Privacy Policy

This Privacy Policy;

• Sets out the types of personal data that we collect
• Explains how we use your data
• Explains how we ensure your privacy is maintained
• Explains the rights and choices you have when it comes to your personal data
• This policy also applies to information we collect about people who contact us via phone, email or our websites.

Under the General Data Protection Legislation ('GDPR') we are classed as 'the Data Controller' and the individual who data we have collected is known as the data 'subject'.

If you require any further information you can contact us by email at dpo@therackpeople.com or by post to The Rack People Ltd, G5 The Innovation Centre, Devon Way, Birmingham, B31 2TS.

What Types Of Data Do We Collect?

When you enquire about our products, you may provide us with the following pieces of personal data about yourself or your customer:

• Name and job title
• Company name and address
• Contact information including email address
• Financial details for invoicing and payment processing purposes
• Names and phone numbers of other contacts in your organisation (e.g. delivery contacts)
• Information you believe is relevant and necessary to help us assist your product choice and the delivery of your order
• Whilst delivering our services we may also collect the phone number the call originated from.

We do not collect or process special category data or criminal offence data.

What The Rack People Ltd Does With The Information We Gather

We want to provide the best experience; we therefore gather this data to understand your requirements or to deliver your order. In particular, the information will be used for:

• Providing a tailored response to your enquiry with products most likely to interest you
• Internal audit purposes
• Improving our services
• Processing payments
• Periodically send promotional or market research communications which we think you may find interesting using the contact details which you have provided. We may contact you by email, phone, SMS or mail. The lawful basis on which we process data for this is by legitimate interest. As part of ensuring we are providing the right services to you we may use your data to pursue our legitimate interests in a way which would reasonably be expected as part of running our business and supplying services, this will be done in a way that does not materially impact your rights, freedom or interests. You may choose to opt out of any marketing communications at any time by emailing us at dpo@therackpeople.com or post to Data Protection Officer, The Rack People Ltd, G5 The Innovation Centre, Devon Way, Birmingham, B31 2TS.

Sharing Your Personal Data

The Rack People Ltd works with carefully selected Service Providers that carry out certain functions on our behalf to support the services provided to you. These include, for example, companies that help us with technology services, storing and combining data, processing payments. We only share personal data that enable our Service Providers to provide their services and it will always be shared in a secure and appropriate manner.

We may share personal data with other organisations in the following circumstances:

• If the law or a public authority says we must share the personal data;
• If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk);
• To an organisation we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you to. If the transfer or sale goes ahead, the organisation receiving your personal data can use your personal data in the same way as us; or To any other successors in title to our business

Your Rights And Choices Relating To Your Personal Data

Under data protection legislation, you have several rights regarding the use of your personal data, as follows:

The Right of Confirmation and Access

As a data subject you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. You also have the right to obtain from us free information about your personal data stored at any time, and a copy of this information. Furthermore, you have the right to obtain information as to whether personal data is transferred to a third country or to an international organisation. Where this is the case, you also have the right to be informed of the appropriate safeguards relating to the transfer.

Right to Rectification and Erasure (Right to be Forgotten)

You have the right to ask us to rectify inaccurate data or to complete any incomplete personal data that we hold.

You have the right to ask us to erase your personal data without delay where one of the statutory grounds applies, so long as the processing is not necessary. If you request us to erase your personal data, then this means that our business relationship will end as we cannot supply products without processing your data.

Right of Restriction of Processing/Right to Object

You have the right to restrict the processing of your personal data under certain circumstances, including if you have contested its accuracy and while this is being verified by us, or if you have objected to its processing and while we are considering whether we have legitimate grounds to continue to do so. You have the right to object, on grounds relating to your particular situation, at any time, to the processing of personal data concerning you.

Right of Data Portability

You also have the right for certain data you have given us to be provided to you in a structured and commonly used electronic format (for example, a Microsoft Excel file), so that you can move, copy or transfer this data easily to another data controller. You may also request that we transmit this data directly to another organisation where it is practical for us to do so.

Automated individual decision-making, including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling. The Rack People Ltd do not process any personal data in this way.

How to exercise your Rights

If you wish to contact us in respect of any of the Rights described above, please get in touch with us on 0121 725 1900 or via email at dpo@therackpeople.com. We will respond to your request free of charge and usually within one month.

How to complain about the use of your data

If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact us on the details below at the start of this notice and we will investigate the matter for you.

If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to the Supervisory Authority - Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You can find further information about the ICO and their complaints procedure here: https://ico.org.uk/concerns/

This notice was last updated on 24/05/2018. We may change this notice by updating this page to reflect changes in the law or our privacy practices. However, we will not use your Personal Data in any new ways without your consent. The most up to date version of the notice can be viewed on our website www.therackpeople.com