Welcome to Delahay&Co LTD. This Privacy Notice explains what we do with your personal information when you are visiting www.delahayco.com (“Website”). It describes how we collect, use and process your personal information, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your rights.
For the purpose of applicable data protection legislation Delahay&Co, LTD, whose registered office is at Suite 2A Blackthorn House, St. Pauls Square, Birmingham B3 1RL, United Kingdom (“we”, “our” or “us”) is the ‘controller’ of your personal information. This means we decide why and how your personal information is used and are responsible for protecting it. Please refer to the end of this notice for our contact and company information.
1. What data we collect
The personal data we collect from you includes:
- questions, queries or feedback you leave, including your email address if you contact DELAHAYCO.COM
- your email address and subscription preferences when you sign up to our email alerts
- how you use our emails - for example, whether you open them and which links you click on
- your Internet Protocol (IP) address, and details of which version of web browser you used
- information on how you use the site, using cookies and page tagging techniques
We use Google Analytics software to collect information about how you use DELAHAYCO.COM. Google Analytics stores information about:
- the pages you visit on DELAHAYCO.COM
- how long you spend on each DELAHAYCO.COM page
- how you got to the site
- what you click on while you’re visiting the site
We do not collect or store your personal information through Google Analytics (for example, your name or address) so this information cannot be used to identify who you are.
2. Why we need your data
We collect information through Google Analytics to monitor how you use our website. We do this to help:
- make sure the site is meeting the needs of its users
- make improvements, for example improving site search
We also collect data in order to:
- gather feedback to improve our services, for example, our email alerts
- respond to any feedback you send us, if you’ve asked us to
- send email alerts to users who request them
3. What we do with your data
The data we collect may be shared with our technology suppliers, for example, our hosting provider.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.
4. How long we keep your data
We will only retain your personal data for as long as:
- it is needed for the purposes set out in this document
- the law requires us to
We will keep your email data until you unsubscribe. We will keep your feedback data for 2 years. We will delete access log data after 30 days.
5. Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored. All personal data is stored in the European Economic Area (EEA). Google Analytics data may be transferred outside the EEA, but this cannot be used to personally identify you.
6. How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.
We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.
7. Your rights
You have a number of rights in relation to your information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within one month from either (i) the date that we have confirmed your identity or (ii) where we do not need to do this because we already have this information, from the date we received your request.
7.1. Right to object
This right enables you to object to us processing your personal information where we do so for one of the following reasons:
- where we rely on our legitimate interests to do process your information;
- to enable us to perform a task in the public interest or exercise official authority;
- in certain circumstances, to send you direct marketing materials; or
- for scientific, historical, research, or statistical purposes.
Except for the purposes for which we are sure we can continue to process your personal information, we will temporarily stop processing your personal information in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise we will provide you with our justification as to why we need to continue using your data.
7.2. Right to withdraw consent
Where we have obtained your consent to process your personal information for certain activities (for example, for marketing), you may withdraw this consent at any time and we will cease to use your data for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition. If you withdraw your consent, our use of your personal information before you withdraw is still lawful.
To withdraw your consent to marketing communications, please use the unsubscribe tool in the relevant communication or update your preferences in the account section on the Website.
7.3. Right of access (Data Subject Access Requests)
You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information, we hold about you, we will not charge you for this unless permitted by law. If you request further copies of this information from us, we may charge you a reasonable administrative cost. Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will always tell you the reasons for doing so.
If you would like to request access to your information, it would assist us with dealing with your request if you could use the subject heading ‘Data Subject Access Request’, or quote this over the phone, when contacting us. Please note that this is not mandatory and we will still deal with any requests without this reference.
7.4. Right to erasure
You have the right to request that we “erase” your personal information in certain circumstances. Normally, this right exists where:
- the data is no longer necessary
- you have withdrawn your consent to us using your data, and there is no other valid reason for us to continue;
- the data has been processed unlawfully;
- it is necessary for the data to be erased in order for us to comply with our obligations under law; or
- you object to the processing of your data and we are unable to demonstrate overriding legitimate grounds for our continued processing.
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
7.5. Right to restrict processing
You have the right to request that we restrict our processing of your personal information in certain circumstances, for example if you dispute the accuracy of the personal information that we hold about you, you object to our processing of your personal information for our legitimate interests or you require us to keep it in connection with legal proceedings. If we have shared your personal information with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal information.
We may only process your information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.
7.6. Right to rectification
You have the right to request that we rectify any inaccurate or incomplete personal information that we hold about you. If we have shared this personal information with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete personal information to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
You can access and update certain parts of your information by logging into your account on the Website.
7.7. Right of data portability
If you wish, you have the right to transfer your personal information between service providers where we rely on your consent or the performance of your contract as the legal basis to use that information. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you if technically possible.
7.8. Rights relating to automated decisions
In certain circumstances, you may contest a decision made about you based on automated processing.
7.9. Right to complain
You have the right to lodge a complaint with your local supervisory authority which is the Information Commissioner’s Office in the UK. You can contact them in the following ways:
- Phone: 0303 123 1113
- Email: [email protected]
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
8. How to exercise your rights
If you would like to exercise any of these rights, please contact us on the details provided under How to contact us. Please note that we may keep a record of your communications to help us resolve any issues that you raise.
9. Links to other websites
DELAHAYCO.COM contains links to other websites.
9.1. Following a link to another website
9.2. Following a link to DELAHAYCO.COM from another website
10. Changes to this policy
We may amend this Privacy Notice from time to time. Please visit this page regularly as we will post any changes here. Where appropriate, we may also notify you of the changes by email. Please see further the section Changes below.
If you are dissatisfied with any aspect of this Privacy Notice, you may have legal rights which we have described below where relevant.
11. How to contact us
If you have any queries about this Privacy Notice, including your rights in relation to your personal information, please contact us by post at:
2A Blackthorn House,
St. Pauls Square,
Birmingham B3 1RL.
If you wish to contact us with any general queries or concerns, you can use our Contact Us page or email us at [email protected] or write to us via post at:
Delahay&Co Customer Support
2A Blackthorn House,
St. Pauls Square,
Birmingham B3 1RL
When contacting us by email or post, please use the subject heading ‘Data protection query’ so that we can direct your query to the appropriate department and deal with it promptly.