GDPR, Privacy and Cookies Policy
Cookies
A cookie is a tiny text file stored on your computer when you visit certain webpages. At business-furniture-direct.co.uk we use cookies to keep track of what you have in your basket, and to remember you when you return to our site.
Cookies can't harm your computer. We don't store personally identifiable information such as credit card details in cookies we create, but we do use encrypted information gathered from them to help improve your experience of the site. For example, they help us to identify and resolve errors, or to determine relevant related products to show you when you're browsing.
We do have relationships with carefully-selected and monitored suppliers who may also set cookies during your visit to be used for remarketing purposes - in other words to show you different products and services based on what you appear to be interested in. If you'd like to opt out, please go to the Network Advertising Initiative website.
How does Business Furniture Direct use cookies?
Our website uses both persistent and session cookies:
Session cookies are used in order to allow customers to carry information across pages of the website, without having to re-enter such information. These cookies delete themselves automatically when you leave a website and go to another, or when you shut down your browser.
Persistent cookies are used to allow the website to recognise users when they return to the site and to remember certain information about their preferences. These cookies are cookies which stay on your computer until they expire or, until you "manually" delete them.
The main purpose for which cookies are used are for technical purposes essential to effective operation of website, particularly in relation to on-line transactions.
How do I disable cookies?
If you want to disable cookies you need to change your website browser settings to reject cookies. How to do this will depend on the browser you use and we provide further detail below on how to disable cookies for the most popular browsers:-
For Microsoft Internet Explorer:
1.Choose the menu “tools” then “Internet Options”
2 Click on the “privacy” tab
3 Select the setting the appropriate setting
For Mozilla firefox:
1.Choose the menu “tools” then “Options”
2 Click on the icon “privacy”
3 Find the menu “cookie” and select the relevant options
For Opera 6.0 and further:
1.Choose the menu Files”> “Preferences”
2 Privacy
Safari
1.Click on the Cog icon at the top of your browser window and select the 'Preferences' option
2.Click on 'Security', check the option that says 'Block third-party and advertising cookies'
3.Click 'Save'
What happens if I disable cookies?
This depends on which cookies you disable, but in general the site may not operate properly if cookies are switched off.
Privacy
We take your privacy seriously.
We are committed to protecting your privacy. All information provided by you to process your order or to make enquiries is used solely for that purpose unless we have your consent to do otherwise. The site uses a secure server to protect this information and our systems are not accessible by unauthorised personnel as required by the Data Protection Act.
Your use of this website and its facilities signifies your consent to the collection of information required to process your order or enquiry to the extent of administering the payment and executing your delivery, providing you with the best possible service.
When you register your details with us, we may from time to time use them to advise you of special offers or promotions. Please advise us if you do not wish this to happen.
Your details will not be disclosed to any third parties.
GDPR Policy
The below should cover the majority of your questions regarding preparation & compliance. If you require specific information not covered by the below then please email us at sales@b-f-d.co.uk
As part of our compliance with GDPR we have made the following changes:
Performed an Information Audit
Allocated a DPO
Fully trained staff in GDPR requirements
Performed a full security audit on customer data
Updated website to ensure full compliance regarding website wording
Regarding individuals contact us for a Subject Access Form
Description of processing activities:
Customer Name & Address used internally for delivery
Customer name and address sent to third parties for delivery e.g. DPD, UPS, UK Mail
Customer mobile number used for delivery confirmation
Customer Email Address used for order detail confirmation & delivery confirmation
Data stored in SQL & MySQL databases
Accounts / customer invoices partially printed & mailed (if appropriate).
Printed invoices filed
Customer email address used for direct marketing emails if subscribed to mailing list
Data Subject Records:
Customer Name
Customer Address
Customer Phone Number(s)
Customer Email Address
Customer IP Address
Categories of data:
Identity (name)
Tracking (IP Address)
Communication (email, address)
Special Categories of data:
Not applicable – we do not hold or process any special categories of data.
How Data is Held:
Data is stored securely on-site and externally through dedicated servers with multiple levels of redundant and secure hardware & software. Security measures include but are not limited to: on-site biometric security, EV SSL security on our website, network firewalls, dual redundant hardware, password protection and encryption of sensitive server files.
Customers Data Rights:
You have the right of access, right to rectification and data quality, right to erasure, right to restrict processing, right to data portability, right to object, rights related to automated decision making including profiling. Where necessary we many need to delay the deletion of your order details as we are required for HMRC regulations and/or VAT purposes to store your company data for a maximum of 7 years.
How We Process Data:
When necessary we share delivery address, customer name and telephone number(s) with trusted suppliers and delivery/installation teams (which may include sub-contractors). We will use your email address to send an order confirmation email and a VAT invoice. We will use your phone number(s) for customer service communication. We will never cold call/email you and we will never share your information with third parties unless necessary to complete your order.
Marketing Emails:
Our existing customer database is double opt-in only. Our bought-in marketing lists have assurances about the origins and accuracy to ensure that they were compiled fairly and lawfully. You can unsubscribe by contacting us at sales@b-f-d.co.uk or by clicking unsubscribe in any communication from us.
Third Party Ordering:
If ordering on behalf of a third party you give us permission to use their delivery details, solely for the fulfilment of the order.
Subject Access Requests (SAR):
If you would like to request the data we hold about you, you can do so by contacting us at sales@b-f-d.co.uk or calling 01242 239786. We currently do not charge for this service. We endeavour to reply to SAR within a timely manner as described in GDPR.
In the case of a breach:
Our data breach policy is available on our website and is summarized below:
The breach would be identified.
The breach would be classified.
Our DPO and GDPR officers would be contacted.
The number of customers affected would be identified.
The decision would be taken as to whether or not the breach would result in a high risk to the rights and freedoms of individuals.
If the answer to the previous step is YES, the customers affected and the ICO would be notified.
