Privacy Notices:

Employee Privacy Notice………………………………………………………………………………………………… 1

Customer Privacy Notice………………………………………………………………………………………………… 3

CCTV………………………………………………………………………………………………………………………….. 7

Summary Customer Privacy Notice…………………………………………………………………………………… 7

Employee Privacy Notice

DM Developments (Inskip) Ltd T/A Eco Home Insulation will comply with all statutory requirements of the data protection law.

The UK GDPR and Data Protection Act 2018 protect individuals’ rights concerning information about them held on computer, and also imposes obligations on companies such as Eco Home Insulation.

During the course of your employment with us we will collect and create information relating to you.  Much of that information will be “personal data”; i.e. information relating to you that allows you to be identified or identifiable from it. This personal data collected during your employment will comprise such things as your previous job/educational history, name and address, next of kin, name and address, movements and locations, work patterns, work performance, bank and pension information, training records, holiday and sickness absence, health information and other sensitive personal information you choose to share with us as your employer, or that we may obtain to manage the employment relationship we have with you. At the end of your employment we may also be required to provide a reference for your next company.

We store and process information about you for a variety of reasons most of which are to fulfil our legal obligations set out in employment and health and safety law, and also pursuant to our interests in running a commercial enterprise.

We will retain information about you for no longer than we need to and have devised a data retention schedule detailing the time-frames for data retention or the criteria upon which data retention is based. This information is available to you on request.

Data protection law grants you several rights including the right to request from us access to and rectification or erasure of personal data or restriction of processing of personal data relating to you. You may also object to how we are processing your personal data and, in some circumstances, you are entitled to the right to data portability. You may also lodge a complaint with the Information Commissioner’s Office (ICO): the UK’s regulator for data protection.

We do not use information relating to you for any profiling nor do we have any have systems that take automated decisions about you.

We may choose to disclose your personal data to a number of other organisations including but not limited to: our clients and prospective clients, our suppliers and prospective suppliers, and to other organisations that provide core services to us such as processing our payroll and pensions (e.g. payroll company), HR advisors (e.g. HR advisor), and similar professional advisors. The purpose of such disclosure is pursuant to our business interests.

In order to achieve operational efficiencies we outsource some of our database management services to third parties which may involve the exposure of some of your personal data to other organisations. These include: [e.g. PasHub (our CRM and operational database system), Installr (our secondary CRM and operational database system), Dropbox (Cloud File Storage Service) and Microsoft/Google (provision of software applications such as Office 365 and SharePoint and Google Apps).]  None of these disclosures involves us transferring information about you to a territory that has not been assessed as providing adequate protection of your rights with regard to the processing of your personal data by the ICO.  In all cases we shall ensure that we use only reliable third party database platforms and keep to a minimum the information about you that we disclose to them.

We have designated a senior manager of the company as Privacy Officer to oversee our data processing operations and compliance with data protection law. If you have any queries about who we might disclose information about you to, please do not hesitate to contact them. The Privacy Officer is Edward Conroy who can be contacted via email at dmdevelopments09@outlook.com.

It is important that our records are correct, as inaccurate or out of date information may affect your salary or cause difficulties in situations where contact is required for emergencies. You must notify your Line Manager immediately of all changes in the following personal information:

  • Name
  • Home address
  • Telephone number
  • Bank account details
  • Examinations passed/qualifications gained
  • Emergency contact
  • Driving licence penalties (if you are required to drive on Company business)
  • Criminal charge, caution or conviction
  • Conflict, or potential conflict of interest

Personal data on employees is held in accordance with the provisions of the Company’s Data Protection Policy which will be made available for inspection by you if required.

Customer Privacy Notice

Introduction and scope

The DM Developments (Inskip) Ltd T/A Eco Home Insulation is committed to protecting the privacy and personal data of all those whose data we are handling and to working within the guidelines set out by data protection law.  This privacy information notice aims to provide you with information about how and why we are, plan or may be using information about you.  It also explains how you can exercise the rights you have set out in the law and how you can contact us if you have any concerns or questions about data protection.

