Privacy | Supply Run

Supply
Run

The policy: This privacy policy notice is served by Supply Run Ltd under the website; https://supplyrun.co.uk. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information through the business and while you browse or use this website. If you do not agree to the following policy you may wish to cease viewing / using this website, and or refrain from submitting your personal data to us.

Policy key definitions:

"I", "our", "us", or "we" refer to the business, Supply Run Ltd.
"you", "the user" refer to the person(s) using this website.
GDPR means General Data Protection Act.
PECR means Privacy & Electronic Communications Regulation.
ICO means Information Commissioner's Office.
Cookies mean small files stored on a users computer or device.

Key principles of GDPR:

Our privacy policy embodies the following key principles; (a) Lawfulness, fairness and transparency, (b) Purpose limitation, (c) Data minimisation, (d) Accuracy, (e) Storage limitation, (f) Integrity and confidence, (g) Accountability.

Processing of your personal data

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

We are registered with the ICO under the Data Protection Register, our registration number is: ZA884802.

Lawful basis: Consent
Where our purpose for processing is: Providing a newsletter.
Which is necessary because: Without your consent we are not permitted to send you marketing material.
We process your information in the following ways: Your consent is stored with your user profile on our site and can be changed at any time. There are unsubscribe links on all our emails. When we send a marketing email we will use your consent flag.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: We do not share your information with third parties.
Lawful basis: Contract
Where our purpose for processing is: Providing quotes and invoices and managing payments.
Which is necessary because: We need to provide to you in writing, and for our own personal records, details of the enquiries you have made, and associated payments.
We process your information in the following ways: We store these in our database. When you visit our site the records are loaded. From time to time we use this information to improve our services. We periodically backup this data.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: We do not share your information with third parties.
Lawful basis: Legal obligation
Where our purpose for processing is: Fulfilling our financial reporting and tax liabilities.
Which is necessary because: We legally must provide financial reports and pay tax.
We process your information in the following ways: We amalgamate sales results from our customers into our financial reporting and tax reporting, and send this information to HMRC, Companies House, and the tax office as and when required.
Data retention period: We will retain this information for as long as is required under law.
Sharing your information: By legal requirement, we must share financial information with government agencies, but no personal information.
Lawful basis: Legitimate interests
Where our purpose for processing is: Product sourcing for your enquiries.
Which is necessary because: In order to source products we must engage with third parties with details of your order. We only share product details, never personally identifiable information.
We process your information in the following ways: Product information is stored within our database. We will use these records to request goods from our suppliers, normally via online purchase on their sites, or via direct contact using email or phone.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: By design, we must share product information with third parties, but no personal information.

If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.

Your individual rights

Under the GDPR your rights are as follows. You can read more about your rights in details here;

the right to be informed;
the right of access;
the right to rectification;
the right to erasure;
the right to restrict processing;
the right to data portability;
the right to object; and
the right not to be subject to automated decision-making including profiling.

You also have the right to complain to the ICO [ico.org.uk] if you feel there is a problem with the way we are handling your data.

We handle subject access requests in accordance with the GDPR.

Internet cookies

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged into the website where applicable, to display relevant adverts or content, referred you to a third party website.

Some cookies are required to enjoy and use the full functionality of this website.

We use a cookie control system which allows you to accept the use of cookies, and control which cookies are saved to your device / computer. Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device, please see your web browser options.

Cookies that we use are;

cconsent - to track your cookie consent preferences
_ga - google analytics
_gid - google analytics
PHPSESSID - to maintain your online session
Livechat - cookies related to our onsite chat functionality
Stripe - cookies related to our payment provider

Email Newsletter

This website operates an email newsletter program, used to inform subscribers about products and services supplied by this website. Users can subscribe through an online automated process should they wish to do so but do so at their own discretion. Some subscriptions may be manually processed through prior written agreement with the user. No personal details are passed on to third parties nor shared with companies / people outside of the company that operates this website.

Email marketing campaigns published by this website or it's owners may contain tracking facilities within the actual email. Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity.

This information is used to refine future email campaigns and supply the user with more relevant content based around their activity.

In compliance with UK Spam Laws and the Privacy and Electronic Communications Regulations 2003 subscribers are given the opportunity to unsubscribe at any time through an automated system. This process is detailed at the footer of each email campaign. If an automated unsubscription system is unavailable clear instructions on how to unsubscribe will be detailed instead.

Social Media Platforms

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

Shortened Links in Social Media

This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls.

Users are advised to take caution and good judgment before clicking any shortened urls published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine urls are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.

Data security and protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.

Fair & Transparent Privacy Explained

We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.

Email marketing messages & subscription

Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the "Processing of your personal data" above.

Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.

Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. If you need to update your email subscription you can do so on the Your Profile page, once you're signed in Unsubscribe.