Elite Office Partitions is committed to protecting personal data and respecting the privacy rights of customers, prospective customers, suppliers, contractors, business partners and website visitors.
This GDPR Policy explains how Elite Office Partitions collects, processes, stores, shares and protects personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data protection legislation.
This policy applies to personal data collected through eliteofficepartitions.co.uk and through our wider business activities.
Elite Office Partitions processes personal data lawfully, fairly and transparently.
We follow the principles of UK data protection law and aim to ensure personal data is:
Processed lawfully, fairly and transparently
Collected for specified, explicit and legitimate purposes
Adequate, relevant and limited to what is necessary
Accurate and kept up to date where necessary
Retained only for as long as necessary
Protected against unauthorised or unlawful processing
Protected against accidental loss, destruction or damage
We maintain appropriate processes and security measures because protecting personal information is an important part of responsible business practice.
Personal data means information relating to an identified or identifiable individual.
We may collect:
First and last name
Email address
Telephone number
Postcode
Business or organisation name
Business address
Project or installation address
Job title or professional role
Details about office partition requirements
Project specifications
Information contained within enquiries and correspondence
Quotations and project records
Customer and supplier information
Invoice and transaction information
Website usage information
IP address
Browser and device information
Any other personal information voluntarily provided to us
We aim to collect only information that is reasonably necessary for the relevant business purpose.
We may collect personal data when you:
Complete an enquiry form on our website
Request a quotation
Contact us by telephone or email
Request a site survey
Discuss a potential office partition project
Become a customer
Supply products or services to us
Work with us as a contractor
Communicate with us during a project
Visit or interact with our website
We may also receive personal data from contractors, suppliers, property professionals, project managers, business partners or other organisations where there is a legitimate and lawful reason for them to provide it.
We may process personal data to:
Respond to enquiries
Provide quotations
Arrange site surveys
Assess project requirements
Design office partition solutions
Manufacture or source partition products
Arrange deliveries
Manage installations
Communicate during projects
Manage customer relationships
Manage suppliers and contractors
Maintain financial and accounting records
Process payments
Provide customer support
Handle complaints
Resolve disputes
Improve our products and services
Operate and improve our website
Maintain website and system security
Prevent fraud and misuse
Comply with legal and regulatory obligations
Establish, exercise or defend legal claims
We do not use personal information for purposes that are incompatible with the reason it was originally collected unless permitted by law.
We must have a lawful basis before processing personal data.
Depending on the circumstances, we may rely on the following lawful bases.
We may process personal data when necessary to take steps at your request before entering into a contract or to fulfil an existing contract.
This may include preparing a quotation, arranging a site survey, planning an installation or delivering agreed products and services.
We may process personal data where this is necessary for our legitimate business interests and those interests do not override your rights and freedoms.
Our legitimate interests may include:
Responding to business enquiries
Preparing quotations
Managing customer relationships
Managing projects
Managing suppliers and contractors
Improving our services
Protecting our business and systems
Maintaining appropriate business records
Preventing fraud
Resolving disputes
We may process and retain personal data where necessary to comply with legal, tax, accounting or regulatory obligations.
Where required, we may process personal data based on your consent.
This may include certain electronic marketing communications and non-essential website cookies.
You can withdraw your consent at any time where processing relies on consent.
We aim to collect only the personal information necessary for a specific purpose.
We avoid collecting unnecessary information because limiting the amount of personal data we hold reduces privacy and security risks.
We take reasonable steps to ensure that personal data is accurate and kept up to date where necessary.
Customers, suppliers and other individuals should inform us if their personal information changes or if they believe information we hold is incorrect.
We will take reasonable steps to correct inaccurate information where appropriate.
We do not normally need to collect special category personal data as part of our standard office partition services.
Special category data can include information about health, racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetics, biometrics or sexual orientation.
If it becomes necessary to process special category data, we will only do so where an appropriate lawful basis and additional legal condition apply.
We take reasonable technical and organisational measures to protect personal data.
Our security measures are intended to reduce the risk of:
Unauthorised access
Unlawful disclosure
Accidental loss
Destruction
Alteration
Misuse
Theft
Access to personal information should be limited to people who require it for legitimate business purposes.
People handling personal information on behalf of Elite Office Partitions are expected to treat it confidentially and securely.
Elite Office Partitions does not sell personal data.
We may share personal information where necessary to operate our business, provide our services or meet legal requirements.
Recipients may include:
Website hosting providers
IT providers
Email and communications providers
Customer management systems
Accountants
Solicitors and professional advisers
Manufacturers
Suppliers
Installation contractors
Project contractors
Payment and financial service providers
Website analytics providers
Government authorities
Regulators
Courts
Law enforcement agencies
We aim to share only the information reasonably necessary for the relevant purpose.
Where another organisation processes personal data on our behalf, we take reasonable steps to ensure appropriate data protection arrangements are in place.
