Data controller

Dial A Carpet is committed to complying with the UK’s data protection law and the EU General Data Protection Regulation (GDPR) for the protection of personal data, as well as the principles of data security in the configuration of our services. If you have any questions about this privacy notice or how we use your personal data, please contact our Data Protection Controller as listed below.

Data protection controller
Simon Goodman
Dial A Carpet
3 Mescalero
Northampton NN2 6PE

Tel: 01604 499905

Email: info@dial-a-carpet.co.uk

What data we collect and process

In order to enter into an agreement with Dial A Carpet, we will collect, store and use elements of your personal data. The processing of this personal data is a contractual requirement and is necessary by Dial A Carpet in order to administer your account and to provide the products and services you have requested from us.

When you approach Dial A Carpet to engage in our services, we will ask for your consent to collect and process your personal data. Failure to provide this consent and/or personal data may mean we will be unable to execute the contract and could result in termination of our services.

When engaging Dial A Carpet you will usually need to disclose the following:

• Your title

• First name(s), surname or company name (including representation as the case may be)

• Address (street, street number, postal code, city and country/region)

• email address

• Telephone or mobile number

We will also monitor, record, store and use email or other electronic communications with you for training purposes so that we can check any instructions given to us and to improve the quality of our customer service.

Website cookies

When you access our website, temporary data about your visit is stored and processed in a protocol file for a certain period of time via the use of cookies. This information is anonymised and is used by us to better understand the use of our site, including the number of visitors we have, the pages viewed per session and time exposed to particular pages. This in turn helps us to provide you with a better experience, since we can evaluate the level of interest in the content of our website and tailor it accordingly.

The following data is collected and stored by Dial A Carpet until its automated deletion:

• IP address of the accessing computer/device

• Date, time and duration of your visit

• Name and URL of the accessed pages

• Identification data of the browser and operating system used

• Website from which the data was accessed

• Name of your internet access provider

We are going to use these cookies to deliver relevant marketing messages via digital media, in a timely fashion.

The nature and content of the information collected via cookies differs, as does the period for which this information is retained. In line with our data protection obligations, we will ensure that this retention period is not excessive, and that the data is only retained for as long as is necessary for the purposes for which it was collected.

If you wish to know more, or if you wish to identify the exact retention periods, please contact info@dial-a-carpet.co.uk.

The data listed above is only analysed for statistical purposes and for improving our internet presence, then it is deleted. We will not attempt to personally identify you from your IP address unless required to as a matter of law or regulation or in order to protect our rights, or other customers’ rights.

Most browsers automatically accept cookies, but you can set your browser options so that you will not receive cookies and you can also delete any existing cookies from your browser. Please note, you may find that some parts of the site will not function properly if you refuse cookies.

Why and how we use your personal data

We want to give you the best possible online customer experience. Data Privacy Law allows the processing of personal data as long as there is a legitimate interest to do so. In order to ensure we understand you, our customer being able to meet your needs and provide the best levels of customer service.

Improving our customer service

We may use your personal information in order to help improve our sampling, our services and the products we offer. This may include us asking you to participate in market research and surveys carried out by us and other organisations on our behalf. If we do contact you, you do not have to take part in these activities, and it will not affect your ability to use our services.

Links to third party websites

Please note that this data privacy notice only applies to Dial A Carpet and we are not responsible for, and have no control over, information that is submitted to or collected by third parties, such as those where our website may provide links and banner advertisements to third party sites. Since we do not control these websites, you are responsible for reviewing and abiding by the privacy policies of these third party sites to ensure they comply with the applicable data protection regulations.

How long we store your data

Where possible, Dial A Carpet will take steps to erase any personal data that is no longer necessary for the purposes for which it is collected or otherwise processed, or if you have withdrawn consent for its processing and retention.

As a general rule, if you currently have a contract or intend to enter into a contract with Dial A Carpet, we will store the data for a period of six years for compliance with our general legal obligations and for the exercise or defence of any legal claims.

Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. This right to erasure is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or removal of personal data includes:

• Where the personal data is no longer necessary for the purposes for which it is collected or otherwise processed

• Where you withdraw consent

• When you object to the processing and there is no overriding legitimate interest for continuing the processing

• Where the personal data was unlawfully processed (ie. otherwise in breach of the GDPR)

• Where the personal data has to be erased in order to comply with a legal obligation

In case a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be blocked instead of deleted.

