We may revise this Policy at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we make, as they are binding on you.
John Hellyar & Company Ltd trading as Hellyar Plastics is responsible for your personal data. Hellyar Plastics is therefore regarded as a data controller of your personal data. The contact address of Hellyar Plastics is Tyler Way, Swalecliffe, Whitstable, Kent CT5 2RX.
Hellyar Plastics (known in this document as "our", "us" or "we") collects and processes your personal data and are committed to being transparent about how we collect and use your data and to meeting our data protection obligations. This Policy covers the following:
- EXPLANATION OF APPLICABLE DATA
- THE INFORMATION WE COLLECT AND WHERE WE GET IT
- HOW WE USE THE INFORMATION WE COLLECT
- GROUNDS FOR USING YOUR PERSONAL INFORMATION
- HOW WE SHARE INFORMATION WITH THIRD PARTIES
- RETAINING YOUR INFORMATION AND HOW WE SECURE IT
- YOUR CHOICES AND RIGHTS
- HOW TO CONTACT US AND OTHER IMPORTANT INFORMATION
To find out more click on any of the above sections
EXPLANATION OF APPLICABLE DATA
For the purpose of this policy, personal data refers to information that relates to an identifiable, living individual, including information such as an online identifier, for example an IP address. The Data Protection Act 2018 (DPA) and the EU General Data Protection Regulations 2016 (GDPR) applies to both automated personal data and to manual filing systems, where personal data is accessible according to specific criteria, as well as to chronologically ordered data and pseudonymised data.
Data referred to in the DPA and GDPR as ‘special categories of personal data’ (previously termed ‘Sensitive Personal Data’) specifically includes the processing of genetic data, biometric data and data concerning health matters.
"Personal information" is therefore any information that can be used to identify you or that can be linked to you and which we at Hellyar have in our possession or control.
THE INFORMATION WE COLLECT AND WHERE WE GET IT
We collect, and therefore process, the following personal information about you:
Information That You Provide To Us
We will process personal information that you give to us including when you email us or contact us through various methods as follows:
- Communications and enquiries: when you contact us with queries, or respond to our communications the personal information you provide may include your full name, title, telephone number, email address and additional content, date and time of your email correspondence and information about your current or previous employers or your business.
- When providing our products or services: if you are a customer or supplier of ours you will provide us with your personal information such as name and contact details when you, or the company you represent, are dealing with us so that we can fulfil our obligations.
- When participating in recruitment activities: when you apply for any role with us you may provide us with your full name, date of birth, nationality, education and qualification details, your gender, your CV, photograph, passport details, marital status, home address and home telephone number, mobile telephone number and other details set out in your communications to us
- To enable processing of payments and fraud prevention: Financial and Payment Data Including bank account and other data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information
- To enable equality and monitoring: When applying or joining us then sensitive personal data (that is, information about your racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, or details of criminal offences, or genetic or biometric data) may be collected in order to carry out monitoring and comply with the legal obligations.
- Applying for placements and work experience: When you apply to us you for any potential work placement you may provide us with details such as your name, email address, postal address and employment details.
Other Information We Collect About You
We may also collect information about use of our services or when we otherwise interact or correspond with you. We may use various technologies to collect and store information when you communicate with us or visit our websites or premises. We may, for example, collect information about the type of device you use to access the websites, your IP address and your geographic location, the operating system and version, your browser type, the content you view and features you access on our websites, the web pages and the search terms you enter on our websites. We also have CCTV monitoring and collection of images and footage on our premises and workplaces for safety and security. For more information please refer to our CCTV policy and notices.
Information We Obtain From Other Sources
- If you apply for a position with us we may collect personal information relating to past employment, qualifications and education, opinions from relevant third parties about you, past employment history and other details about you, which may be provided to us by a third party that provides background screening services on our behalf.
- If we collect or receive your personal information in the relation to our provision of our services or products we might also receive information from third parties, such as your employer, other parties relevant to the services we are providing (e.g. other parties involved in production or delivery) and others such as regulators and authorities. That information could include your name, contact details, employment details and other information relevant to the services we provide.
HOW WE USE THE INFORMATION WE COLLECT
We may do the following with your personal information that we have gathered:
- Use it to provide our services or product as part of an obligation
- Use it to engage in marketing and business development activity. This may include marketing communications and other information that we believe may be of interest to you
- Where you have applied for a position with us to process your application
- To comply with legal and regulatory obligations that we have a duty to discharge
- Use it to establish, exercise or defend our legal rights or for the purpose of legal proceedings
- Use it to look into any complaints, concerns or issues you may have
- Use it to prevent and respond to actual or potential fraud or illegal activities
- To record and monitor your use of our websites, social media or our other services for our business purposes. This may include analysis of usage, measurement of website performance and generation of marketing reports
- Use it for our legitimate business interests, such as for undertaking business research and analysis, managing the operation of our business and improving our websites and services
- CCTV footage and images are used for safety and security of our sites and products and for subsequent investigations into incidents
We may also collate, process and share any statistics based on an accumulation of information held by us provided that any individual is not identified from the resulting analysis and the collation, processing and dissemination of such information is permitted by law.
