronically and in paper files.
1 | How and why we process personal data
We will process data to deliver the services/goods Tudor Griffiths Group are contracted to provide to you; to administer requests submitted via our website www.tgbuildersmerchants.co.uk or at branch location. We confirm, when processing data on your behalf that we will comply with the provisions of all relevant data protection legislation and regulation.
We do not sell, rent or lease any of the personal information collected from you to third parties. We do not use or disclose sensitive personal information, such as race, religion, or political affiliations (in the event that we become aware of any), without your explicit consent.
What personal information we collect
The personal information that we collect will vary depending on which product or service we deliver. These may include (the list is non-exhaustive):
- Personal Identifiable Information (Names, email address, postal information, DOB)
- IP addresses
Where we collect personal information from
- Through communication at our branch locations or via telephone or email.
- Via our website (General enquiries; mailing list sign ups; questionnaires or surveys; submission of a job application)
- At marketing events (event feedback/surveys; prize draws)
Basis for processing data
The basis for the processing of client data where supply of services/goods exists is under the following paragraphs of the General Data Protection Regulation (GDPR): Article 6 1.(b), the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, and Article 6 1.(f), it is in the legitimate interests of the data controller or a third party.
Our legitimate interest means the interests of our company in conducting and managing our business to enable us to give you the best service and the best and most secure experience. For example, we have an interest in making sure our marketing is relevant to you, so we may process your information to send you marketing that is tailored to your interests. It can also apply to processing that is in your interests as well. Safeguards have been put in place to ensure we achieve the correct balance between both our interests.
The legal basis for processing personal information is consent provided via our website or via email, formal consent at a company location or telephone.
How we use your personal data
The purposes for which personal information is processed may include any or all of the following (the list is non-exhaustive):
- Deliver services and meet legal responsibilities
- Verify identity where this is required
- Communication by post, email, or telephone
- Understand needs and how they may be met
- Maintain records
- Process financial transactions
- Prevent and detect crime, fraud or corruption
- Send information about events, topical news and changes to legislation
Who has access and why?
Data will be held and processed for the purpose of providing the service that we are contracted under our Terms of Conditions; or where you have provided your information via our website, telephone communication or at a company location.
Only those staff who have a legitimate need to access data will be authorised to do so. We may also be required to share your data with some third parties. For example, if we have a problem with some software it may be necessary to provide the software supplier with specific data. However, where this is necessary we only disclose the information that is required to resolve the issue, and we have a contract in place that requires them to keep your information secure and not to use for their own purposes. Examples of third parties could include (this list is non-exhaustive):
- Software providers
- Website hosting provider
- Electronic communication providers
Links to other websites
Our websites may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
How long we retain your personal data
To meet our legal data protection and privacy obligations, we only hold on to your information for as long as we need it and for the purposes we acquired it for in the first place.
We will collect personal data and retain for as long as required under current legislation as detailed in our Terms of Conditions.
Where you have submitted your data via our website or other marketing channels, we shall keep your personal information on our database, subject to an individual’s right to unsubscribe or be forgotten at any time. Please see the Your Rights section below.
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
- Whenever you are asked to fill in a form on one of our websites, look for the box that you can click to indicate that you want the information to be used by us for direct marketing purposes.
- If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at firstname.lastname@example.org or by writing to John Seaward, Data Controller, Tudor Griffiths Group, Wood Lane, Ellesmere, Shropshire SY12 0HY
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to: John Seaward, Data Controller, Tudor Griffiths Group, Wood Lane, Ellesmere, Shropshire SY12 0HY.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
2 | Using our website & social media
We may collect information about the software on your computer (your browser version etc) and your IP address (your connection with the internet) in order to improve your interaction with our website. This may happen automatically without you being aware of it.
Cookies also enable us to generate statistics about the number of visitors we have and how they use the website and the internet to improve the service we provide. You can set your browser to reject our cookies if you wish (you should consult your browser help section for details), but this might restrict your use of the website and other websites. For more information about cookies, please see our cookies statement in section 5.
Any social media posts or comments you send to us (on our Facebook page, Twitter or LinkedIn) will be shared under the terms of the relevant social media platform on which they are written and could be made public. Other people, not us, control these platforms. We are not responsible for this kind of sharing. We recommend you should review the terms and conditions and privacy policies of the social media platforms you use.
3 | Your Rights
You have a number of rights under GDPR:
Right of Access
You have the right, subject to a number of exceptions, to know what information we hold about you.
Right to Rectification
You have the right to have any information we hold about you corrected if inaccurate or incomplete.
Right to Erasure
You have the right to ask us to delete personal information about you where:
- You consider that we no longer require the information for the purposes for which it was obtained.
- We are using that information with your consent and you have withdrawn your consent – see Withdrawing consent.
- You have validly objected to our use of your personal information – see Right to Object.
- Our use of your personal information is contrary to law or our other legal obligations.
Right to Object
You have the right to object our processing of your personal data on the basis of legitimate interest, for direct marketing or for processing event bookings.
We will stop processing your data on the basis of legitimate interest unless there are compelling legitimate grounds for us to continue.
We will stop any processing of your data for direct marketing as soon as we receive an objection.