This policy relates to personal data collected and processed relating to our customers and suppliers, prospective customers and former customers and suppliers.

Data Controller

The legal data controller is DM Developments (Inskip) Ltd T/A Eco Home Insulation, Pad End Barn, Inskip, PR4 0UA.  We have appointed a Privacy Officer to oversee our processing of personal information whose contact details are provided below.

Edward Conroy – dmdevelopments09@outlook.com

Information we may be holding about you

We collect, create and otherwise obtain and process the following types of personal data:

  • Personal identifiers such as name, address, employer, job title which you provide to us through our enquiry or contact forms and which we use a) to fulfil the request you make (e.g. such as registering a warranty service agreement, subscribing to a communications service etc.) and b) to create a data base of people who have expressed interest in our companies or products and services, to provide services you request, fulfilling requests for information etc. We may also use this information to validate your identity via Facebook authentication services if you sign up to our services via social media.
  • Your feedback and opinions which you provide to us through our enquiry or contact forms which we use allow us to answer queries and complaints you may have and to help us evaluation the quality and consistency of our services.
  • Details of your visits to our website including your IP address, pages visited, dwell time, and page referred from which we collect from your browser to enable us to monitor the performance and relevance of our website.
  • We may also use the information we hold about you to create a profile of you to segment our database and for direct marketing purposes including sending you marketing and promotional materials.
  • If you join our communications program we collect information about each email we have sent to you and your interaction with them including the number of times opened, deliverability, which sections you clicked on etc. which we use to measure the effectiveness of our email campaigns, to plan marketing campaigns and to segment our database.

We may also undertake additional data processing activities but will ensure they are compatible with the purposes above.  If we chose to process your personal data for any incompatible purpose we will provide you with appropriate privacy information at the point where you come across those additional purposes.

The legal basis for processing is in pursuant of our legitimate interests as a commercial business seeking to promote, develop and grow our business through the sale of products and services and to provide excellent customer services.  If you buy any products or services from our website the legal basis for processing personal data about you in those circumstances is the fulfilment of our contract with you brought about by the transaction.

If you subscribe to our email communications program we will only send you unsolicited direct email marketing materials where you have granted your consent or if they relate to products and services similar to those you have bought from us or expressed interest in.

Disclosing, sharing and transferring your personal data

We will disclose information about you with some of our suppliers who process data on our behalf to help us to provide services to you.  We undertake this data sharing on the basis of our legitimate interests to procure high quality, cost effective services.  The table below provides you with information about the categories of organisation we may share information with:

Categories of Organisation Purpose Location
Marketing agencies, database hosting companies, data cleansing companies, mailing housing, and email broadcasters. To provide marketing services and fulfil our CRM and email program UK
Social Media which may include but not be limited to: Facebook, Twitter, Linked In, Instagram, Pinterest, YouTube To verify your identify when you register on our web site United States

 

We may also disclose your personal information to third parties from time to time:

  1. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation;
  2. to fulfil any order that you place with us (e.g. we would share data with our retail partner, mailing houses, credit card companies and banks etc.);
  3. to enforce or apply our terms of use and other agreements;
  4. to protect the rights, property, or safety of our business, our customers, or others including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

International Transfer of Personal Data

If you chose to sign-up via Social Media when you register on our Site we may access your personal data in your Facebook account depending on your Facebook settings and we may post information you submit on our Site to Facebook who will store such information in the United States of America  The UK has not endorsed the privacy laws of the United States but has approved a framework for the transfer of personal data called standard contractual clauses which we have entered into with Facebook enabling us to lawfully transfer your personal data to Facebook in the US.  A copy of the safeguards we have in place is available from us by contacting our Privacy Officer.

