Privacy and Security

Background

This privacy notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you. It applies to all instances where we collect your personal data. We (Cordee Limited, Unit 11 Jacknell Road, Hinckley, LE10 3BS) have a designated Data Protection officer (DPO) who can be contacted if you have any queries.

What kinds of personal information about you do we process?

We only use your data to fulfil your online or telephone orders. The data we hold and use for this includes;

• Personal details such as your title, full name, contact details, email address and postal address.
• Financial details such as credit card details. On our website this is handled by a secure third party company – Stripe. No credit card details are held by Cordee Limited for online sales. Telephone order transactions are taken on a ‘streamline’ card machine – like the ones you find in shops. Your details are kept and deleted/disposed of securely at all times. We do not store the CVV 3 digit security number.

What is the source of your personal information & what do we use your personal data for?

We only receive personal information directly from you and only ask for information necessary to complete the transaction.

What are the legal grounds for our processing of your personal information?

Under the General Data Protection Regulation (GDPR) we are required to explain to you our legal basis for using your data. We use the data collected on this site only to complete a sale or open an account.

• Contract – when you commit to buying products from our site you are entering into a contract of sale with us for the product(s) and as such we need personal data from you to fulfil the contract of sale e.g. payment details, delivery address etc.
• Consent – if you are asking to open an account with us you are consenting that we need certain data from you to do this e.g. username/email address, ordering history etc.
• Legal obligation – we are obliged to retain a certain amount of data for compliance with UK law, for instance HMRC may ask for details of sales going back 7 years. Once there is no longer a legal obligation to hold data it is destroyed securely. 

When do we share your personal information with other organisations?

We don’t. The only other company involved in your transaction with us is Stripe and you are redirected to their secure payment page.

How and when can you withdraw your consent?

We only rely on consent to use personal data when it is explicit. It can be removed at any time by contacting us.

For how long is your personal information retained by us?

Unless we explain otherwise to you, we’ll hold your personal information based on the following criteria:

• For as long as we have reasonable business needs to
• For as long as we provide goods and/or services to you and then for as long as someone could bring a claim against us; and/or
• Retention periods in line with legal and regulatory requirements or guidance.

What are your rights under data protection laws?

Here is a list of the rights that all individuals have under data protection laws. They don’t apply in all circumstances. If you wish to use any of them, we’ll explain at that time if they are engaged or not. The right of data portability is only relevant from May 2018.

• The right to be informed about the processing of your personal information
• The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
• The right to object to processing of your personal information
• The right to restrict processing of your personal information
• The right to have your personal information erased (the “right to be forgotten”)
• The right to request access to your personal information and to obtain information about how we process it
• The right to move, copy or transfer your personal information (“data portability”)
• Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you
• You have the right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/.  

Contact Us

If you have any questions around this then please get in touch.

info@cordee.co.uk

01455 611 185

Cordee Limited,

Unit 11 Jacknell Road,

Dodwells Bridge Industrial Estate

Hinckley,

LE10 3BS