Right to Restrict Processing
You have the right to restrict processing of your data in certain circumstances, such as when there is a question over the way in which we are using it.
Right to Data Portability
You have the right to obtain and reuse your personal data for your own purposes, subject to terms detailed in our Terms of Conditions.
We will not make any decision regarding you by purely automated means.
Withdrawing consent using your information
Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.
Please contact John Seaward, TG Data Controller, via email at email@example.com or by writing to John Seaward, Data Controller, Tudor Griffiths Group, Wood Lane, Ellesmere, Shropshire SY12 0HY if you wish to exercise any of these rights. Alternatively, you can telephone 01691 626 262.
We keep this privacy statement under regular review and will place any updates on www.tgbuildersmerchants.co.uk.
This privacy statement was last updated on 24/07/18.
Contact information and further advice
We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office, whose contact details are as follows:
Information Commissioner’s Office
T : 0303 123 1113 (local rate) or 01625 545 745
Website - https://ico.org.uk/concerns
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
You can set your browser to reject Our cookies if you wish, but this might restrict your use of Our and other websites. For instructions on deleting or controlling cookies please consult your browser help section or see http://www.allaboutcookies.org.
Definition of cookies and their function
i. Session cookies
These are temporary cookie files, which are erased when you close your browser. They are used to store your browsing information while you are using Our websites and will be active until you leave the website and close your browser.
ii. Persistent cookies
Persistent cookies help Us remember your information and settings for any future visits. This results in faster and more convenient access. On your first visit, the website is presented in default mode. During your visit, you select your preferences and these preferences are remembered, through the use of the persistent cookie, for the next time you visit the website. A persistent cookie enables a website to remember you on subsequent visits, speeding up or enhancing your experience of services or functions offered.
iii. CMS specific - session cookies
iv. CMS specific - persistent cookies
These types of cookies are placed by our content management software (CMS) to remember your display preferences.
v. Google Analytics (3rd party) cookies
These cookies are used to collect information about how visitors use Our websites. We use the information to compile reports and to help improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited. Further details can be seen below.
An overview of privacy at Google can be found here http://www.google.com/analytics/learn/privacy.html
vi. Google Ads
Google Ad Manager uses a cookie to be able to manage the frequency you see each advert.
viii. Third party cookies
To improve your experience of using Our website, We sometimes embed content or functionality from third party websites. Pages with this embedded content may present cookies from these websites. We do not control the dissemination of these cookies. You should check the relevant third party website for more information about these.
CART --> The association with your shopping cart.
CATEGORY_INFO --> Stores the category info on the page, that allows to display pages more quickly.
COMPARE --> The items that you have in the Compare Products list.
CURRENCY --> Your preferred currency.
CUSTOMER --> An encrypted version of your customer id with the store.
CUSTOMER_AUTH --> An indicator if you are currently logged into the store.
CUSTOMER_INFO --> An encrypted version of the customer group you belong to.
CUSTOMER_SEGMENT_IDS --> Stores the Customer Segment ID
EXTERNAL_NO_CACHE --> A flag, which indicates whether caching is disabled or not.
FRONTEND --> You sesssion ID on the server.
GUEST-VIEW --> Allows guests to edit their orders.
LAST_CATEGORY --> The last category you visited.
LAST_PRODUCT --> The most recent product you have viewed.
NEWMESSAGE --> Indicates whether a new message has been received.
NO_CACHE --> Indicates whether it is allowed to use cache.
PERSISTENT_SHOPPING_CART --> A link to information about your cart and viewing history if you have asked the site.
POLL --> The ID of any polls you have recently voted in.
POLLN --> Information on what polls you have voted on.
RECENTLYCOMPARED --> The items that you have recently compared.
STF --> Information on products you have emailed to friends.
STORE --> The store view or language you have selected.
VIEWED_PRODUCT_IDS --> The products that you have recently viewed.
WISHLIST --> An encrypted list of products added to your Wishlist.
WISHLIST_CNT --> The number of items in your Wishlist.
Google Analytics sets the following cookies as described below.
__utma This cookie is typically written to the browser upon your first visit to our websites from that web browser. This cookie is used to determine unique visitors to our websites and it is updated with each page view. Additionally, this cookie is provided with a unique ID that Google Analytics uses to ensure both the validity and accessibility of the cookie as an extra security measure.
__utmb This cookie is used to establish and continue a user session within our websites. When a user views a page on one of our sites, the Google Analytics code attempts to update this cookie. If it does not find the cookie, a new one is written and a new session is established. Each time a user visits a different page on our sites, this cookie is updated to expire in 30 minutes, thus continuing a single session for as long as user activity continues within 30-minute intervals. This cookie expires when a user pauses on a page on your site for longer than 30 minutes.
__utmc This cookie is no longer used by the ga.js tracking code to determine session status.
Historically, this cookie operated in conjunction with the __utmb cookie to determine whether or not to establish a new session for the user. For backwards compatibility purposes with sites still using the urchin.js tracking code, this cookie will continue to be written and will expire when the user exits the browser.
__utmz This cookie stores the type of referral used by the visitor to reach our sites, whether via a direct method, a referring link, a website search, or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within your own site. The cookie is updated with each page view to our websites.