GDPR Compliance Document
The law on data protection is changing on 25.5.18. This document sets out how Time Pocket Watches (TPW) handles, collects, stores and uses your data and your rights under our privacy notice.
TPW is a data controller and processor.
Personal data held
TPW collects and holds the following personal data on customers. Not all of the below data is relevant to each customer, only relevant data to each customer is collected.
-
Name
-
Address
-
Email
-
Telephone number – either home or mobile or both
-
Facebook contact- if original contact is made or further communication carried out in this way.
-
Payment method
How personal data is collected
Information is collected upon a purchase of goods or service or a customer contacting TPW to enquire of our services. Data may be collected via email, telephone call or Facebook.
Purpose of personal data held
TPW collects and handles personal data in order to keep a record for delivery of goods and a record of warranty. Data is also required for processing accounts and bookkeeping for the business.
Lawful basis for processing personal data
TPW only collects necessary personal data to provide customers with sales, watch repair and warranty services and also for processing accounts in relation to the business. Without collecting the above personal data TPW would not be able to operate in your commercial interests, therefore our Lawful basis is ‘Legitimate interests.’
​
Length of time personal data is held
​
TPW will hold the name, address and all accounts and bookkeeping details for 6 years from the end of the financial year that they relate to. This is necessary by law for accurate business accounts. After this time, records and files will be deleted or destroyed securely.
Sharing data
​
TPW reserves the right to use an accountant of their choosing as a third party data processor, for the purpose of annual bookkeeping and accountancy for the business. Third party data processors may not use your personal data for any other purpose other than the process which they are required to undertake.
Special category data
​
TPW does not collect ‘special’ category data
SECURITY:
​
TPW takes the security of your personal data very seriously. Your personal data will only be used as outlined in this document and every effort is made to ensure that your data is protected against unauthorised or illegal use and against accidental loss, destruction or damage.
Digital security
​
Computers used for business are password protected with firewalls and anti-virus software. Data storage used by the business is password protected.
Paper records
​
Paper records (if any) are kept in a locked paper storage container.
​
PRIVACY NOTICE
The Right to be Informed
​
TPW collects and processes your personal data as laid out in this document
​
The Right to Access
​
You have the right to request a copy of all of the personal data TPW holds about you. Requests for personal data must be made by the named individual and will be verified by TPW. Requests will be processed within 30 days and are free of charge unless the request is ‘manifestly unfounded or excessive’ in this case an hourly administration cost will be required for providing the information or your request may be refused.
​
The Right to Rectification
​
You have the right to have your personal data corrected if you believe that the information TPW holds is incorrect. Requests can be made verbally or in writing and will be responded to within 30 days. Please contact TPW if you believe your details are incorrect or need updating.
The Right to Erasure
​
You are entitled to request personal data that TPW holds on you to be deleted or erased, this is also known as ‘the right to be forgotten.’ Requests can be made verbally or in writing and will be responded to within 30 days.
TPW will consider requests on an individual basis. If there is lawful basis for the business to retain your information your request may be refused. The reasons why will be explained once a decision has been made within the 30 days. Please be aware that it is not always possible for certain data to be deleted or erased, if the business is required by law to retain this information for certain uses or if the business is unable to provide the service you require without retaining data.
The Right to Restriction of Processing
​
You have the right to request the restriction or suppression of the processing of the personal data TPW holds on you, this may be alongside the right to rectification and the right to object. This is an alternative to requesting the erasure of your data. Requests can be made verbally or in writing and will be responded to within 30 days.
​
When processing is restricted, TPW is permitted to store your personal data, but not use it. In most cases the right to restriction is only temporary. If the request is made alongside to the right to rectification or the right to object TPW will lift the restriction once a decision on the accuracy of your data, or whether the business legitimate grounds override those of the individual, has been made. You will be informed before TPW lifts the restriction.
The Right to Object
​
You have the right to object to TPW processing your data based on Legitimate Interest. No further service will be able to be provided after this request. The business may still be legally required to hold and process your data for lawful bookkeeping and accountancy as set out in this document.
Further Information
​
If you require further information about your rights, more information can be found on the ICO (Information Commissioner’s Office) website or by contacting them directly.
Your Right to Complain
​
In the event that you are concerned about the way in which TPW is handling your personal data, refuses to process your request for changes or erasure or you are unhappy with the reasons why your request has been refused you have the right to complain to the ICO or seek a judicial remedy.