CARDINAL INNOVATIONS LIMITED PRIVACY POLICY
At Cardinal Innovations Limited (Cardinal Innovations) respecting your privacy rights and maintaining the security of your data is a priority. We are dedicated to being transparent about the data we collect and how we use it. Cardinal Innovations are committed to the highest privacy standards. You can rest assured that we handle your personal data with the utmost care and take all appropriate steps to protect it.
This policy, which applies whether you contact us by phone, email, or online, or visit our office and factory premises provides detailed information on:
– when and why we collect your personal information,
how we use it,
– the very limited conditions under which we may disclose it to others,
– how we store your personal data and keep it safe, and
– your legal rights relating to your personal data.
1. WHAT IS PERSONAL DATA
Personal data means any information from which an individual can be directly or indirectly identified, such as your contact information, your order data or your product data.
2. PRINCIPLES FOR COLLECTION AND PROCESSING OF PERSONAL DATA
Cardinal Innovations adhere to the following general principles when processing your personal data:
1. We will only collect personal data for specified, explicit and legitimate purposes.
2. We will not collect personal data beyond what is necessary to accomplish those purposes.
3. We will not use personal data for purposes other than that for which the data was collected, except as stated herein, or with prior consent.
4. We will not transfer personal data to third parties, except as stated herein, or with prior consent.
5. We will do our best to ensure that information is up to date and encourage you to verify your personal data periodically.
6. We will maintain appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration unauthorized disclosure or access and against all other unlawful forms of processing.
7. Except when stated herein, we will not store personal data longer than is necessary to accomplish the purpose for which the data was collected or for which it is further processed, or as is required by law.
8. Our website is not intended for children and we do not knowingly collect data relating to children.
3. HOW WE COLLECT AND PROCESS PERSONAL DATA
When you engage with Cardinal Innovations via various channels, including our website, visiting us, or speaking to sales support and customer services, we collect and process your personal data. The personal data we collect, and process can be categorized as follows:
1. Your personal details, such as your name, e-mail address, physical address (if provided), phone numbers (including mobile if provided), IP address, in some cases geo location and language.
2. Information about our products and services you have ordered or enquired about.
3. Your enquiry and purchase information, such as your personal details as specified above, order information, such as product range name and finish, design and product content, details of order processing information such as delivery details including your delivery address (if different), your payment information, such as debit card or similar payment information.
4. Requests for customer support and warranty assistance containing your personal and order details as specified above.
5. Information provided by telephone or other means maybe monitored, recorded and stored. This may include notes from our conversations with you, such as details of information provided, comments you make, feedback on your experience and details of any complaints.
6. Information provided when you interact with us on social media.
7. Your information collected via use of cookies and similar technologies like pixels, tags and other identifiers to remember your preferences, to understand how our websites and apps are used and to customize our marketing offerings.
8. If you visit our office, or factory, our premises have CCTV systems in operation for the security of customers, employees and Cardinal Innovations. These systems may record your image during your visit.
4. HOW AND WHY WE USE YOUR PERSONAL DATA
Cardinal Innovations want to give you the best possible customer experience. One way for us to achieve this is by creating the best picture we can of who you are by combining the data we have about you. The data privacy law allows this as part of our legitimate interest in understanding our customer to provide you with the highest levels of service.
We use the information we collect about you to ensure we provide you with the best and most appropriate products and services and to fulfil our contractual obligations as follows:
1. to process your brochure and technical information requests,
2. to process your orders, complete supply chain purchases, ensure manufacture, delivery and fitting of purchased products, handle possible replacement items and returns.
3. to provide you with customer service, handle your requests or complaints and provide you with product warranty support.
4. With your consent, we will use your personal data, preferences and details of your purchases to keep you informed by email, post and telephone through our sales support or customer services about relevant products and services including news, events, promotions and similar marketing content.
5. to develop and improve personnel, processes and systems, as well as the services and products we provide to you.
6. to comply with our contractual or legal obligations.
5. HOW WE PROTECT YOUR PERSONAL DATA
Cardinal Innovations know how important data security is to all our customers and we take all organisational, technical, and administrative steps to protect it. We use “https” technology to ensure our website and apps are secure. Cardinal Innovations are committed to regularly testing our security systems and software to identify possible vulnerabilities and ways in which it can be further strengthened.
6. WHERE WE STORE AND PROCESS YOUR DATA
Your personal data is stored and processed within the European Economic Area (EEA). The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway.
If we are required to deliver or install products, or to perform services outside the EEA to any third countries, as defined in General Data Protection Regulation (GDPR), Cardinal Innovations will ensure that the transfer of your personal data to any third countries is done in accordance with valid law and that relevant legal and security safeguards are observed.
