Legal / RCL Connectors & Cables Ltd
GDPR Policy
Data protection notifications for our clients, suppliers and email correspondents.
01 Introduction
RCL Connectors & Cables Ltd is committed to protecting and respecting your privacy. These notifications set out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read them carefully to understand our practices and how we will treat your data.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the controller of your personal data. Our details are:
Company no. 05494776
Redruth, Cornwall TR15 1FU
[email protected]
Our general Privacy Policy covers visitors to this website and anyone who contacts us through it.
02 Notification for clients
| Data we process | Contact details; banking details. |
|---|---|
| Sources | You (data you provide); us (data we generate, such as order records). |
| Lawful basis | Our contract with you to provide the contracted goods and services; our legal obligations, including record keeping under the Finance Act 2008; our and your legitimate interest in carrying on business together. |
| If we cannot process it | We would not be able to continue providing the contracted services, or not to the same standard. |
| Retention | Payment-related data is kept for 7 years to meet our record-keeping obligations under the Finance Act 2008. Other data may be kept for up to 7 years from the end of the contract in case of queries, unless you ask us to delete it sooner. |
| Recipients | Our software and IT providers; competent authorities; solicitors and other professional advisers (at your request). |
| How we use it | To communicate with you and to provide the contracted goods and services. |
03 Notification for suppliers
This applies to sole traders and to individuals who are our point of contact at a supplier.
| Data we process | Contact details; payment (banking) details. |
|---|---|
| Sources | You (data you provide); your employer. |
| Lawful basis | Our contract with you, if you are a sole trader; our legitimate interest in managing our contract with your employer, if you are a point of contact. |
| If we cannot process it | Sole traders: we might not be able to continue purchasing from you, or might reduce the scope of what we purchase. Points of contact: none. |
| Retention | For the duration of our contract, or up to 7 years from the end of our relationship with you or your employer where we have a legal obligation to keep it. |
| Recipients | Our software and IT providers. |
| How we use it | To communicate with you and to manage our contract with you or your employer. |
04 Notification for email correspondents
| Data we process | Your email address is included in any email we receive from you, and storing the email stores it; any other personal data in the email is also stored. Our email software may extract your address automatically, and our staff may add your name and possibly your phone number, job title and place of employment. |
|---|---|
| Sources | You (data you provide); other email correspondents. |
| Lawful basis | Our legitimate interest in communicating by email in the normal course of business. |
| If we cannot process it | We would not be able to receive email from, or send email to, you. |
| Retention | Most email correspondence is kept for up to 7 years unless you ask us to delete it sooner; depending on its nature, we may need to keep it for 7 years to meet legal obligations (for example under the Finance Act 2008). |
| Recipients | Our email service provider (Microsoft). |
| How we use it | To communicate with you. |
05 Disclosure of your information
We may occasionally be required to disclose information to additional third parties. We will do so only when, and to the extent that, we have a legal obligation to. These may include:
- law enforcement (by warrant or subpoena);
- courts, tribunals or other judicial bodies;
- the National Crime Agency, in the case of suspected money laundering.
06 Transfers outside the UK
We store and process your data in the UK and the European Economic Area. Where a software or cloud service provider processes data outside the UK, we will only allow the transfer where adequate protections are in place - UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum - so that your rights and freedoms are protected and UK data protection law is not undermined.
07 Your rights
You have the following qualified rights regarding your personal data:
- Access - ask us for a copy of the data we hold about you.
- Rectification - ask us to correct inaccurate data.
- Erasure - ask us to erase your data.
- Restriction - ask us to stop processing your data but keep it.
- Portability - ask us to provide your data to you, or to a party you nominate, in a commonly used, structured, machine-readable format (clients and suppliers).
- Objection - object to us processing your data.
You can exercise these rights at any time by emailing [email protected]. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).
08 Changes and contact
Any changes we make to these notifications will be posted on this page. Questions, comments and requests are welcome and should be sent to [email protected].