Data retention:

We will hold information about you in our data systems only for as long as we need to hold it which is generally as follows:

  • As long as you continue to use our services and log into our website we will retain and process information about you. User accounts are automatically suspended when they have been inactive (i.e. users have not logged in and/or have not opened our emails) for a period of two years.  Inactive accounts are still maintained on our data systems.
  • We will hold information about how you interact with our electronic communications for a period not exceeding 24 months from the campaign start date after which we will anonymise it to enable us to continue to analyse the performance of our campaigns but without being able to attribute any specific information to you.
  • Any personal data linked to insurance claims is retained indefinitely.

We reserve the right to review our retention policy and to shorten our retention periods if we feel this is appropriate.  We will not lengthen our retention periods without letting you know.

Your Rights

The GDPR grants you certain rights (‘information rights’) which we summarise below:

Right of access and of data portability. You have the right of access to information we hold about or concerning you and/or to have it transferred to another data controller in some circumstances.  If you would like to exercise this right you should contact our Privacy Officer.
Right of rectification or erasure. If you feel that any data that we hold about you is inaccurate you have the right to ask us to correct or rectify it.  You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, or if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data.  Your right of rectification and erasure extends to anyone we have disclosed your personal information to and we will/shall take all reasonable steps to inform those with whom we have shared your data about your request for erasure.
Right to restriction of processing. You have a right to request that we refrain from processing your data where you contest its accuracy, or the processing is unlawful and you have opposed its erasure, or where we don’t need to hold your data anymore but you need us to in order to establish, exercise or defend any legal claims, or we are in dispute about the legality of our processing your personal data.
Right to object. You have a right to object to our processing of your personal data where the basis of the processing is our legitimate interests including but not limited to direct marketing and profiling.
Right to Withdraw Consent. You have the right to withdraw your consent for the processing of your personal data where the processing is based on consent.  To withdraw consent please contact the privacy officer by email – dmdevelopments09@outlook.com or contact Eco Home Insulation office on 0333 444 1062.
Right of Complaint. You also have a right to lodge a complaint about any aspect of how we are handling your data with the UK’s Information Commissioner’s Office who can be contacted at www.ico.org.uk.

If you would like to find out more about your rights please contact our Privacy Officer.

Information Governance and our Privacy Officer

We have appointed a Privacy Officer who is responsible for helping us to comply with our legal obligations set out in the UK GDPR.  The privacy officer monitors our data protection compliance and provides advice and guidance as to how we can improve our data handling practices.  The contact details of our Privacy Officer are available on our website and may change from time to time.  At the time of writing our Privacy Officer is:

Edward Conroy

Eco Home Insulation

Unit 1, The Creamery Industrial Estate

Kenlis Road

Barnacre

PR3 1GD

 

We reserve the right to change our privacy officer without informing you directly and will publish our privacy officer contact details on our website.

CCTV

Summary Customer Privacy Notice

Data Protection Statement

By submitting this form you agree to Eco Home Insulation as data controller using the data provided for several purposes including: sharing your information with the DWP and local councils to determine eligibility for Eco Funding; and for the purposes of direct marketing.  The legal basis for our processing your personal data for these purposes is the pursuit of our legitimate interests which are: creating a marketing database to further our commercial interests; assisting with product development and distribution; and sending promotional information about our products.  The information you provide will be stored in our computer systems for a period of 6 years.  You have the right to request access to, rectification or erasure of personal data that we hold about you as well as a right to object to and to a restriction of our processing of your personal data.  You may also lodge a complaint about us with the ICO.

You may withdraw your consent at any time by contacting the privacy officer on 0333 444 1062 or by email dmdevelopments09@outlook.com

We will not share or disclose your personal data to anyone other than our marketing agencies for the purposes of them fulfilling our emails and evaluating our campaigns.  We will ensure that none of your personal data is transferred outside of the United Kingdom.  We will not process the information you have provided for any other purposes incompatible with those referred to in this statement.

We have appointed a privacy officer who can be contacted via email at dmdevelopments09@outlook.com for further information about our approach to privacy.