INTRODUCTION
The website [www.cawood.co.uk] is operated by Cawood Scientific Limited (“we”, “us” or “our”) and we are a “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR), as well as other data protection and privacy laws. This means that we are responsible for, and control the processing of, your personal information.
This privacy notice relates to your use of our website and our services. Where we provide products and/or services for a sole trader, partnership or business that you represent or are employed /contracted by and this involves the collection and use of your personal data by us, this will be done in accordance with the relevant parts of this privacy notice.
We take your privacy very seriously and we ask that you read this notice carefully as it contains important information on:
- the personal information we collect about you;
- what we do with your information; and
- with whom we might share your information.
DATA WE COLLECT AND PROCESS
We collect personal information about you when you register with us, contact us or when you submit a response to an online questionnaire on our website. We may collect the following personal information:
- Identity Data: full name; postal address; email address; telephone numbers; workplace; job title;
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us;
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website;
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses;
- Usage Data includes information about how you use our website, products and services;
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
HOW WE USE YOUR INFORMATION
We use your personal information for the following key purposes:
- to identify you and manage any accounts you hold with us;
- to process your order;
- to conduct research, statistical analysis and behavioural analysis;
- if you agree, to let you know about other products or services that may be of interest to you;
- to detect and prevent fraud;
- to customise our website and its content to your particular preferences;
- to notify you of any changes to our website or to our services that may affect you;
- to improve our products and services.
WHY WE USE YOUR INFORMATION
We process your personal information for the purposes listed below. We have outlined our legal basis for each of our processes.
| Purpose | Legal Basis |
|---|---|
| To verify your identity and register you as a new customer or supplier | Compliance with legal obligations and performance of a contract with you |
| To provide relevant health and safety information for us before we visit customer sites | Compliance with legal obligations |
| To assist with the prevention and detection of crime | Compliance with legal obligations |
| Where we are permitted to do so in accordance with data protection law | Our legitimate interest in promoting and marketing our business |
| We use Google Analytics on our website to track visitor numbers and user activity on our site. We record your computer / device IP address, so we can tell how each user and repeat visitor is using our site (your IP address may also be a piece of your personal data) | Necessary for our legitimate interests in tracking website users so that we can improve our service and keep our websites relevant and useful |
| To process your order | Necessary for our legitimate interests to provide our goods and services |
| To contact you for market research purposes. We may contact you by email, phone, fax or mail | Necessary for our legitimate interests to improve our products and services and to customise our website and its content to your particular preferences |
Opting out of Marketing
We will only send you marketing messages using contact details you have provided to us and where we are permitted to do so under data protection laws. A link to opt-out is available at the bottom of every marketing correspondence. In order to process your request that we stop contacting you with direct marketing, we may need to verify your identity for your security.
Security of your personal data
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data and take appropriate technical and organisational security measures in doing so, we cannot guarantee the security of your data whilst in transmission to our websites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We take the security of all the data we hold very seriously. To protect your information, we have policies and procedures in place to make sure that only authorised personnel can access the information, that information is handled and stored in a secure and sensible manner and all systems that can access the information have the necessary security measures in place. To accomplish this, all employees, contractors and sub-contractors have roles and responsibilities defined in those policies and procedures.
To make sure all employees, contractors and sub-contractors understand these responsibilities they are provided with the necessary training and resources they need. In addition to these operational measures, we also use a range of technologies and security systems to reinforce the policies. To make sure that these measures are suitable, vulnerability tests are run regularly. Audits to identify areas of weakness and non-compliance are routinely scheduled. Additionally, all areas of the organisation are monitored and measured to identify problems and issues before they arise.
If you have access to parts of our websites or use our services, you remain responsible for keeping your user ID and password confidential.
SHARING YOUR DATA
We may share your information with the other members of our Group but only for the purposes specified in this privacy notice. In particular, your information may be shared between the relevant members of our Group for the purpose of sharing credit control details of the relevant Group member’s customers to our centralised finance team.
Where necessary to fulfil our obligations to you, we may pass your details to third parties where this is necessary for the functioning of our product. These third parties include:
- We work with third party courier companies and carriers to collect from and deliver to our customers. This data will include contact name, address and telephone number. These third party providers are prohibited from using our data for any other purpose other than delivery or collection.
- Our affiliates and wider Cawood Group as required for the legitimate business interests of the other companies within the group.
- Our external service providers including our external payroll, expenses and IT and HR service providers.
COOKIES
We use cookies to improve the use of our website. For more information about the cookies we use, please see https://cawood.co.uk/cookies-policy/.
OVERSEAS TRANSFER OF YOUR INFORMATION
We transfer personal data to organisations outside of the UK and European Economic Area (“EEA”) in connection with the performance of contract and for the purposes listed above.
Where data is transferred outside of the UK and EEA we will do so under standard contractual clauses or binding corporate rules or any other acceptable method that ensures a protection of your data to the standard required within the UK and EEA.
If your personal data is transferred by us outside the UK or EEA, we will take all reasonable steps to ensure that adequate measures are in place to keep your personal data as secure as it is within the UK and EEA and in accordance with this Privacy Notice.
HOW LONG WE WILL KEEP YOUR PERSONAL INFORMATION
We will retain your personal data for as long as is necessary for the purposes set out above and as communicated to you at the time of collecting your personal data.
The criteria we use to determine data retention periods include the following:
- Retention in case of queries: we may retain your personal data for a reasonable period after you have enquired about events, products, services or solutions, in case of follow up queries from you.
- Retention in accordance with legal and regulatory requirements: we will consider whether we need to retain your personal data after the period of retention in case of queries (above) due to legal or regulatory requirements to which it may be subject. Some or all of these criteria may be relevant to retention of your personal data collected from you in connection with our events, products, services, solutions and/or your use of our website.
- Retention permitted under applicable law: we will continue to retain your personal data where necessary to provide our services to you and the retention of such personal data is necessary for pursuing our legitimate interests or where it is necessary for public interest purposes.
YOUR RIGHTS
You have the right to:
- Request access to your personal data (commonly known as a “Data Subject Access Request” or “DSAR”). This enables you to receive a copy of the personal information we hold about you.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. You can ask us to delete or remove personal information which we will comply with where possible but please note this is not an absolute right.
- Object to processing of your personal information where we are relying on a legitimate interest and where we do not have compelling legitimate interests to override such objection.
- Request we restrict the of your personal information. This enables you to ask us to suspend the processing of personal information about you.
- Request the transfer of your personal information to another party under your right to Data Portability.
- Complain to a relevant supervisory authority in respect of our processing of your personal information, which is the Information Commissioner’s Office in the UK.
Please be aware that the rights above are not absolute and there may be circumstances where exemptions apply.
CONTACT
If you have any queries about the information contained within this notice, you can contact our Data Protection team by emailing HR@cawood.co.uk.
DETAILS OF THE DATA CONTROLLER
For the purpose of applicable data protection legislation, the data controller is Cawood Scientific Limited (registered no. 05655711), with its postal address at Coopers Bridge Braziers Lane, Winkfield, Bracknell, Berkshire England RG42 6NS. This includes affiliates:
- Sci-Tech Ireland, NRM Laboratories, Sciantec Analytical, Natural Resource Management (NRM), Marchwood Scientific Services, and Independent Analytical Supplies (IAS).
OTHER WEBSITES
Our websites may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or
liability for these policies.
CHANGES TO THIS PRIVACY POLICY
We may change this notice from time to time. You should check this notice occasionally to ensure that you are aware of the most recent version that will apply each time you access the website.
This version of the notice was issued in December 2022.