This Privacy Policy explains the types of personal data we may collect about you, and how we handle that data and keep it safe. This policy is relevant to you wherever you are based, whether that is in the UK, the European Economic Area (EEA) or elsewhere in the world.
Elfab Limited is the ‘data controller’ of the personal data you provide to us. We are part of the Halma Group. This Privacy Policy explains how we use any personal information we collect about you.
For any inquiries or concerns regarding data protection, you can contact our Data Protection Officer at DPO@osecoelfab.com.
The GDPR (General Data Protection Regulation) applies to ‘personal data’ meaning any information relating to an identifiable person who can be directly or indirectly identified by that data. This includes corporate email addresses and phone numbers where they are specific to you as an individual.
The law on data protection sets out several different reasons that a company may have for collecting and processing your personal data. These include:
Contractual obligations
We may need your personal data to comply with our contractual obligations, for example, to deliver an order you have placed with us.
Legitimate interests
In certain circumstances will use your business contact data to pursue our legitimate interests in a reasonable way as part of the running of our business. We may send you email communications which we think will be of interest to you. We will only process your data provided that it does not materially impact your rights, freedom, or interests. Furthermore, we have conducted the necessary balancing and necessity tests and are unlikely to cause you unwarranted distress or harm.
We may collect information about you when you:
We may also collect your data via cookies when you visit our website.
osecoelfab.com only uses cookies which are required to offer you a suitable level of web performance and to track website usage in Google Analytics. By continuing to use our website you are giving us your implied consent to our cookie policy.
The cookies we use to deliver the Google Analytics service store information such as the time you visited the website and whether you have visited before. The cookies contain no personally identifiable information but they do use your computer’s IP address to know where in the world you are accessing the internet from.
If you would like to restrict the use of cookies, you can control this in your Internet browser.
We collect information directly from web site users when you voluntarily submit your personal information to us. At certain parts of our website, we may provide the opportunity for users to register for an event or order goods, join a mailing list, or request information. We will collect your full name, email address, telephone and mobile numbers.
If you have purchased products from us or if you have an ElfabTech account with us, we will collect your full name, email address, telephone, and mobile number. We may also from time to time review a user’s ElfabTech account activity so that we can understand user interactions.
For marketing purposes, we will only collect and/or use basic personal data about you such as your name, company name, address, email address, and telephone and mobile numbers.
Unless otherwise agreed with you, we will not collect any special categories of personal information about you (often known as ‘sensitive personal data’).
Processing orders, quotes or enquiries
We will use your data to process any orders you make by email or telephone.
We may need to pass your details on to a third party such as a courier service to supply or deliver the product you ordered.
We may keep your details for a reasonable period afterward in order to fulfill any contractual obligations such as providing proof of delivery, warranties, or technical support.
We will enter your data into our customer database so that our sales and technical support teams are aware of what you purchased and when, as well as any other contact you have had with us such as raising a query or complaint. They may use your data to provide you with any product support and technical information you require. We do this on the basis of our contractual obligations to you and our legitimate interests in providing you with the best possible services.
Marketing
Where you have an existing relationship with us, having in the past purchased or made an enquiry, or where we have obtained your business contact information indirectly (e.g. from publicly available sources) we will enter your data into our CRM so that we can send you communications, details of products, services and news that we believe will be of interest to you. We will make every effort to only contact you where we feel we can offer relevant products and will only contact you using your corporate contact details. We will do this as part of our legitimate business interests. You can opt-out of these marketing communications at any by time selecting the unsubscribe link that we include with every marketing email. Additionally, you can request that we remove your contact details by emailing DPO@osecoelfab.com.
We will monitor your response to marketing emails and may use this information for future communications with you.
We may use your data to send you customer survey requests to help improve our services. These survey messages will not include any promotional content.
Where we have obtained your business contact information and where you have not made a past purchase or enquiry, we will always provide you with full notification that we hold your details and an option to request that we remove your contact details within 30 days of their receipt. You can request that we remove your contact details by emailing DPO@osecoelfab.com or selecting the unsubscribe link that we include in the initial 30-day notification email.
We will only collect the personal data that we need in order to oversee the products and services we have agreed to provide you with or to send you relevant marketing information.
Please be assured that we will not sell or rent your information to any third parties.
Whenever we collect or process your personal data, we’ll only keep it for as long as necessary for the purpose for which it was collected.
At the end of that retention period, your data will be destroyed if it is no longer required for the lawful purpose(s) for which it was obtained. When you place an order, we’ll keep the personal data you give us so that we can comply with our legal and contractual obligations in relation to that order.
All the personal data we hold about you will be processed by our own staff based in the United Kingdom or overseas. We may share your data with other trusted third parties such as delivery couriers.
We will always take all reasonable steps to ensure that your personal data is processed securely and only provide the information that the third party requires to perform their specific services. If we stop using their services, any data held by them will either be deleted or rendered anonymous.
We may need to transfer your personal data between countries to enable us to supply the goods or services you’ve requested. Wherever you are located, your personal data may be stored on servers in the UK.
For individuals geographically located within the European Economic Area (EEA) we may sometimes need to share your personal data with third parties or suppliers outside that area such as our email services provider based in the USA. Where we do this, we always ensure that your data receives the same level of protection as if it were processed within the EEA.
For individuals geographically located outside the European Economic Area (EEA) we will treat your personal data in exactly the same way as if you were located within the EEA and follow the same processes and procedures.
We will treat your personal data with the utmost care and take all reasonable steps to protect it. Access to your personal data is strictly controlled and limited to the most relevant users only.
We regularly monitor our systems for possible vulnerabilities and to ensure that they are completely secure and up to date.
The new GDPR regulations provide you with the right to request:
You can find out more about your rights on the ICO website.
If you want to exercise these rights, you can contact us by emailing: DPO@osecoelfab.com or by writing to us at GDPR Team, OsecoElfab, Alder Road, North Shields Tyne & Wear, NE29 8SD.
If you are not satisfied with the way that we are processing your personal data, you may lodge a complaint with the ICO. Visit the ICO website to find out more. If you have concerns, call them on 0303 123 1113.
For individuals based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
You can stop receiving direct marketing by email or post at any time.
If you need any further information you can write to us at: DPO@osecoelfab.com, or GDPR Team, OsecoElfab, 12 Alder Road, North Shields Tyne & Wear, NE29 8SD.