The Sack Filling and Robot Palletising Company Ltd

We are a company registered in England and Wales, our company no. 07705339, our registered office is Bury Lodge, Bury Road, Stowmarket Suffolk IP14 1JA.. For the purposes of data protection law, we will be a controller of the personal data we hold about you. This means we make decisions about how and why your information is used, and have a legal duty to make sure that your rights are protected.

Data we collect and how it is used

Data you give us

When you fill out forms on our Website or our Sales Platform, we will receive the personal data they contain. This information may be provided at the time of registering to use our Sales Platform, concluding a transaction, requesting our services or requesting information about what we do. If you contact us, we may keep a record of that correspondence.

Details of transactions you carry out through our Sales Platform, the fulfilment of your orders, and any communications by telephone, in person or by any other means relating to those transactions will also be stored.

When you have agreed to set up a direct debit arrangement, the information you have given to us is passed to our own bank for processing according to our instructions, a copy of this is stored.

If you send us personal data in connection with a job application, we may keep this until the candidate is selected and then those details are destroyed or removed from our system.

If you have interacted with us via social media e.g. by liking our Facebook page, or connecting with us on LinkedIn, we may notify you of new developments or installations.

Data we obtain about you through our work

Technical data

When you visit our site or we visit yours, we may collect technical data about your services, operation and in some case customers, this data is never made public and we never allow other clients to identify you from such data.

Special Category Data (also known as sensitive personal data)

We do not actively collect any Special Categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. If we do obtain any such sensitive personal data by chance when collecting the assets of an insolvent company, we will not actively process this in any way, unless explicitly instructed to do so by an insolvency practitioner.

Cookies

A cookie is a small file of letters and numbers that we store on your browser or device if you agree.

We use the following types of cookies:

Strictly necessary cookies.

These are cookies that are required for the operation of our Website and Sales Platform. They include, for example, cookies that enable you to log into secure areas of our Website or bid on auctions.

Analytical/performance cookies

These cookies allow us to recognise and count the number of visitors and to see how visitors move around our Website or Sales Platform. This helps us to improve the way both sites work, for example, by ensuring that users are finding what they are looking for easily.

Social Media Sharing Buttons

We do use sharing buttons in order to make it easier for you to follow our content via your social media pages. These buttons are third-party cookies which are placed onto your device when you visit our Website. The social networks which place such cookies are Twitter and LinkedIn. Even without you clicking on the relevant sharing button, these sites are aware that you have visited our Website, and may use this information when building their profile of you, and deciding what advertisements you might like to see. You should check the respective policies of each of these social networks to see how exactly they use your personal data. This process does not involve us collecting or storing any of your personal data ourselves.

You can refuse to accept all or some cookies by modifying settings within your browser (for guidance on how to do this visit http://www.aboutcookies.org/). However, if you block strictly necessary cookies, you may be unable to access certain parts of our Website.

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

** where we need to perform a contract with you e.g. to fulfil your order when you purchase something.** where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (see the “Legitimate Interests” section below); and
** where we need to comply with a legal or regulatory obligation.

Generally we do not rely on consent as a legal basis for processing your personal data other than in order to inform you of upcoming sales or events by e-mail where you are an individual, sole trader or unincorporated partnership. In those circumstances, you have the right to withdraw consent to marketing at any time by contacting us using the details set out in section 1 of this policy.

We may use personal data held about you in the following ways:

Providing you with information, products or services that you request from us or which we believe would interest you in a way that is targeted and relevant
Ensuring that content from our Website is presented in the most effective manner for you and for your device;

Responding to queries you send us;

Carrying out our obligations arising from any contracts entered into between you and us, or between us and our clients; or Selling or purchasing machinery or services.

When contacting you for the above purposes we may do so by phone, post, email or other electronic means, unless you tell us otherwise.

Your data will be treated in accordance with applicable data protection law. It will not be disclosed to anyone outside of The Sack Filling Company.

