BCC IT Privacy Statement / ISMS Policy

This policy contains a description of what is considered personal data, what types of personal data we collect, for what purposes that data is collected, how it is processed and what rights you have in this regard. At all times, we endeavour to handle personal data with respect, confidentially and sensitively.

BCC IT Ltd (company registration number 2651835) trades as BCC IT and will therefore be referred to as BCC IT hereafter.

 

PERSONAL DATA PROCESSING 

What is personal data

Personal data refers to any information relating to an identified or identifiable natural person who can be directly or indirectly identified in particular by reference to an identifier, such as for instance your contact information and information contained within an order or a support request.

General principles for personal data processing by BCC IT

When gathering and/or processing personal data we adhere to the following principles:

a.  We will only collect personal data for specified, explicit and legitimate purposes;

b.  Will not collect any personal data beyond what is considered reasonably necessary to accomplish those purposes;

c.  We will not use personal data for purposes other than that for which the data was collected, except as stated herein, or with prior consent;

d.  We will not transfer personal data to unauthorised third parties, except as stated herein, or with prior consent.  An example of where we would ask for such consent would be to enable us to pass information that may include personal data to an organisation providing support not covered under your agreements with us, such as, but not exclusively software/app support vendors and printer/photocopier service providers;

e.  We will do our best to ensure that information is up to date by encouraging you to verify your personal data periodically;

f.  We will maintain appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access and against all other unlawful forms of processing; and

g.  Except when stated herein, we will not store personal data longer than is necessary to accomplish the purpose for which the data were collected or for which they are further processed, or as is required by applicable law.

Personal data we collect and process

When you engage with BCC IT via any method we may collect and process your personal data. The personal data that we collect and process can be categorised as follows:

  1. Your personal details, such as your name, e-mail address, physical address (if provided), phone number(s) (if provided), IP address(s), in some cases geo-location and language(s).
  2. Your purchase information, such as:

i.your personal details as specified above, company name (if applicable and provided), your delivery information, such as delivery address and other such additional contact details;

ii.your order information, such as product name, quantity, product name, asset tag(s)/number(s), product serial number(s), quantity, date of purchase and manufacturer/supplier information;

iii.your payment information, such as credit card, bank details for Direct Debit payments or similar payment information and referral source (if applicable).

  1. Requests for customer support and technical assistance, containing your personal details as specified above, product serial number, product warranty information, technical user credentials and other relevant information, which BCC IT may require in order to proceed with your request.
  2. Information provided when completing surveys, questionnaires and feedback forms, such as your personal details as specified above, product information and your feedback on your use of your product(s) and/or service and evaluation of the same.
  3. Your behaviour information collected via use of cookies and similar technologies like pixels, tags and other identifiers in order to remember your preferences, to understand how our websites and app(s) are used and to customise our marketing offerings. Please see our cookie policy for more detailed information.

How we use personal data

We only collect and process personal data if one or more of the reasons outlined below applies:

  1. We provide you with customised or semi-customised information relating to news, events, competitions and/or similar marketing content related to BCC IT, its products and products sold in collaboration with third parties. Our processing in this regard will be based on your consent thereto.
  2. We handle your purchase orders, complete purchase transactions, ensure delivery of purchased product(s), handle possible returns. Our processing is necessary for the performance of a contract, to which you are a party.
  3. We provide you with authorised and agreed technical support or consultancy proactively or reactively whether related to a contract/agreement you hold for our services or do not.
  4. We provide you with other forms of customer service, handle your requests or complaints and provide you with product/service/warranty support. Our processing is necessary for the performance of a contract, to which you are a party.
  5. We provide you with relevant product software updates and make your future purchases easier maintaining a record of your shipping details. Our processing is necessary for the purposes of the legitimate interests pursued by BCC IT and such processing is not considered to be harmful towards you.
  6. We ensure better customer experience by providing you with personal benefits, such as discounts or customised offers based on previous purchases and possible onward referrals. Our processing in this regard will be based on your consent thereto.
  7. We may collect your feedback regarding your use of products and services by inviting you to complete surveys, questionnaires or feedback forms. Our processing in this regard will be based on your consent thereto.

Accordingly, some of your personal data is collected and processed in order for us to fulfil our contractual obligations to you, for instance, when you purchase our products, contact our service desk, contact our customer service team or otherwise engage with us. Should you choose not to provide us with the requested and necessary personal data in this regard, we might not be able to fully satisfy your request.

Where we store and process your personal data

As a general principle, your personal data is stored and processed within the European Economic Area (EEA).

Our disclosure of your personal data to third parties

As a general principle, we collect and process data in order to facilitate or improve BCC IT products, services, technical support or offers.

We do not sell your personal data or share the said data with third parties, except to the extent stated in this Privacy Policy.

We may disclose your personal data to third parties to the extent required by law, court order or a decision rendered by a competent public authority and for the purpose of law enforcement. In addition, we may share your personal data with the following third parties:

  1. Our distribution partners and vendors in order to deliver products and services to you, to ensure a consistent level of service across our products and services, to enhance our products, services and your customer experience.
  2. Third party vendors carrying out services on our behalf, including billing, sales, marketing, technical support, advertising, analytics, research, customer service, product service support, shipping and purchase order fulfilment, data storage, validation, security, fraud prevention, payment processing, and legal services. Such third-party vendors have access to perform these services but are prohibited from using your personal data for other purposes.
  3. Third parties in order to establish, exercise or defend legal rights of BCC IT.
  4. Third parties in the event of any merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of BCC IT assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).
  5. Other third parties such as software/app vendors and printer/photocopier service providers with whom you have an agreement for support services.  This enables us to liaise directly with them on your behalf.
  6. Other third parties subject to your consent.

