Policy for the collection of customer email data and how it is managed within GDPR regulations.
In accordance with the General Data Protection Regulation (GDPR), we have implemented a policy for the collection of customer email, the type of data stored and how we process the information. We also include within this notice the reasons for processing the data, the lawful basis that permits us to process it, how long we keep your data for and the customer's rights regarding their data.
Under GDPR, all personal data obtained and held by us must be processed according to a set of key principles. In accordance with these principles, we will ensure that:
We hold the following types of data:
personal details such as name, address, phone numbers, email addresses and interest within our computer systems and we also hold a manual copy
Customers will be asked if they wish to provide their name, email address and contact number for the sole purpose of sending related information such as quotations, sales and promotional materials.
Customers will be fully informed as to why information is being requested and will be assured that data will not be shared with any third party.
customers can opt out if they so wish.
The law on data protection allows us to process data for certain reasons only.
Email marketing, and the contact of customers by email, falls within our legitimate interest. However, we will only send direct marketing materials where consent has been provided.
Employees within our company who have responsibility for email marketing will have access to the data which is relevant to their function. All employees with such responsibility have been trained in ensuring data is processed in line with GDPR.
We are aware of the requirement to ensure your data is protected against accidental loss or disclosure, destruction and abuse. We have implemented procedures to guard against this.
We only keep the data for as long as we need it.
Customers have the following rights in relation to the personal data we hold on them:
Where you have provided consent to our use of your data, you also have the right to withdraw that consent at any time, by 'unsubscribing.' This means that we will stop processing your data.
It is imperative that consent is given by the customer for the collection and processing of any of their data. In this regard staff should
If a customer emails, telephones or speaks directly to you regarding a complaint on how their data has been used, please advise them to 'unsubscribe' and inform them all email marketing will cease.
If the complaint is of a more serious nature please direct them to Sean Devlin in his role as data protection officer.
Our Data Protection Officer is: Sean Devlin - firstname.lastname@example.org