Privacy policy

Introduction

Hamworthy Heating Limited (referred to in this document as ‘Hamworthy Heating’, ‘data controller’, ‘we’, ‘our’ or ‘us’), are committed to protecting and respecting your privacy and the security of your personal data. We aim to be clear and transparent about what we do with the personal data we collect. (‘Personal data’ means any information relating to an identifiable person). This policy:

  • Sets out how we process your personal data. (‘Processing’ means anything we do with your data, and includes collecting, using, storing and deleting it);
  • Sets out where we might send your personal data to others, how we protect it and your privacy rights;
  • Only applies to our website, and if you leave our website, you will be subject to the policy of that other website provider.

Who we are and how to contact us

Hamworthy Heating are part of Groupe Atlantic.

With over 100 years’ experience in the UK heating industry, Hamworthy Heating are a market leader in the supply and servicing of commercial boilers and water heaters.

In respect of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, the data controller is Hamworthy Heating, Units 7&8, New Fields Business Park, Stinsford Road, Poole, BH17 0NF.

If you have any questions, requests or comments regarding this privacy policy, you can email dpo@groupe-atlantic.co.uk. You can also contact us at the above postal address.

 

The personal data we collect from you

We may collect personal data from you in the following circumstances, when you:

  • Fill in a form on our site https://hamworthy-heating.com. This includes information provided at the time of registering to use our site, subscribing to a service, requesting further services and completing the Contact Form;
  • Visit our site, we may automatically collect traffic data, location data, weblogs, browser, usage and other communications data;
  • Report a problem with our site;
  • Contact us by phone;
  • Become a customer. This may include: your name, postal address, email address, phone number, job title, reference information (e.g. invoice number) and any other information you give us;
  • Register a product warranty online or through our call centre;
  • Interact with us via social media;
  • Join a loyalty scheme;
  • Complete any surveys we send to you.

IP Addresses and Cookies

Like most websites you visit, we use cookies.

Click here if you would like more detailed information about how these cookies work and our policy regarding the information they collect.

How we use your personal data including legal basis

Website

When you contact us using the Contact Form, we may store your personal data. The legal basis for this is ‘legitimate interest’. Where we process your personal data under this basis, we perform an assessment that balances your rights and freedoms alongside our interests, to ensure that what we do with your personal data is what you would reasonably expect.

Products and Services

There are three legal bases under which we process personal data for product and services:

  • When you buy, and / or register a product. The legal basis for this is ‘performance of a contract’;
  • After the expiry of a warranty for example, we may also keep your personal data under the basis of ‘legal obligation’ re’ gas safety, and health and safety regulations;
  • Where we keep your personal data for the purpose of product recall requirements, the basis is ‘vital interests’.

Marketing

We may send you marketing messages by email, text message (sms), telephone or post about us and our products and offers. For email and SMS messages, the legal basis is consent. If you want us to stop sending you information by email or SMS, you can opt out at any time by selecting the ‘unsubscribe’ link on any email or sms we send you. You can also email us at dpo@groupe-atlantic.co.uk. or write to us at:

Data Protection Officer,

Hamworthy Heating Ltd,

National Avenue,

Hull,

HU5 4JB

Surveys

We may ask you to complete surveys for research purposes. The legal basis for these ranges from: Legitimate interest, performance of a contract, legal obligation and consent. Where consent is relied on, the method will be opt in, and you have the right to withdraw your consent at any time.

How we share your personal data

We may disclose your information to third parties if we:

  • Sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of those assets;
  • Have a duty to disclose your personal data to comply with any legal obligation. This includes sharing information with other organisations for the purposes of fraud prevention.

We are required to have written contracts in place with any third parties we use to process your personal data. This is to ensure that third party processors only act on the documented instructions of the data controller, and to ensure that both parties understand their responsibilities, especially in regard to safeguarding personal data.

Third parties we share your personal data with are listed below:

  • Aspray 24;
  • Avaya;
  • Google Analytics;
  • Health and Safety Executive;
  • Mailchimp
  • QlikView;
  • Adido
  • Digital Rocks
  • Novactive
  • Wolseley
  • BSS
  • Travis Perkins
  • Grafton
  • Smith Brothers
  • Cumbria Heating
  • Major Boiler Services
  • TIC Heating Solutions,
  • JCS Heating
  • MJS Heating Services
  • Allison Heating
  • McDowalls Modular Services
  • ByBox
  • DPD
  • PalletForce
  • UPS
  • Humber Sameday
  • Kingsley Consulting
  • RGB Network
  • HVAC Recruitment
  • GasSafe
  • Riello
  • Rubicon
  • Dovetail
  • Job Shop
  • Pettifors
  • Curvins
  • DPD
  • K&N Ltd
  • Sussex Transport
  • Ideal boilers
  • Groupe Atlantic
  • Ygnis
  • Gledhill
  • Restore Ltd (archiving)
  • Bluechip
  • Ihasco Ltd – on line safety training
  • Gas Safe
  • Construction Skills Certification Scheme (CSCS)
  • Zendesk

Where we store your personal data

Some data that we collect listed below, is transferred and stored outside the EEA. All other personal data is processed within the EEA.

Processed outside the EEA:

  • Google Tag Manager (website analytics) – EU-US Privacy Shield.

It will also be processed by staff who work for us and, or by one of our suppliers. This includes for example staff fulfilling your order, processing your payment details and providing support services. We take all necessary steps to ensure that your data is processed securely in accordance with this Privacy Policy.