Legitimate interests

We may rely on legitimate interests to process your personal data, provided that your interests do not override our own. This is particularly true where we obtain your personal data from an insolvent company as part of the insolvency process.

Where we rely on legitimate interests, these interests are:

** Keep our records updated and to study how our Website, Sales Platform and other services are used.
** Assist insolvency practitioners to carry out their legal duties;
** Administer and protect our business and web presence (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting); and

Keeping your Personal Data Safe

We employ a variety of physical and technical measures to keep your personal data safe and to prevent unauthorised access to, use or disclosure of it. Electronic data and databases are stored on secure servers in the United Kingdom and we control who has access to them (using both physical and electronic means). These means include an electronic firewall and other protection measures that involve virus scanning, installation of security patches, vulnerability testing, backup and recovery planning, security audits and other steps designed to improve data protection. The server software (SSL) encrypts all the data you supply us. Our staff receive data protection training and we have a set of detailed data protection procedures which they are required to follow when handling personal data.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Website or Sales Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. We cannot absolutely guarantee the security of the internet, external networks, or your own device, accordingly any online communications (e.g. information provided by email or through our Website) are at your own risk.

Storage and Retention

Where we store your personal data

The data that we collect from is not transferred to, and stored at, a destination outside the United Kingdom and the European Economic Area (“EEA”). We will take all steps reasonably necessary to ensure that any personal data transferred outside the UK or the EEA is treated securely and in accordance with applicable data protection laws.

How long we keep it

We collect and store personal data for purposes connected with our business. As such, we will only retain your personal data for as long as necessary for those purposes. We verify our records periodically and if we learn that you are no longer involved with a business that is in our database, we will erase your personal data.

We keep information which forms part of our business record for a minimum of six years. That is because we may need it in some way to support a claim or defence in court. That is also the period within which our tax collecting authorities may demand to know it. We may retain certain records for longer than 6 years in a few specific cases, as set out below:

**we retain personal data about buyers of specialist items for 10 years in case we wish to enquire about the value of a similar asset in the future; and
**we retain buyer’s details for certain specialised industries in order to inform them about similar sales as they arise.

Disclosing Your Personal data

We may need to disclose your personal data to third parties. Where we do so, any such disclosure will be on the basis that these third parties are required to keep the data we give them confidential and secure, and will not use it for any other purpose than to carry out the services they are performing for us. This section sets out the circumstances in which we may disclose your personal data, and what categories of third party may receive it to process transactions, administer events or communicate with you.

We may disclose your personal information to:

** Order fulfilment companies we use to send out goods when they are purchased e.g. Royal Mail;
** Sub suppliers when completing your orders.

Disclosures Required by Law

We are subject to the law like everyone else. We may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order.

We also may need to retain and disclose certain personal data about you to regulatory authorities and to appropriate agencies to conduct anti-money laundering and trade sanction checks and to assist with fraud prevention. We will disclose this information as is required by law.

Your rights

We want you to remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:

** Where your personal data is processed on the basis of consent, the right to withdraw that consent;
** The right to confirmation as to whether or not we are holding any of your personal data and, if we are, to obtain a copy of it;
** From 25 May 2018, the right to have certain data provided to you in a portable electronic format (where technically feasible);
** The right to have inaccurate personal data rectified;
** The right to object to your personal data being used for marketing or profiling, or on the basis of our or a third party’s legitimate interests;
** The right to restrict how your personal data is used; and
** The right to be forgotten, which allows you to have your personal data erased in certain circumstances (though this is not an absolute right and may not apply if we need to continue using it for a lawful reason).

If you would like further information about any of your rights or wish to exercise them, please contact us.

Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so (for example, because the information no longer exists or there is an exception which applies to your request).

If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you should contact the UK Information Commissioner’s Office, which oversees data protection compliance in the UK. Details of how to do this can be found at www.ico.org.uk.

Updating this Policy

We may update this Policy at any time. When we do, we will post a notification on the main page of our Website and we will also revise the updated date at the bottom of this page. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the personal data we hold.

This policy was last updated on 14 May 2018