What we do with the information we collect off you
Purpose of this Policy
This policy describes how we collect and use personal data about you, when you visit our website, or at any other time you provide us with your personal data, in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 1998 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (‘Data Protection Legislation’).
Please read the policy carefully to understand our practices regarding your personal data and how we will treat it. This policy applies to customers (whether a consumer or business trader), suppliers of goods and services to us, business contacts and visitors to our website.
Methven UK Ltd (“Methven”, "we", “us”, “our” and “ours”) is a company registered in England and Wales (company registration no. 06290166) whose registered office is at Eversheds House, 70 Great Bridgewater Street, Manchester, M1 5ES ("Methven"). www.deva.org.uk (our website) is owned and operated by Methven UK Ltd.
When would we collect personal data about you
We use different methods to collect personal data from and about you, including:
- when you apply or register for an account, whether by post or on our website;
- when you place an order with us, whether by ;
- when you register products for warranty purposes;
- when you visit our website;
- when you place an order to us for direct delivery;
- when you contact us by email, telephone, fax, post or social media (for example when you have a query about our products);
- when you contact us using our website contact form;
- when you request marketing material to be sent to you;
- when you enter a competition, promotion or survey;
- when you supply us with goods and services; and
- from third parties or publicly available resources (for example, credit reference agencies, Companies House).
What personal data we may collect from you
We may collect and process the following personal data about you:
- your name;
- your address;
- your e-mail address;
- your telephone number;
- debit/credit card details if you place an order (note that these are collected and stored by our payment provider and Methven does not have access to any debit/credit card details);
- our correspondence and communications with you;
- information about any complaints and enquiries you make to us;
- information from research, surveys, and marketing activities;
- information we receive from other sources, such as publicly available information (for example Companies House or credit reference agencies)
- details of transactions you carry out through our website and of the fulfilment of your orders; and
- details of your visits to our website.
The web server also automatically collects certain information which relates to every visitor to our website, including:
- your IP address (where available), operating system, browser type and the geographical location of your computer, for system administration purposes.
- We may also collect information such as products viewed and searched for, the average time on the website, top visited pages and page response times. This is statistical data about browsing actions and patterns and does not identify you as an individual.
What we do with your personal data
We will hold, use and disclose your personal data for our legitimate business purposes including:
- To process your orders and carry out our obligations arising from the contract between you and us to provide you with the products and services you request from us;
- to carry out our obligations arising from any agreements entered into between our customers and us (which will most usually be for the provision of our services) where you may be a subcontractor, supplier or direct delivery customer;
- to monitor website usage and provide statistics to third parties for the purposes of improving and developing our website and the services we provide via our website. Please note that any such statistics and/or information provided to third parties will be made on a confidential basis and will not include information that can be used to identify any individual;
- to help keep our website safe and secure;
- to answer your queries;
- to provide you with information related to our products and our business which we feel may interest you, provided you have consented to be contacted for such purposes;
- to seek your thoughts and opinions on our products and the service we provide; and
- to notify you about any changes to our business.
How we share your personal data
In certain circumstances we will share your personal data with other parties. Details of those parties are set out below along with the reasons for sharing it:
- Business partners, suppliers and sub-contractors: for the performance of any contract we enter into with you;
- Members of our group, including our subsidiaries, our ultimate holding company and its subsidiaries: as certain processing functions within the group are centralised;
- Trusted third parties: In order to provide certain services, we will share your personal data with third party service providers such as IT infrastructure companies, Analytics and search engine providers and email logistics providers, that assist us in the maintenance, improvement and optimisation of our website. We ensure that any third-party service we utilise complies with strict data protection standards.
We may also disclose your personal data to third parties:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
- If we’re under a legal duty to comply with any legal obligation or in order to enforce or apply our terms and conditions; or
- If we need to disclose it to protect our rights, property or safety of our customers or others, including the exchange for information with other companies, organisations and/or governmental bodies for the purposes of fraud protection and credit risk reduction.
All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data. We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
Where we store your personal data
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for one of our group companies or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long we hold your personal data
We will only retain your personal data for as long as is necessary for the purpose or purposes for which we have collected it. The criteria that we use to determine retention periods will be determined by the nature of the data and the purposes for which it is kept.
When assessing what retention period is appropriate for your personal data, we take into consideration:
• the requirements of our business and the services provided;
• any statutory or legal obligations;
• the purposes for which we originally collected the personal data;
• the lawful grounds on which we based our processing;
• the types of personal data we have collected;
• the amount and categories of your personal data; and
• whether the purpose of the processing could reasonably be fulfilled by other means.
Where we need to use your personal data for another reason, other than for the purpose for which we collected it, we will only use your personal data where that reason is compatible with the original purpose.
Should it be necessary to use your personal data for a new purpose, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular website. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the information you choose to share with us. You can choose to accept or decline cookies. Please note that if you set your computer to not accept cookies, there may be certain features/areas on our website that you may not be able to use. You block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies.
Your rights relating to your personal data
You have certain rights in relation to personal data we hold about you. Details of these rights and how to exercise them are set out below:
- Right to Access. You have the right at any time to ask us for a copy of the personal data about you that we hold, and to confirm the nature of the data and how it is used.
- Right to rectification. If personal data we hold about you is not accurate, or is out of date or incomplete, and requires amendment or correction you have a right to have the data rectified, updated or completed.
- Right to Erasure. In some circumstances, you have the right to request that personal data we hold about you is erased e.g. if the data is no longer necessary for the purposes for which it was collected or processed or our processing of the data is based on your consent and there are no other legal grounds on which we may process the data.
- Right to Restrict Processing. In some circumstances you have the right to restrict our use of your personal data, such as in circumstances where you contest the accuracy of the data; processing is unlawful but you oppose erasure; we no longer need the data for the purposes of our processing, but you require the data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection.
- Right to Object to Processing. In some circumstances, you have the right to object to our processing of your personal data, e.g. if we are processing your data on the basis of our legitimate interests and there are no compelling legitimate grounds for our processing which override your rights and interests.
You also have the right to object to use of your personal data for direct marketing purposes. If you make such an objection, we will cease to process your personal data for this purpose.
- Right to Data Portability. In some circumstances, you have a right to receive any personal data that we hold about you in a structured, commonly used and machine-readable format. You can ask us to transmit that data to you or directly to a third-party organisation.
- Right to complain to a supervisory authority. You have a right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. Details of how to contact the ICO can be found on their website: https://ico.org.uk
- Right to withdraw consent. To the extent that the legal basis for our processing of your personal data is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
If you want to exercise any of the above rights, please email us at email@example.com or using the contact details in the Contact Us section below.
You can exercise your rights free of charge.
Most of the above rights are subject to limitations and exceptions. We will provide reasons if we are unable to comply with any request for the exercise of your rights.
If you have any questions regarding this notice or if you would like to speak to us about the manner in which we process your personal data, you can contact us:
- by email, at firstname.lastname@example.org
- by post, by writing to:
Methven UK Ltd
Methven Experience Centre
3/3A Stonecross Court
Yew Tree Way
- using our website contact form;
- by telephone, on 0800 195 1602;
- by fax, on 08444 068 690.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our website, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any personal data which you provide whilst visiting such websites and such websites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.