We are dedicated to protecting the privacy of our customers and website visitors. This policy outlines how we handle your personal data.
Introduction
This notice pertains to personal data, defined as any information about an identifiable living individual (the "Data Subject") that is not already publicly available.
The General Data Protection Regulation (GDPR) exists to protect and strengthen the rights of individuals regarding their personal data. These rights include safeguarding personal information, preventing its unlawful processing, and allowing the free flow of personal data within the EU. GDPR does not apply to information already in the public domain.
Collection and Use of Personal Data
Sixton-Brend Trading Company Ltd collects personal information to provide quotations, make contact via telephone, and send marketing emails relevant to you and your business. By giving initial consent to marketing communications, we will maintain this communication until you opt out or we cease such activities.
Personal data may be obtained from forms, surveys, correspondence records, phone calls, and visits to our website, including Internet Protocol (IP) addresses. We may use such data for website visitor behavior analysis. Our properties have CCTV systems, and video recordings may be made for security and service purposes, with access to these systems restricted.
Our websites use cookies—small data files stored on your computer—to improve functionality. We use both "session" cookies (deleted after browsing) and "persistent" cookies (stored until manually deleted or expired). Google Analytics helps us analyze site usage, while the Facebook Pixel assists in understanding user interactions for targeted advertising.
Any personal information we hold includes details of your interactions with us and, where applicable, publicly available third-party data (e.g., credit agencies). We collect only necessary information for marketing and consultation services and do not sell or broker your data. However, on occasion, we may process third-party data obtained for marketing purposes on behalf of a client.
Legal Basis for Processing Personal Data
We process personal data under lawful grounds, as outlined below:
Legitimate Interests – Customers/Clients
When you provide personal data, we assess and balance its use against your rights. Examples include:
• Direct Marketing: Sending relevant postal and email marketing communications.
• Online Orders: Processing transactions requiring name, address, and payment details.
• Fraud Prevention: Ensuring website and system security.
• Personalization: Enhancing services and communications.
• Retargeting & Tracking: Using cookies to display relevant adverts.
• Analytics & Research: Assessing customer behavior and marketing effectiveness.
• Due Diligence: Conducting background checks to prevent fraud.
You can unsubscribe from marketing communications at any time.
Consent
Where no legitimate interest applies, we rely on your explicit consent for processing personal data (e.g., signing up for marketing emails). All marketing emails include an unsubscribe option.
Data Sharing and Disclosure
We may share personal data with third parties solely for processing on our behalf. Such parties are required to adhere to this Privacy Policy and GDPR. We do not sell or distribute your data without consent, except when required by law or to enforce our Terms and Conditions.
Data Retention
Personal data is retained for the duration of any contract and for up to six years afterward to meet legal obligations. After this period, unnecessary data is deleted.
Data Storage
Your data is stored securely on multiple servers within the UK. We do not store data outside the European Economic Area (EEA).
Your Rights
As a data subject, you have the following rights:
• Right to Access: Request a copy of your data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under certain circumstances.
• Right to Restriction: Limit data processing under specific conditions.
• Right to Data Portability: Transfer data to another organization.
• Right to Object: Object to processing, including direct marketing.
• Right to Avoid Automated Processing: Opt-out of profiling and automated decisions.
Requests for data access require identification, such as a passport, driving license, or recent utility bill. If additional verification is needed, we may request further documentation.
Complaints
If you have concerns about how we process your data, you may contact us:
Sixton-Brend Trading Company Ltd
Attn: Mrs Christina Sixon-Brend
The Royal Hotel, Barnstaple Street, Bideford, EX39 4AE
Tel: 01237 472005
Email: [email protected]
If unresolved within 30 days, you can escalate your complaint to the Information Commissioner's Office:
Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Tel: 0303 123 1113