Sharing of data with other data controllers

Here at Dial A Carpet we take your privacy seriously and the information we hold about you is confidential. We will only disclose it outside Dial A Carpet when:

• You have given us your consent to do so

• It is necessary for the performance of an agreement of which you will be made aware

• In order to obtain professional advice (eg. legal advice)

• We or others need to investigate or prevent crime (eg. to fraud prevention agencies)

• The law permits or requires it

• Regulatory or governmental body requests or requires it, even without your consent

• There is a duty to the public to reveal the information

Fraud prevention

If you give us false or inaccurate information and fraud (in any form) is identified, details will be passed to the fraud prevention agencies. We and other organisations may also share, access and use this information to prevent fraud and money laundering, for example when:

• Checking details on applications for credit and credit related or other facilities

• Managing credit and credit related accounts or facilities

• Recovering debt

• Checking details of job applicants and employees

In addition, law enforcement agencies may access and use this information.

Protecting your privacy

In order to protect the personal data collected from you by Dial A Carpet against accidental or deliberate manipulation, loss, destruction or the access of unauthorised persons, technical and organisational security measures are constantly improved as part of our technological development. In addition, our employees, subcontractors and other support staff are obligated to observe confidentiality and data privacy.

Connection to our website is secured via a SSL (Secure Sockets Layer) and it is encrypted using a TLS (Transport Layer Security) connection. Wherever possible, we have tried to create a secure and reliable website for our users. However, you recognise that your use of the Internet and our website is entirely at your own risk and we have no responsibility or liability for the security of personal information transmitted via the Internet.

All passwords and usernames allocated to you must be kept secret and must not be disclosed to anyone without our prior written authorisation. You must not use any false identity in email or other network communications, and you must not attempt or participate in the unauthorised entry or viewing of another user’s account or into another system.

You must not use the services and/or network systems or any part thereof for fraudulent activities, or to breach another organisation’s security (cross-network hacking). This is an illegal act and prosecution under criminal law may result. You must not use any computers, computer equipment, network resources or any services provided by us for any illegal purpose, or for accessing, receiving or transmitting any material deemed illegal, indecent, offensive or otherwise unacceptable under UK law. Network traffic is monitored from time to time for the purposes of backup and problem solving and in order to ensure that you are not misusing any of the services provided to you.

Breaches

If at any time we become aware that your data has been compromised, or that a breach of our systems and controls has occurred, which has an impact on the security of your data, we will notify the Information Commissioner’s Office, and you, without undue delay.

Subject access requests

You have the right to request access to a copy of the personal information that we hold about you. This is also known as a ‘Subject Access Request’. This information is provided to you free of charge. However, we can refuse to respond when a request is manifestly unfounded, excessive or repetitive.

We will provide this information in a structured, commonly used and machine-readable form such as a CSV file. This allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

If you would like to submit a Subject Access Request, please contact our Data Protection Controller in writing.

We will respond to your request without delay and at the latest, within one month of receipt of your request.

Rectifying or updating personal data

If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to rectification. Where possible, we will also inform any third parties to whom we have disclosed the personal data in question to so they can rectify their records. We will typically respond to your request within one month, although this can be extended by two months if your request for rectification is complex.

Withdrawing consent

You have the right to withdraw your consent for us to collect, process and store your data at any time. If you wish to withdraw your consent, please confirm this in writing to our Data Protection Controller.

Your right to complain

If you have a complaint about any aspect of data protection or if you feel your privacy has been breached by us, we would like to hear from you. To help us investigate and resolve your concerns as quickly as possible, please contact our Data Protection Controller.

If you are unhappy with the final response you have received from Dial A Carpet, you have the right to complain to the supervisory authority, the Information Commissioner’s Office (ICO) within three months of your last meaningful contact with us. You can call the ICO on 0303 123 1113 or by visiting their website: https://ico.org.uk/.

Changes to this Privacy Policy

Due to the further development of our website, government regulations or the implementations of new technologies, this policy will be reviewed, and may change, from time to time. Dial A Carpet reserves the right to change this data protection information at any time with effect for the future. The revised policy will be posted to this page so that you are always aware of the information we collect, how we use it and under what circumstances we disclose it. We therefore recommend you read the current data protection information again from time to time.

Dial A Carpet | Privacy Policy version 1.1 | May 2019