7. WHO WE SHARE YOUR PERSONAL DATA WITH
We do not share your personal data with any third parties except in the very limited occasions stated in this Privacy Policy. We may disclose your personal data to:
1. Third parties when required by law, court order or a decision made by a competent public authority for the purposes of law enforcement.
2. Our group companies to ensure consistent level of service across our products and services, to enhance our products, services and your customer experience.
3. Trusted third parties carrying out services on our behalf such sales, marketing, IT support, advertising, analytics, research, customer service, product service support, shipping and purchase order fulfilment, data storage, validation, security, fraud prevention, payment processing, and legal services. Such third-party vendors have access to perform these services but are prohibited from using your personal data for other purposes.
4. Third parties to establish, exercise or defend legal rights of Cardinal Innovations.
5. In the event that we expand, reduce or sell Cardinal Innovations and this may involve the transfer of divisions or the whole business to new owners. If this happens, your personal data will, where relevant, be transferred to the new owner or controlling party, under the terms of this Privacy policy.
6. Other third parties subject to your consent.
7. When we disclose your personal data to a third party, we take all reasonable steps to ensure that those third parties are bound by confidentiality and privacy obligations with respect to the protection of your personal data. The disclosure is conducted in compliance with legal requirements, including entering into data processing agreements with the relevant third parties, to ensure that personal data is only processed in accordance with our instructions, applicable law and regulations and for the purposes specified by us and to ensure adequate security measures.
8. HOW LONG WE KEEP YOUR PERSONAL DATA
Cardinal Innovations will not retain your data for longer than necessary for the purposes for which is was collected. At the end of the retention period, your data will be anonymised, suppressed or securely deleted, unless such data legitimately can be kept and processed for other processing purposes, which we have legal basis for.
9. COOKIES
Cardinal Innovations use cookies and similar technologies like pixels, tags and other identifiers to remember your preferences, to understand how our websites and apps are used and to customize our marketing offerings.
A cookie is a small text file that is placed on your computer or mobile device when you visit a site, that enables us to: (1) recognize your computer; (2) store your preferences and settings; (3) understand the web pages of you have visited; (4) enhance your user experience by delivering and measuring the effectiveness or content and advertising tailored to your interests (5) perform searches and analytics; and (6) assist with security and administrative functions.
Pixels are tiny electronic tags with a unique identifier embedded in websites, online ads and/or email that are designed to: (1) collect usage information like ad impressions or clicks and e-mail open rates; (2) measure popularity of the advertising; and (3) access user cookies.
As we adopt additional technologies, we may also gather information through other methods.
Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information. Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings on our websites or apps.
10. YOUR RIGHTS, UPDATING YOUR DATA AND MARKETING PREFERENCES
You have the right to request:
1. Access to the personal data Cardinal Innovations hold about you, free of charge in most cases.
2. The correction of your personal data when incorrect, out of date or incomplete. To ensure that your personal data processed by Cardinal Innovations is up-to-date we request that you inform us of any relevant changes when they occur.
3. That Cardinal Innovations stop using your personal data for direct marketing (either through specific channels, or all channels). We must comply with your request. In cases where Cardinal Innovations are processing your personal data based on our legitimate interest, you can ask us to stop for reasons connected to your individual situation. Cardinal Innovations will stop using your personal data unless we believe we have a legitimate overriding reason to continue processing your personal data.
4. That Cardinal Innovations stop any consent-based processing of your personal data after you withdraw that consent. Whenever you have given us your consent to use your personal data, you have the right to change your mind and at any time to withdraw your consent. Withdrawal of your consent will not affect the lawfulness of processing conducted prior to the withdrawal.
You can contact us to request to exercise these rights at any time.
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Policy.
If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.
Your marketing preferences can be updated by contacting us by phone, email or post as indicated below, or by clicking on the ‘unsubscribe’ link in any electronic marketing communication from us.
If you have any questions about how Cardinal Innovations uses your personal data that are not answered here, or to update or complain about a privacy breach, please contact our Data Protection Manager:
– Phone: 01274 386820
– Email: pb@the-sbox.com
– Write to: Peter Brook, Commercial Director, Cardinal Innovations Ltd., Fernhill House, Battye Street, Bradford, BD4 8AG
Cardinal Innovations will endeavour to resolve it as quickly as possible.
11. CONTACTING THE REGULATOR
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by calling 0303 123 1113.
Or go online to www.ico.org.uk/concerns (please note we can’t be responsible for the content of external websites).
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
12. CHANGES TO OUR PRIVACY POLICY
Cardinal Innovations may modify or update this Privacy Policy when necessary to reflect changes in Cardinal Innovations products and services, changes in applicable legislation, regulations or practice and to address customer feedback. Accordingly, we will review it periodically.
If there are material changes to this Privacy Policy, you will be notified either by posting a notice or by sending you a notification.
Version 1.01 last modified September 2018