Where we disclose your personal data to a third party, we take all reasonable steps to ensure that those third parties are bound by confidentiality and privacy obligations with respect to the protection of your personal data. The disclosure is conducted in compliance with legal requirements which may include entering into data processing agreements with the relevant third parties, to ensure that personal data is only processed in accordance with our instructions, applicable law and regulations and for the purpose specified by us and to ensure adequate security measures.

Retention of your personal data

We keep your information for no longer than necessary for the purposes for which it is collected. The length of time for which we retain information depends on the purposes for which we collected and use it.

Cookies

BCC IT collects information during your visit to our websites and portals by utilisation of cookie technology.

A cookie is a piece of programming information contained in a very small text file that is placed in your Internet browser or elsewhere on your hard drive. You can control acceptance of cookies by modifying your Internet browser preferences. You have the ability to accept all cookies, to be notified when a cookie is set or to reject all cookies. Please note that, if you choose to block all cookies (including essential cookies) you may not be able to access all or part of our site and may be unable to use those services or engage in activities that require the placement of cookies.

BCC IT uses cookies to distinguish you from other users of our website and to help us compile aggregate statistics about usage of our websites.

For more detailed information about cookies, you may wish to visit www.allaboutcookies.org.

Responsible for processing

BCC IT Ltd, Unit B, Station Road, Newcastle Emlyn, Carmarthenshire, SA38 9BY is the data controller and is responsible for the processing of your personal data.

 

YOUR RIGHTS 

  • Access to your personal data and data portability You have right to access and receive the personal data concerning you, which you have provided to BCC IT, in a structured, commonly used and machine-readable format and have the right to transmit this data to any third party, you should choose. Your personal data processed by BCC IT can be accessed by contacting us by telephone, e-mail or traditional post.

Updating and/or deleting your personal data

We encourage you to update your personal data provided to BCC IT any time there are changes to your personal data. This can be done by contacting our office.

In order to ensure that your personal data processed by us is up-to-date we request you to check and, if relevant, update your personal data at least once a year. Your personal data can be deleted from BCC IT servers unless entitled or obliged by applicable law and regulations to keep and process such information regardless withdrawal of your consent. Following deletion your personal data will be deleted from servers of BCC IT without undue delay.

You may also contact BCC IT to review, update or delete personal data stored about you. Please note that prior to accessing and making changes to your account, we will need to verify your identity fully.

Right to withdraw your consent

Some of BCC IT’s processing activities may be based on your consent. In such case, you will have the right to withdraw your consent at any time. Withdrawal of your consent will not affect the lawfulness of processing conducted prior to the withdrawal. If you withdraw your consent, BCC IT will cease to process your personal data, unless and to the extent the continued processing or storage is permitted or required according to other applicable laws and regulations.

Please note that as a consequence of your withdrawal of your consent, BCC IT may not be able to meet your requests or provide you with our services.

Right to restriction of processing and right to object

You have the right to restriction of processing of your personal data, if the personal data is incorrect, if the processing is unlawful, but you oppose erasure of your personal data, if BCC IT no longer requires your personal data for the purposes of processing, but storing such data is requested by you for the establishment, exercise or defence of legal claims, or if you have objected to processing and verification, whether BCC IT continues to have legitimate interest(s) in the given personal data is pending.

At any time you have the right to object to processing of your personal data collected and processed for purposes of the legitimate interests pursued by BCC IT.

Furthermore, you have the right to object to processing of your personal data for direct marketing purposes. You can do so by unsubscribing from our marketing information or by contacting us.

Right to complain

If you want to complain about a privacy breach, please contact BCC IT by sending your complaint to BCC IT, Unit B, Station Road, Newcastle Emlyn, Carmarthenshire, SA38 9BY or by sending an e-mail to our central email address.

We will acknowledge receipt of your complaint within seven (7) business days. We will do our best to resolve it as quickly as possible and within one (1) month from the date of complaint. In cases where a response would require a longer term than one (1) month, we will let you know and inform you of the relevant reason(s).

If you are not satisfied with outcome of your complaint or with handling of your complaint at BCC IT, you may refer your complaint to Information Commissioners Office (ICO) https://ico.org.uk/global/contact-us/

 

MISCELLANEOUS

Third-party websites, plug-ins and services

Websites, apps and products supplied and/or maintained by BCC IT may contain links to third party websites, plug-ins, for instance social media login plug-in or services. If you choose to use 3rd party websites, plug-ins or services, you may disclose your information to those third-parties. BCC IT is not responsible for the content or practices of those websites, plug-ins or services.

The collection, use, and disclosure of your personal data will be subject to the privacy policies of these third parties which we strongly recommend you to read.

Data security

BCC IT is committed to protecting the security of your personal data. We utilise several organisational, technical, and administrative measures to protect your personal data under our control, such as control of access, transmission, input and availability and the separation of data.

All external transmissions of personal data facilitated by BCC IT are protected by encryption.

All data storage and processing at computer facilities utilised by BCC IT are subject to written contracts. If you have reason to believe that your interaction with BCC IT is no longer secure please notify us of the problem immediately by contacting us.

Changes to our Privacy Policy

BCC IT may modify or update this Privacy Policy when necessary to reflect changes in our products and services, changes in applicable legislation, regulations or practice and to address customer feedback. Accordingly, please review it periodically.

Contact details

If you have questions about this Privacy Policy or BCC IT’s processing of your personal data, please contact us at:

BCC IT,

Unit B,

Station Road,

Newcastle Emlyn,

Carmarthenshire,

SA38 9BY

 

Or by sending an e-mail to our central email address: enquiries@bccit.co.uk

Our ISMS policy is available on request.