1.Introduction
We take pride in ensuring the protection of our customers’ sensitive data. This document details your privacy rights as a customer, or stakeholder, of MY ReFactory Ltd. These rights are also in compliance with GDPR law in effect as of 25th May 2018.
2. How we acquire your personal data
External Acquisition
It is more than likely if you are reading this document that we have acquired your personal data either via the Contact Us form on our website or via an online order you have placed on refactory.com.
If that is the case, the only personal data we will have of yours will be what you provided at the initial point of contact. The information we hold on our customers, as an individual or a company, will only consist of contact information to discuss status of orders or, with their permission, to be contacted with relevant products, services and information related to their company.
In the future it may become an essential requirement to request other types of personal data. This data will only be collected when absolutely necessary and will only be used for its intended purpose (i.e. your address or bank/card details for purposes of payment). The data collected will only consist of what you have provided us with, meaning we will never data mine from you. Any bank/card details that are passed via face-to-face customers or via telephone ordering are destroyed immediately after use. These are not held on record.
Internal Acquisition
It is highly unlikely that we will need to gain your personal data from any other source. If, for example, we need to clarify address details regarding a current or past order, we will only use data that is publicly available to us. i.e. we will not purchase data from a third party.
3. How we hold your personal data
Any information collected either through External or Internal Acquisition is held on our securely encrypted server. It contains only information you have provided, or information made publicly available. Reworked Products Ltd premises is alarmed, monitored by CCTV and requires two keys and an alarm code to gain access.
If for any reason your personal data is to be taken out of the premises, it will be stored on an encrypted hard drive and under supervision at all times.
Our personal cloud server is also encrypted and requires a code to gain access.
4. How we use your personal data
Your data is primarily collected to allow for communication between our company and yourself.
The data you have provided us with by filling out our enquiry form allows us to send emails related to your order or query. Or, occasionally to offer related products or services we think you may have an interest in.
Your information will remain on our database for up to four years after your last online order. It is within your rights for us to remove this information from our database upon your request. This is detailed in Section 5.
We never sell your personal data to any third parties, processors or any company/organisation outside of MY ReFactory Ltd.
5. Your rights
Right to be informed (Articles 13 & 14)
You have the right to be informed regarding any of your personal information we hold; we keep a completely transparent document stating how and why your personal data is used. It is within your rights to file a complaint with a supervisory authority if you believe we have not achieved this.
Right of Access (Article 15)
It is within your rights to access your personal information along with any supporting information at your request. This allows individuals to determine the legality of the information being processed. This information is made available at no cost to you.
Right to Rectification (Article 16)
If for any reason you feel your personal data is inaccurate and/or needs to be rectified, you are within your rights to request these changes free of charge.
Right to Erasure (Article 17)
Also known as the ‘Right to be Forgotten’, it states that you have the right to request for the deletion or removal of personal data if you feel there is no further reason for the data to still be processed. This includes individual data and company data. If this is the case all our records will be deleted from our cloud servers and data drives.
Right to Restrict Processing (Article 18 & 19)
It is necessary for us to revise and update any personal data we hold on our customers regularly. We do this to ensure accuracy of information. You have the right to restrict the processing of your data. This means that once requested MY ReFactory Ltd will stop the interaction of your personal information; this involves updating it and using it to process any order that is currently processing. This is different to the ‘Right to Erasure’, as it would be stored in our database.
Right to Data Portability (Article 20)
You have the right to be provided with any personal data we hold in an easily interpreted readable format in both paper-based and electronic versions. This is again at no cost to you.
Right to Object (Article 21)
You have a legal right to object to MY ReFactory Ltd collecting, storing or processing any personal information relating to you as an individual or the company. If you wish to make an objection, please email us at hello@myrefactory.com.
Rights related to automated decision-making including profiling (Article 22)
As an individual you should acknowledge these rights do exist and can be implanted at any time. We carry out processing under Article 22(1) because we have the individual’s explicit consent recorded. We can show when and how we obtained consent. We tell individuals how they can withdraw consent and have a simple way for them to do this.
6. Summary
This document was intended to provide a simple and concise understanding of how and why MY ReFactory Ltd stores your personal information.
If you have any further questions or complaints, or would like to know more about your rights as a company and as an individual, please contact us via email at hello@myrefactory.com