How long we keep your personal data for

This depends on the type of personal data and what it is used for. We only keep personal data for as long as we have a legal basis to do so, and we adhere to the principle of data minimisation. This means that we only keep the minimum amount of information necessary for specific processing.

  • We keep personal data you provide by filling in forms on our site unless or until you unsubscribe. If you unsubscribe, we retain minimal information about you to ensure that we know you have unsubscribed;
  • Financial transaction data is kept for a maximum of seven years. This is due to legal obligations in relation to accounting and tax;
  • Where there is a contract between us, and in case of any legal action, personal data is retained for 8 years after the end of the contract.

How we secure personal data

We use a combination of physical, technical and organisational controls to safeguard your personal data. We are also committed to regularly testing, assessing and evaluating the strength of our controls environment.

  • Personal data is stored on secure servers;
  • Payment transactions such as card transactions are encrypted using SSL technology;
  • Emails are scanned for malware and viruses;
  • Data sent between our website and your browser is protected using industry standard protocol such as Transport Layer Security;
  • Data processed by third parties is safeguarded by contracts containing audit rights of inspection and warranties;
  • Personal data is stored within secured networks, and is only accessible by a limited number of people. Access rights and other policies and procedures forming part of our Information Security Management System (ISMS) further secure your information.

Where you have a password that enables you to access certain parts of our site, you are responsible for keeping the password safe, and we advise not disclosing your password to anybody else.

Our security procedures mean that we may occasionally request proof of i.d. before we are able to disclose personal information to you.

Unfortunately, the transmission of information via the Internet is not always secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site. Once received however, we will use our procedures and security to prevent unauthorised access.

Your Rights

You have certain rights (detailed below) under data protection law, and you can make requests to us about any personal data we hold about you. Requests can be in writing or verbal, and can be made to any part of our organisation. It will help us to complete your request more effectively however if you contact us at dpo@groupe-atlantic.co.uk.

We will also need to verify your identity. The Information Commissioner (ICO) have a page on their website that includes a template for a letter which can be used when sending requests to us (https://ico.org.uk/your-data-matters/your-right-of-access). We will respond within one month from the date of the request, and will not ordinarily charge a fee. If further copies are required, and / or the request is deemed excessive however, we may charge a reasonable fee. Your rights:

  1. Right to be informed. You have the right to be informed about the collection and use of your personal data, as detailed in this Privacy Policy;
  2. Right to access. You have the right to request a copy of the information we hold about you. If you want to request a copy you can contact us as detailed above;
  3. Right to rectification. We want to make sure that your personal information is accurate and up to date. You have the right to ask us to correct or remove information you think is inaccurate.
  4. Right to erasure. You have the right to ask us to delete your personal data. You can ask us to erase your personal data where there is no good reason for us to continue to process it. This will apply for example where the purpose we collected your information for is no longer relevant, or where you withdraw consent, if consent was given to start with;
  5. Right to restriction. You have the right to request the restriction or suppression of your personal data under certain circumstances. This means you can limit how we use your personal data. This might apply if for example you believe the processing is unlawful;
  6. Right to data portability. You have the right to ask for a copy of your personal data in a form that lets you copy or transfer it to another IT system in a machine readable way, and / or another organisation. This will apply where the processing is based on consent or a contract, and the processing is by automated means;
  • Right to object. You have the right to object to the processing of your personal data in some circumstances. You have the right to stop your data being used for direct marketing purposes;
  • Right not to be subject to automated decision making including profiling. Where such processing produces legal effects or similarly significantly affects;
  • Right to withdraw consent. Where our processing is based on your consent, you have the right to withdraw this consent at any time;
  • Right to complain to a supervisory authority. If you are concerned about how we are handling your personal data, you have the right to complain to the data protection authorities. In the UK, this is the Information Commissioners Office (click here https://ico.org.uk/make-a-complaint/handling/ to visit the ICO’s website).

 

Postal address of the ICO:

Customer Contact, Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Changes to our Privacy Policy

We keep our privacy policy under regular review and we will place any updates on this web page. When such a change is made, we will post a notification of change and date of current version. You have a responsibility to view this policy from time to time to be aware of any such change.

Cookie Policy

Introduction and the Cookie law explained

‘Cookies’ are a type of small file stored on your internet device (Laptop, PC, Phone or Tablet), and used by most websites in various ways to enable you to personalise your online experience. Cookies can also be used to track your activity and behaviour online. This provides website owners important insights into the quality of their services, allowing them to improve and better meet the needs of all their visitors.

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns.

We may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. They help us to improve our site and to deliver a better and more personalised service. They enable us to:

  • Estimate our audience size and usage pattern;
  • Store information about your preferences, and so allow us to customise our site according to your individual interests;
  • Speed up your searches;
  • Recognise you when you return to our site.

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

The Cookie Law is a piece of privacy legislation that requires websites to get consent from visitors to store or retrieve any information on a computer, smartphone or tablet.

It was designed to protect online privacy, by making consumers aware of how information about them is collected and used online, and give them a choice to allow it or not. 

Cookies used on this site

Analytics cookies

These cookies allow us to count page visits and traffic sources so we can measure and improve the performance of our site, using a service provided by Google Analytics.

Third party cookies

We may use a number of social media tools to enhance visitor interaction on our site. If you already use these platforms their cookies may be set through our website. Data may then be collected by these companies that enables them to serve up adverts on other sites that they think are relevant to your interests. If you do not use such platforms then our site will not place these cookies on your device.