EJ TIMBER LTD, and its affiliates, subsidiaries and related entities, EJ TIMBER LTD (“our”, “we”, “the Company”) is committed to protecting the privacy and security of the personal data we collect about our customers and users of our services (“you”, “your”).

We want to make your experience when dealing with us satisfying and safe.  The purpose of this policy is therefore to explain what personal data we collect about you when you are using one of our sites or engaging in our services.  Please read the policy carefully as it contains information about how we handle your personal information and your rights.  The policy sets out our information gathering practices for our websites and when dealing with us through other channels or systems.

The Company reserves the right to update the policy at any time without notice, which should also be read in conjunction with the Company Data Protection Policy.  Any queries relating to Data Protection and privacy of information should be addressed to sales@bgdshop.com.

Privacy Legislation

The Company is subject to UK and European Privacy Legislation, which regulates the use of individuals’ personal information.  All personal information supplied by you to us, either online via our websites, in writing, verbally or electronically will be protected by us in accordance with current applicable privacy legislation and the terms of this Policy.

What Are Your Rights?

Under the GDPR, you have the following rights in respect of your personal data, which we will always work to uphold, subject to overriding legal obligations:

• The right to be informed about our collection and use of your personal data.  The Privacy Policy should provide you with the detail which you may need to know, but the Company are contactable at any time on sales@bgdshop.com
• The right to access the personal information we hold on you.
• The right to have your personal data rectified if any of the information is inaccurate or incomplete.
• The right to be forgotten i.e., the right to ask us to delete or otherwise dispose of any of your personal data that we have.
• The right to restrict (i.e. prevent) the processing of your personal data.
• The right to object to us using your personal data for a particular purpose.  Where we are using your personal data because it is in our legitimate interests to do so, you can object to us using it in this way.
• The right to data portability.  This means that you can ask us for a copy of your personal data held by us to re-use with another service or business in many cases.

What personal information do we collect?

When you transact with us as a supplier or customer, we need to know basic personal information if you are an identified person (data subject), this does not normally apply to other companies or entities of those identified under “the Company”.

It is not necessary for you to provide us with any personal information in order for you to access the general information sections on our websites.  However, if you wish to contact us, register your details, make a purchase, or engage our services, you may need to provide us with certain information to facilitate this.

Information we may collect includes;

• Your full name
• Contact information (such as email address, phone number)
• Personal information (such as age and gender if you create an account with us)
• Postal address
• Your password and account details (if you create an account with us)
• We retain any correspondence and requests which you make which may contain personal data
• We may keep details of your visit to our website, such as traffic and location data or may request information for surveys and feedback
• Any other information which you choose to give to us via our website.

You have the right to withhold personal information which is not required for the service which you have requested.

Purposes for which we use personal data and the legal basis

We will only use your personal data when the law allows us to and have outlined our legal basis for processing.

Performance of a Contract – whereby processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract.  Where we need to collect your personal data by law, or under the terms of the contract, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into (such as the provision of goods and services).  In such cases, it may be necessary for us to cancel the goods or services but you will be made aware if this is the case.  The Company would take steps to avoid this situation from occurring.

Legitimate Interest – is the interest of our business in conducting and managing our business/es to enable us to provide the best services and products to our customers, with the most secure experience.  We do not use your personal data for activities where our interests are overridden by the impact on you, unless we have gained consent from you or are permitted by law.

Comply with a legal or regulatory obligation – is the processing of your personal data where it is necessary for the compliance with a legal or regulatory obligation which the Company is subject to.

Consent – is a legal basis which we do not typically rely on for the processing of your personal data, other than in relation to sending marketing communications.

The table below details the ways in which we plan to use your personal data and the legal basis which we rely on for the processing of these.  On occasions, there may be more than one legal basis.

We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet out contractual and legal obligations. At the end of the retention period, your personal data will be securely deleted or anonymised, so that it can be used in a non-identifiable way for statistical analysis or business operational planning.

The information will be retained in line with the Company Data Retention Policy and any statutory obligations, after which time it will be removed from our files.

Sharing Your Data

The Company is committed to the protection of your data.  We do not share your information with third parties, except for in the cases identified below.  We require all third parties to respect the privacy of your personal data and treat it in accordance with the law.  We do not allow our third-party providers to use your data for their own purposes and only permit them to use the data for a specified purpose in accordance with our instructions.  Third-party providers will have their own Privacy notices which we do not accept responsibility for and would recommend that you read these.  The Company has no control over the content of other websites.

• If you choose to pay for goods or services by Debit or Credit Card, we will pass your personal information to the necessary payment service provider e.g. Visa, PayPal.  Any third party may require further information from you in order to process your payment.
• When assessing your credit limit, we may contact a recognised Credit Reference Agency or trade reference.
• In the event of unpaid or overdue transactions, we may contact debt collection agencies, solicitors or courts.
• We may disclose your personal information to the police or other public-sector bodies with authority to request such information and/or fraud prevention agencies for the purpose of preventing fraud/loss, to prevent, detect or discourage crime and/or for the apprehension or prosecution of offenders.

By submitting your information to the Company, you agree that it may be legitimately transferred to third parties.  In the event that the Company were to undergo any form of restructuring, whether by acquisition, merger or otherwise, we may continue to use and share your personal data across the restructured form.

Cookies

We use analytics “cookies” as part of a normal business procedure to track the performance of our website and understanding more about what is of interest to those who visit our website.  We may log information using cookies which are small data files stored on your browser which store visitors’ preferences and record user-specific information on what pages users’ access or visit.

A cookie is an element of data that our websites send to your browser which is then stored on your system.  You can set your browser to prevent this happening.  We do not believe that our analytic cookies in this way poses any threat to your personal privacy or online security.

Security

The Company implements appropriate technical and organisational measures to protect data that we process from unauthorised disclosure, use, alteration or destruction.  We operate secure data networks protected by industry standard firewall and password protected systems.  Our security and privacy policies are periodically reviewed and enhanced as necessary and only authorise individuals have access to the information provided.

Whilst the Company will endeavour to take all reasonable steps to protect your personal information, we cannot guarantee the security of personal information and/or other data that you disclose to us.  You accept the inherent risks of providing information online over the internet and will not hold us responsible for any breach of security unless this is due to our negligence or wilful default.

Your consent

By using our website or transacting with us, you consent to the collection and use of your personal information by the Company in accordance with the terms of the Policy.

Contact Us

If you have any queries, or wish to exercise any of your rights, you can contact sales@bgdshop.com.  You will not have to pay a fee to access your personal data, or exercise any other rights.  However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive.  Alternatively, we may refuse to comply with the request in such circumstances.

You can also lodge a complaint with the Information Commissioner’s Office.