GENERAL DATA PROTECTION REGULATION: PRIVACY NOTICE

This privacy notice provides information about the personal information we process about you, in compliance with the General Data Protection Regulation (GDPR).

The Wye Valley Group run Waste Management Facilities, Scrap Metal Merchant, Demolition Projects and associated activities registered at the following address: Lloyd George House, Fordshill Road, Hereford, HR2 6NS

The data controller is Warehouse 701 Limited, a company registered in England and Wales under company number 8377915 and with our registered office at Lloyd George House, Fordshill Road, Rotherwas Industrial Estate, Hereford, Herefordshire, HR2 6NS.

Please contact Gavin Pettigrew using the email address: gavin.pettigrew@wyevalleygroup.co.uk with any questions or requests about your personal information.

Your rights: We are committed to protecting your rights to privacy. They include the right to:

Be informed about what we do with your personal data.

Have a copy of all the personal information we process about you.

Rectification of any inaccurate or incomplete data.

Be forgotten and your personal data destroyed.

Restrict the processing of your personal data.

Object to the processing we carry out based on our legitimate interest.

Information we may collect from you

We may collect and process the following data about you:

Information that you provide by filling in forms on our website http://www.warehouse701.co.uk/ (“our site”). This includes information provided at the time of registering to use our site, purchasing products, or requesting further services. We may also ask you for information when you report a problem with our site.

If you contact us, we may keep a record of that correspondence.

We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.

Details of transactions you carry out through our site and of the fulfilment of your orders.

Details of your visits to our site including, but not limited to, traffic data, location data, weblogs, operating system, browser usage and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

IP addresses and cookies

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual and we will not collect personal information in this way.

We may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:

· To estimate our audience size and usage pattern.

· To store information about your preferences, and so allow us to customise our site according to your individual interests.

· To speed up your searches.

· To recognise you when you return to our site.

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

Uses made of the information

We use information held about you in the following ways:

· To ensure that content from our site is presented in the most effective manner for you and for your computer.

· To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.

· To carry out our obligations arising from any contracts entered into between you and us.

· To allow you to participate in interactive features of our service, when you choose to do so.

· To notify you about changes to our services.

If you are an existing customer, we may contact you by e-mail or telephone with information about goods and services similar to those which were the subject of a previous sale to you.

The personal data we process, why we process it and how long we keep it for: As a waste carrier, waste management facility and scrap metal dealer, we are required by legislation to keep certain records for 7 years. These records may contain personal data and include:

Names and addresses of suppliers of waste and scrap metal and others we transfer wastes and scrap metal on to.

Verification of names and addresses such as copy driving licences, passports and utilities bills.

Cheques and receipts confirming electronic transfers.

Vehicle registration numbers.

Where we store your personal data

We use third party suppliers of hosting and other services. Accordingly, the data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Legitimate interests: We also process the following information because it is in our legitimate interests as a business transferring and managing waste and the buying and selling scrap metal to do so:

CCTV footage (retained for one month unless it is needed for the investigation of a crime).

Scrap metal dealer licence numbers, including documents related to our own licence
(retained for 3 years).

Waste carrier registration numbers and any documentation related to our own licence
(retained for 6 years).

Associated environmental permitting and waste shipment information (retained for the life time of the facility).

Invoices, receipts and accounts (retained for 7 years).

VAT and tax returns (retained for 7 years).

Employee data: As an employer, we process personal data pursuant to contracts of employment with our employees and retain this information for 7 years unless specific legislation overrides this period. The information includes:

Names, addresses and contact details including email address and telephone number, date of birth and gender;

Curricula vitae & references.

The terms and conditions of your employment;

Details of your qualifications, skills, experience and employment history, including start and end dates, with previous employers and with the organisation;

Information about your remuneration, including entitlement to benefits such as pensions or insurance cover;

Details of your bank account and national insurance number;

Information about your marital status, next of kin, dependants and emergency contacts;

Information about your nationality and entitlement to work in the UK;

Information about your criminal record;

Details of your schedule (days of work and working hours) and attendance at work;

Details of periods of leave taken by you, including holiday, sickness absence, family leave and sabbaticals, and the reasons for the leave;

Details of any disciplinary or grievance procedures in which you have been involved, including any warnings issued to you and related correspondence;

Assessments of your performance, including appraisals, performance reviews and ratings, training you have participated in, performance improvement plans and related correspondence;

Information about medical or health conditions, including whether or not you have a disability for which the organisation needs to make reasonable adjustments;

Details of trade union membership; and

Equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief.

Accident records

Sharing Personal data: We share personal data internally strictly on a need-to-know basis. Access to identity records and personnel files is limited to designated individuals. Hard copy documents are stored securely. Where these documents are stored electronically, they are protected and/or stored with restricted access. We do not share personal data with anyone external to the organisation, other than:

Our professional advisers.

Police services (in connection with the investigation or detection of crime).

Local authorities, Environment Agency, HMRC or VAT Commissioner (where required by law).

Pursuant to a court order.

Information Commissioner’s Office: If you have any concerns about the way your personal information has been processed, you may contact the Information Commissioner’s Office on 0303 123 1113.

Signed...... Andrew Howell.... Andrew Howell, Managing Director Date 25th May 2018