Hub.Son Consultancy Limited (“Hub”) are committed to complying with the General Data Protection Regulation and the Data Protection Act 2018, once enacted. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised shopping experience.
We have published this notice to help you understand
- how and why Hub collect information from you;
- who we share your information with, why and on what basis; and
- what your rights are.
If we make changes to this notice we will notify you by updating it on our website. Hub will be what is known as the ‘Controller’ of the personal data you provide to us, and we will sometimes refer to ourselves in this notice as “we” or “us”. By Controller, this means Hub determines the purposes and way in which any personal data are, or will be, processed.
Should you need to contact us please write to:
Data Protection Officer, Hub.Son Consultancy Limited, Textile House, 1 Holly Park Mills, Leeds LS28 5QS or via [email protected].
What information we collect when you register and why?
When you buy goods from us, you are entering into a contract with us. This will involve setting up a customer account reference to process the order: so we can set this up we will ask you to provide some personal information such as;
- full name
- address (and previous addresses)
- date of birth
- contact numbers, and
- email address.
As an existing customer if you have shopped with us using a credit or debit card, or we have taken these details for a payment authorisation, we will securely collect and store this payment card information. New customers and existing customers whose payment cards have expired will be asked if they would like to automatically store these details in order to speed up the payment process.
How do we use your information?
Data Protection says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
- Contract – your personal information is processed in order to fulfil a contractual arrangement e.g. in order to send you a quote or sample of work.
- Consent – where you agree to us using your information in this way e.g. for storing your payment details.
- Legitimate Interests – this means the interests of Hub in managing our business to allow us to provide you with the best products and service in the most secure and appropriate way e.g. to transfer your data to certain Third Party’s such as delivery partners.
- Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes.
Here is a list of the ways that we may use your personal information, and which of the reasons described above we rely on to do so. Where we list legitimate interests as a reason, we also describe below what we believe these legitimate interests are.
|What We Use Your Personal Information For||Our Reasons (Legal Basis)||Our Explanation Of Hub’s Legitimate Interests|
|Set up your order account||Legitimate interest||Process efficiency in dealing with such activity.|
|Storing payment details||Consent||N/A|
|Process your orders||Fulfilling a contract||N/A|
|Notify you of your order status.||Legitimate interests||Process efficiency in dealing with such activity, and to make improvements to our services.|
|Manage your account/ provide customer services to you.||Legal obligation/ Legitimate interests (depending on nature of services)||Keeping our records up to date, handling our customer contact efficiently and effectively, working out which of our products and services may interest you and telling you about them.|
|To detect, investigate and report financial crime (e.g. Fraud)||Legal Obligation / legitimate interests||Developing and improving how we deal with financial crime. Complying with any regulations that apply to us. Process efficiency in dealing with such activity, and to make service and process improvements.|
|Undertake website personalisation and administration.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites. Defining types of customers for new products or services|
|Marketing communications to inform you of special offers, promotions, new lines and Sales. Provide you with online advertising.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites.|
|Notifying you about enhancements to our services, such as changes to the website and new services that may be of interest to you.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites.|
|Contact you to undertake customer satisfaction surveys, invite you to provide reviews or for market research.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites. Entry into industry awards and case studies.|
|Maintaining network and data security||Legitimate interests||To maintain the security of our network this in turns helps us to maintain the safety and confidentiality of your information.|
|Logistics planning, demand forecasting, management information and research||Legitimate interests||We use information about shopping habits, products bought and volumes, to help us to respond to demand, ensure the right products get to the right areas and to help us plan our ranges.|
We want to keep you up to date with information about new services, offers and improvements to our existing services. When we start working with you, we will ask you if you want to receive this type of marketing information, and confirm by email.
Hub will not share your information with companies outside of Hub for their marketing purposes.
If you decide you do not want to receive this marketing information you can request that we stop by writing to the Data Protection Officer at the address provided above, emailing [email protected], by calling Hub at 0113 2396420, or the unsubscribe link within any marketing email (standard emails discussing prospective or actual work, or as part of normal communication, will not have an opt out)
You may continue to receive mailings for a short period while your request is dealt with.
How long we keep your information
If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws.
We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes listed under How we use your information above (usually this is 7 years from the last interaction or the last posting of accounts). The only exceptions to this are where:
- the law requires us to hold your personal information for a longer period, or delete it sooner;
- you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;
- we bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible; or
- in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.
Security of the personal information collected :
The security of your personal information is of the utmost importance to us. We implement technical measures to prevent accidental or unlawful destruction, loss or alteration, unauthorised disclosure, modification or access to your personal information. Our employees who have access to your personal information are committed to respecting strict confidentiality.
What are your rights
Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
For more information or to exercise your data protection rights, please contact us using the contact details above.
You are entitled to request the following from Hub, these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk
- Right of access: to request access to your personal information and information about how we process it.If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/
- Right to rectification: to have your personal information corrected if it is inaccurate and to have incomplete personal information completed. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-rectification/
- Right to erasure (also known as the Right to be Forgotten): to have your personal information erased. Contact Hub at 0113 2396420 or [email protected]. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/
- Right to restriction of processing: to restrict processing of your personal information. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/
- Right to data portability: to electronically move, copy or transfer your personal information in a standard form. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/
- Right to object: to object to processing of your personal information. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-object/
- Rights relating to automated decision making including profiling: you have the right in respect of automated decision making, including profiling. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-object/
We will respond to your request within 28 days of receipt of your request.
If you have any general questions about your rights or want to exercise them please contact [email protected]
You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. You also have a right to complain to the Information Commissioner’s Office, which regulates the processing of personal data. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that you believe does not comply with data, however, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.
Links to other websites
While we may enable you to connect with other websites through hypertext links, we are not responsible for the privacy practices of such websites and you should check their privacy policies before submitting any personal data to these websites.