1

Your Privacy is Important to Us

Sunfixings respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we may collect and use personal information when you interact with us (for example; visit our website, buy goods and services from us or apply for employment with us). It also explains how we look after your personal data and tells you about your privacy rights and how the law protects you.

It is important that you read this Privacy Policy together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.

2

Who We Are

The Sunfixings Group is made up of a number of different companies, these are:

  • Sunfixings Group Limited – registered as a limited liability company in England and Wales (registered number 09912862) whose registered office is at R3 Bourton Industrial Park, Bourton on the Water, Cheltenham, Gloucestershire GL54 2HQ.

 

  • Sunfixings Limited – registered as a limited liability company in England and Wales (registered number 07486341) whose registered office is at R3 Bourton Industrial Park, Bourton on the Water, Cheltenham, Gloucestershire GL54 2HQ.

 

  • SkyShield Secure Limited – registered as a limited liability company in England and Wales (registered number 08569986) whose registered office is at R3 Bourton Industrial Park, Bourton on the Water, Cheltenham, Gloucestershire GL54 2HQ.

 

  • Solar Perfect Limited – registered as a limited liability company in England and Wales (registered number 10178201) whose registered office is at R3 Bourton Industrial Park, Bourton on the Water, Cheltenham, Gloucestershire GL54 2HQ.

When we mention “Sunfixings”, “we”, “us” or “our” in this Privacy Policy, we are referring to the relevant company in the Sunfixings Group responsible for processing your data. We will let you know which company will be the controller of your personal data. You can contact us at any time if you have any questions or if you want to exercise Your Legal Rights.

3

What is Personal Information

Personal information means any information about a natural person from which that person can be identified; such as name, address, email, date of birth, gender, bank account details, passwords, usernames, shopping preferences etc..  Throughout this Privacy Policy this information is referred to as “Personal Information”.

4

What Personal Information Do We Collect When You Use Our Websites

If we want to collect Personal Information through our websites we will be open about this, we will make it clear when we collect Personal Information and will explain what we intend to do with this Personal Information.

When you use our websites we will not collect any Personal Information unless you provide such information to us, for example; by filling out the “Contact Us” page on this website or emailing us.

For our websites we use a third-party service, Google Analytics, to collect standard internet log information and information relating to your use of the websites (for example; relating to the type of browser and operating system which you use and which sections of the websites you visit). We will not make any attempt to discover the identities of those visiting our websites and do not allow others (such as Google Analytics) to do so.

5

When Do We Collect Your Personal Information

We may collect Personal Information about you in a number of different ways.

  • Through your use of our websites.
  • When you purchase goods or services from us.
  • If we provide goods or services to you.
  • If you apply for credit from us (for example; when purchasing goods from us).
  • If you apply for employment or any other position with us.
  • If you visit us.
  • When you engage with us through social media.
  • When you contact us (for example; with a query, requesting information, making a claim under any warranty or commenting upon our goods or services).
  • When you give a third-party permission to share information with us (for example; when we are asked to install products which you have purchased from that third party).

6

What Types of Personal Information Do We Collect About you?

  • When you contact us: your name, address, email address and telephone number.
  • When you use our website: we will only collect your Personal Information if you provide the information to us (for example; by completing the “Contact Us” page).
  • If you visit us: your name, address, telephone number, company you represent, car registration and a facial image.
  • When you purchase goods or services from us (or we supply these to you on behalf of another company), contact us or engage with us through social media: your name, address, email address and telephone number, payment, billing details and details relating to your site and requirements; we may also keep some details of correspondence and conversations between us (for example; your comments on your requirements and on the services or goods we have provided to you).
  • Where you apply for credit from us: information required by credit referencing agencies (for example; past addresses, nationality, gender, age, income and expenditure) and bank details;
  • We may also require copies of documents (including your passport or other document containing your photograph) to prove your identity and address (for example; where required by law, or where you apply for credit or employment with us).
  • Where you apply for employment or another position with us: address, name, contact details, details of your past employment and qualifications, references, information in your CV or application, bank and tax details (for payroll purposes).

7

Explanation of The Legal Grounds We Rely on When We Collect and Process Personal Information

The law provides protection for Personal Information and sets out a number of legal grounds for the collection, use and storage of Personal Information (this is commonly referred to as the “collection and processing” of Personal Information). The relevant legal grounds which we rely on are:

  • Performance of a contract – this is where we need to collect and process your Personal Information because it is necessary for the performance of a contract to which you or we are a party to or to take steps at your request before entering into such a contract (for example; if you order goods from us or we supply services to you).
  • Compliance with a legal or regulatory obligation – we may need to collect and process your Personal Information if the law or a regulation to which we are subject requires us to do so (for example; we may be required to pass on details of people involved in fraud or other criminal activity).
  • Legitimate Interest – we may need to collect and process your Personal Information for the legitimate interest of our business. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Information for our Legitimate Interest. We do not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our Legitimate Interests against any potential impact on you in respect of specific activities by contacting us.
  • Consent – in certain circumstances we may collect and process your Personal Information where you have given us your consent to do so (for example; where you tick a box to give your consent to receive marketing information from us).

8

How and Why Do We Use Personal Information?