GROUNDS FOR USING YOUR PERSONAL INFORMATION
We rely on the following legal basis to process your personal information:
- Consent: We may in some circumstances need your consent to use your personal information. You can withdraw your consent by contacting us.
- Obligations of a contract: We may need to collect and use your personal information to enter into a contract with you or the business you represent, or to perform our obligations under a contract with you.
- Legitimate interest: We may use your personal information for what we identify as our legitimate interests.
- Compliance with the law: We may use your personal information as necessary to comply with applicable laws and regulations.
HOW WE SHARE INFORMATION WITH THIRD PARTIES
We share personal information internally with our own staff if access to the data is necessary for performance of their roles. We may also share your personal information outside the company. This may include (but not limited to):
- Third party agents/suppliers or contractors, bound by obligations of confidentiality, in connection with the processing of your personal information for the purposes described in this Policy. This may include, but is not limited to, our IT and communications service providers, and insurance. If you are employed by us it may include pension or benefit providers.
- Third parties relevant to the services or products that we provide to you and others. This may include, but is not limited to contractors, delivery or other service providers as well as, regulators, authorities or governmental institutions.
- To the extent required by law, regulation or court order, for example, if we are under a duty to disclose your personal information in order to comply with any legal obligation.
Your personal information may in some circumstances be transferred to locations outside of the European Union/European Economic Area (EU/EEA) as well as within it for the purposes previously described above. We do not transfer your personal information outside the EU/EEA as a matter of course however, where we have a requirement to transfer your personal information outside the EU/EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements applicable to the information by for instance:
- The country to which we send the personal information may be approved by the European Commission
- The recipient may have signed a contract based on “contractual clauses” approved by the European Commission, obliging them to protect the personal information, or
- Where the recipient is located in the US, it may be a certified member of the EU-US Privacy Shield scheme.
In other circumstances, the law itself may permit us to otherwise transfer your personal information outside the EU/EEA. In all cases, however, any transfer of your personal information will be compliant with the applicable data protection law in place.
RETAINING YOUR INFORMATION AND HOW WE SECURE IT
How long we keep your personal information will vary and will depend primarily on:
- The purpose for which we are using your personal information - we will need to keep the information for as long as is necessary for the relevant purpose
- Legal obligations - laws or regulation may set a minimum period for which we have to keep your personal information
We will retain your personal data for as long as necessary to fulfil the purposes that we collected it for and for us to assert or defend against legal claims. The appropriate retention period is determined by the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process and whether we can achieve those purposes through other means, and the applicable legal requirements.
Upon expiry of the applicable retention period we securely destroy your personal data in accordance with applicable laws and regulations. We ensure that the personal information that we hold is subject to the appropriate security measures.
YOUR CHOICES AND RIGHTS
You have a number of rights in relation to the personal information that we hold about you and you can exercise your rights by contacting us directly. These rights include:
- Obtaining or accessing your data: Regarding the processing of your personal information and access to the personal information which we hold about you. Please note that there may be circumstances in which we are entitled to refuse requests for access to copies of your personal information.
- Correcting your data: Requesting that we correct your personal information if it is inaccurate or incomplete.
- Erasure of your data: Requesting that we erase your personal information in certain circumstances. Please note that there may be circumstances where you ask us to erase your personal information but we are legally entitled to retain it.
- Objecting/Restricting us processing: Requesting that we restrict our processing of your personal information in certain circumstances. Again, there may be circumstances where you object to, or ask us to restrict, our processing of your personal information but we are legally entitled to refuse that request.
- Portability/Moving your data: In some circumstances, receiving some personal information in a structured, commonly used and machine-readable format and/or requesting that we transmit that information to a third party where this is technically feasible. Please note that this right only applies to personal information which you have provided to us.
- Withdrawing your consent: In certain circumstances it may be lawful for us to continue processing without your consent if we have another legitimate reason (other than consent) for doing so.
- Lodging a complaint about processing: Complaining to the relevant data protection supervising authority (e.g. The Information Commissioners Office (ICO) in the UK), if you think that any of your rights have been infringed by us.
HOW TO CONTACT US AND OTHER IMPORTANT INFORMATION
If you would like further information on the collection, use, disclosure, transfer or processing of your personal information by Hellyar Plastics or the exercise of any of the rights listed above, please contact us. You can do this by:
- Writing to us: FAO Robert Knowles, John Hellyar & Company Ltd, Tyler Way, Swalecliffe, Whitstable, Kent CT5 2RX
- Emailing us: firstname.lastname@example.org
- Telephone us: 01227 813200
DATE ISSUED: August 2019