The Sunfixings Group is made up of a number of different companies, these are:
If we want to collect Personal Information through our websites we will be open about this, we will make it clear when we collect Personal Information and will explain what we intend to do with this Personal Information.
When you use our websites we will not collect any Personal Information unless you provide such information to us, for example; by filling out the “Contact Us” page on this website or emailing us.
For our websites we use a third-party service, Google Analytics, to collect standard internet log information and information relating to your use of the websites (for example; relating to the type of browser and operating system which you use and which sections of the websites you visit). We will not make any attempt to discover the identities of those visiting our websites and do not allow others (such as Google Analytics) to do so.
We may collect Personal Information about you in a number of different ways.
The law provides protection for Personal Information and sets out a number of legal grounds for the collection, use and storage of Personal Information (this is commonly referred to as the “collection and processing” of Personal Information). The relevant legal grounds which we rely on are:
We will only use your Personal Information when the law allows us to. Most commonly we use Personal Information in the following circumstances:
We use non-personally identifiable information to help us understand the use made of our website and to improve the website. Details of how we collect and use non-personally identifiable information can be found in the section on Cookies.
Please be aware that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one legal ground have been stated.
We will only use your Personal Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your Personal Information for an unrelated purpose, we will notify you and we will explain the legal ground which allows us to do so.
Personal Information may be shared between the companies within the Sunfixings Group. We may also share your Personal Information third parties who provide services to us (for example; those who provide payment processing, credit checks, postage and delivery services, accounting services, HR and payroll services and business administration, as well as government agencies such as HMRC) or third parties who help us provide our services. If these parties be based in countries outside of the European Economic Area (EEA) this may result in your Personal Information being transferred outside of the EEA, data protection laws may differ outside of the EEA and the data laws in some countries may offer less protection than within the EEA. If we do this we will make sure that suitable safeguards are in place; for example, by using approved contractual agreements, unless certain exceptions apply.
We will not share your Personal Information with any third party unless we have your approval to do so or where it is necessary to do so in order to fulfil our obligation to you.
We may also share your Personal Information in the event that our company is the subject of a change of control, merger or a transfer of part of our business.
Whilst unlikely, we may also be compelled to share your Personal Information if required to do so by law or legal process.
We will not sell or rent your Personal Information to any other company or person.
We will not share your Personal Information except as described in the section above.
We have put in place appropriate security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your Personal Information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.
You should also be aware that Personal Information and other data transmitted over the internet may not be secure and may be collected by others.
Under certain circumstances, you have rights under data protection laws in relation to your personal data.
You have the right to:
If you wish to exercise any of the rights set out above, please contact us.
You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Our full details are:
Full name of legal entity: Sunfixings Limited
Name or title of data privacy manager: Cathal Murphy
Email address: firstname.lastname@example.org
Postal address: Sunfixings Limited
R3 Bourton Industrial Park
Bourton on the Water
Cheltenham, Gloucestershire GL54 2HQ.
Telephone number: 01451 824 312
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.