We will only use your Personal Information when the law allows us to. Most commonly we use Personal Information in the following circumstances:

  • Where we need to perform a contract that we have entered into with you, or are about to enter into (for, example; processing orders and payments, providing services to you at home and interacting with you). The legal ground for doing this is the Performance of a Contract.
  • Where we are supply goods or services to you (for example; on behalf of a third party) The Legal grounds for us doing this are the Performance of a Contract and our Legitimate Interest.
  • To respond to your contact with us, respond to queries, provide information and respond and investigate warranty claims, complaints and any other issue raised by you with us. We do this in order to perform contracts which you have entered into with us or we have supplied goods and services to you, where you are considering entering into a contract with us or to purchase our goods or services and where you wish to know more about our goods or services. The legal grounds for us doing this is the Performance of a Contract and our Legitimate Interest.
  • To send you personalised communications about our goods and services. The legal grounds for us doing this is your Consent and our Legitimate Interest. You are free to opt out of receiving such communications at any time by contacting us. Please note that if you choose not to share your Personal Information with us we may not be able to send you information about, or provide to you, goods and services in which you are interested.
  • To send you communications required by law or to inform you about changes to or relevant facts about our services and goods or relating to your orders, and information which we are legally required to provide to you regarding our goods and services (for example; recall notices, changes to our Privacy Policy, or changes to our terms of sale, warranty procedures or our contact details). The legal grounds for us doing this is Performance of a Contract, Compliance with a Legal or Regulatory Obligation and our Legitimate Interest.
  • We operate CCTV on our premises in order to maintain the security and safety of our premises, and if you visit us your image may be filmed or photographed (for example; on a security pass) for this purpose. The legal grounds for us doing this is our Legitimate Interest.
  • Where we need to collect and use information for health and safety reasons. The legal grounds for us doing so is our Legitimate Interest, Performance of a Contract and Compliance with a Legal or Regulatory Obligation.
  • To assess your application or approach to us for employment or another position with us (for example; where you send us your CV or complete an application form). This information may include your address, nationality, name, age, qualifications and details of your past employment and education as well as information provided by your referees. Our legal grounds for doing this are Consent and our Legitimate Interest.
  • Where we need to comply with a Legal or Regulatory Obligation
  • Provided that you have expressly given us your Consent we may also use Personal Information for business development (e.g. sending information regarding our products and services, newsletters.. etc.). You have the right to withdraw consent to marketing at any time by contacting us.

We use non-personally identifiable information to help us understand the use made of our website and to improve the website. Details of how we collect and use non-personally identifiable information can be found in the section on Cookies.

Please be aware that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one legal ground have been stated.

9

Cookies On Our Website

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookies Policy.

10

Change of Purpose

We will only use your Personal Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your Personal Information for an unrelated purpose, we will notify you and we will explain the legal ground which allows us to do so.

11

Our Role as Data Controller and Data Processor

We generally act as the data controller of your Personal Information, but in some instances other companies may have engaged us to provide goods or services to them in order to perform a contract that they have entered into with you. In these circumstances this other company is the data controller of your Personal Information and to understand how they collect, use and share your Personal Information you should read their privacy policy.

12

Sharing Personal Information

Personal Information may be shared between the companies within the Sunfixings Group. We may also share your Personal Information third parties who provide services to us (for example; those who provide payment processing, credit checks, postage and delivery services, accounting services, HR and payroll services and business administration, as well as government agencies such as HMRC) or third parties who help us provide our services. If these parties be based in countries outside of the European Economic Area (EEA) this may result in your Personal Information being transferred outside of the EEA, data protection laws may differ outside of the EEA and the data laws in some countries may offer less protection than within the EEA. If we do this we will make sure that suitable safeguards are in place; for example, by using approved contractual agreements, unless certain exceptions apply.

We will not share your Personal Information with any third party unless we have your approval to do so or where it is necessary to do so in order to fulfil our obligation to you.

We may also share your Personal Information in the event that our company is the subject of a change of control, merger or a transfer of part of our business.

Whilst unlikely, we may also be compelled to share your Personal Information if required to do so by law or legal process.

13

What We Will Not Do

We will not sell or rent your Personal Information to any other company or person.

We will not share your Personal Information except as described in the section above.

14

Security

We have put in place appropriate security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

15

How Long Will You Use My Personal Information For?

We will only retain your Personal Information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

16

Third Party Websites

Please note that the information contained in this Privacy Policy does not apply to any third-party websites accessible through links from our websites and Sunfixings is not responsible for the such websites. You should read the privacy notice of such websites in order to understand how your Personal Information and other data will be treated by these websites.

You should also be aware that Personal Information and other data transmitted over the internet may not be secure and may be collected by others.

We may make changes to this Privacy Policy to reflect changes in the law or our privacy practices. If we do make such an update we will publish the updated Privacy Policy on our News section of this website. We encourage you to check this Privacy Policy for changes whenever you visit our websites.

17

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data.

You have the right to:

  • Request access to your Personal Information (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
  • Request correction of the Personal Information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected, though we may need to verify the accuracy of the new information you provide to us.
  • Request erasure of your Personal Information. This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Information to comply with local law. Please note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to the processing of your Personal Information where we are relying on a Legitimate Interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your Personal Information. This enables you to ask us to suspend the processing of your Personal Information in the following scenarios: (a) if you want us to establish the accuracy of the Personal information; (b) where our use of the Personal Information is unlawful but you do not want us to erase it; (c) where you need us to hold the Personal Information even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your Personal Information but we need to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your Personal Information to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw your consent at any time where we are relying on consent to process your Personal Information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us.

18

No Fee Usually Required

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

19

What We May Need From You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

20

Time Limit to Respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

21

How to Contact Us

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.

Our full details are:

Full name of legal entity: Sunfixings Limited

Name or title of data privacy manager: Cathal Murphy

Email address: webmaster@sunfixings.co.uk

Postal address:  Sunfixings Limited

R3 Bourton Industrial Park

Bourton on the Water

Cheltenham, Gloucestershire GL54 2HQ.

Telephone number: 01451 824 312

22

Your Right to Complain

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.