Data Protection Privacy Notice

This privacy notice explains what personal data (information) we hold about you, how we collect it, and how we use and may share information about you.
 
We take the protection of data very seriously. We will comply with the data protection principles when gathering and using personal information, as set out in the General Data Protection Regulations (GDPR) and Data Protection Act 2018 (DPA).

Identity and contact details of the Controller.
Green Rock Manufacturing Group Limited is the controller of data for the purposes of GDPR and DPA.
 
Your duty to inform us of changes.
It is important that the personal data we hold about you is accurate and up to data. Please keep us informed if your personal data changes during your relationship with us.

​

You can adjust your privacy settings and how we communicate with you by contacting us at any time using the details included at the end of this notice.

​

The data we collect about you.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where identity has been removed (anonymous data).

We may collect, use, store different kinds of personal data about you, including the following:
 
Identity Data: including your first name, maiden name, last name, title, gender, date of birth and function.

Contact Data: including your company name, business address, billing address, delivery address, telephone numbers, fax numbers and email address.
Financial Data: including Company Registration number, VAT number and bank account details.
Transaction Data: including details of goods and services you have purchased from us, payments to and from you and other details regarding the products and services employed within your business.
Marketing and Communications: including preferred method of receiving communications, such as product updates, newsletters, products and services supplied and business related social media.
 
How your personal data is collected.
Data is collected from and about you on a voluntary basis by direct interaction. You may give us your identity, contact, and financial data by completing forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you: -
    - Visit the website;
    - Enquire at Trade Exhibitions;
    - Conduct day to day business;
    - Attend business meetings;
    - Request marketing and sale material to be sent to you;
    - Feedback on general enquiries; and
    - Exchange business cards.
 
How we may share your Personal Data
It may be necessary to share your personal data for reasons of trade references, credit insurance, to confirm order processing and delivery of goods and services with our logistics provider or our funding partners. Otherwise, your personal data will never be shared with other partners or third parties without your explicit prior consent.

​

International transfers

We may transfer, share and process your personal data outside of the UK where necessary.
 
Where data may be held
Data may be held at our offices and those of our logistics provider and finance partner.
 
For what purpose do we process your data?
We will only use your personal data for the purpose for which we collected it and to conduct legitimate commercial and contractual business, which includes the following:
    - Communicating and promoting goods and service to customers and prospect customers;
    - Acknowledging orders being processed;
    - Managing order delivery;
    - Issuing of invoices;
    - Scheduling of meetings;
    - Distributing newsletters;
    - Creating product samples; and
    - Marketing material.
 
Data Retention - how long do we keep your data.
Personal data is stored, during and after contractual and service obligations, for no longer than is necessary for the purposes for which the personal data is processed.

​

Usually, we will retain personal data for two years after the contractual and service obligation ceases to ensure we are able to deal with any legal, regulatory and compliance issues.
 
Any personal data stored during the process of enquires will usually be held for up to one year.

Data security

We have appropriate security measures in place to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those who have a genuine business need to
know it. Those processing your information will do so only in an authorised manner and they are subject to a duty of confidentiality.
 
We also have procedures in place to deal with any suspected data breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
 
Your legal rights and how to complain.
 
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
    - Request access to your personal data;
    - Request correction of the personal data;
    - Request erasure of your personal data;
    - Object to processing of your personal data;
    - Request restriction of processing of your personal data;
    - Request the transfer of your personal data to a third party; and
    - Withdraw consent at any time.
 
If you have any concerns or questions in relation to this notice or how we use your Personal Data, please contact us using the following details:

​

Name: Gemma Jones
Title: Office Manager
Address: Green Rock Manufacturing Ltd, Unit 4 Whitegate Ind Est, Wrexham, LL13 8UG
Email: info@greenrockgroup.uk

​

We hope that we can resolve any query or concern you raise about our use of your data. If not, and you think we have not complied with the requirements of the General Data Protection Regulation (GDPR) or the Data Protection Act 2018 (DPA), you have the right to contact the Information Commissioners Office.