Where required, agreements with processors will address matters including confidentiality, security, processing instructions and the handling of personal data.
Office partition projects may involve manufacturers, suppliers, contractors and installation specialists.
We may share relevant contact or project information with these parties where necessary to complete a project.
We aim to limit the information shared to what the recipient reasonably needs to perform their role.
Some technology and service providers may process or store personal data outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure the transfer complies with UK data protection requirements.
Appropriate safeguards may include UK adequacy regulations, approved contractual safeguards or another legally recognised transfer mechanism.
We retain personal data only for as long as reasonably necessary.
Retention periods depend on factors including:
The purpose for which the information was collected
The nature of our relationship with the individual
Contractual requirements
Tax and accounting requirements
Legal obligations
Regulatory requirements
Potential disputes or legal claims
Enquiry information may be retained for a reasonable period to manage potential projects and maintain appropriate business records.
Customer, project, financial and transaction records may need to be retained for longer periods where required for legal, accounting or business purposes.
When personal data is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.
UK data protection law provides individuals with several rights concerning their personal data.
Depending on the circumstances, you may have the right to:
Be informed about how your personal data is used
Request access to your personal data
Request correction of inaccurate information
Request completion of incomplete information
Request deletion of personal data
Request restriction of processing
Object to certain processing
Request data portability
Withdraw consent
Object to direct marketing
These rights are subject to applicable legal conditions and exemptions.
You can request a copy of personal information Elite Office Partitions holds about you.
This is commonly known as a subject access request.
Requests can be made by contacting Elite Office Partitions using the contact details provided on our website.
We may request information to verify your identity because we must ensure personal information is not disclosed to an unauthorised person.
We will respond to valid requests within the timeframe required by applicable data protection law.
You can ask us to correct personal information that is inaccurate or complete information that is incomplete.
We will investigate reasonable requests and update information where appropriate.
You may have the right to request deletion of your personal data in certain circumstances.
The right to erasure is not absolute.
We may retain information where we have a legal obligation, contractual requirement or another lawful reason to keep it.
You may have the right to ask us to restrict how we process your personal information in certain circumstances.
Where processing is restricted, we may retain the information while limiting other uses of it.
You may have the right to object where we process personal data based on legitimate interests.
If you object, we will consider the circumstances and determine whether we have compelling legitimate grounds to continue processing.
You have the right to object to the use of your personal information for direct marketing at any time.
Where applicable, you may have the right to receive certain personal data in a structured, commonly used and machine-readable format.
You may also have the right to request that qualifying information is transferred directly to another organisation where technically feasible.
We only send electronic marketing communications where we have a lawful basis to do so.
Where consent is required, we will obtain consent before sending marketing communications.
You can opt out of marketing communications at any time.
Submitting an enquiry or requesting an office partition quotation does not automatically mean you have agreed to receive unrelated marketing communications.
Eliteofficepartitions.co.uk may use cookies and similar technologies.
Some cookies are necessary for the website to function correctly. Others may be used for analytics, performance measurement or marketing.
Where consent is required, non-essential cookies should only be activated after consent has been obtained.
Further information about the use of cookies should be provided in our Cookie Policy.
A personal data breach may involve the accidental or unlawful loss, destruction, alteration, disclosure of or access to personal data.
If we become aware of a personal data breach, we will assess:
What happened
The information involved
The individuals potentially affected
The likely consequences
The measures required to reduce further risk
Where legally required, we will report a qualifying breach to the Information Commissioner's Office within the applicable timeframe.
Where a breach is likely to result in a high risk to an individual's rights and freedoms, we will inform affected individuals where required by law.
We aim to consider data protection when introducing new systems, technologies, processes or services involving personal data.
Where a proposed processing activity is likely to create a high risk to individuals, we will consider whether a Data Protection Impact Assessment is required.
This approach helps identify privacy risks before new processing activities begin.
Anyone handling personal data on behalf of Elite Office Partitions should:
Keep personal information confidential
Access information only where required
Follow appropriate security procedures
Avoid unnecessary disclosure
Store information securely
Report suspected personal data breaches promptly
Dispose of personal information securely when no longer required
Elite Office Partitions does not normally use solely automated decision-making that produces legal or similarly significant effects on individuals.
If this changes, we will provide appropriate information about the processing and comply with applicable data protection requirements.
If you have concerns about how Elite Office Partitions handles your personal data, please contact us first so we can investigate the matter.
You also have the right to complain to the Information Commissioner's Office, which is the UK's independent regulator for data protection and information rights.
We may update this GDPR Policy when our business practices, website, technology, services or legal obligations change.
The latest version will be published on eliteofficepartitions.co.uk.
If you have questions about this GDPR Policy, want to exercise your data protection rights or have concerns about how your personal information is handled, please contact Elite Office Partitions using the contact details provided on eliteofficepartitions.co.uk.