Anchor Manufacturing LTD Privacy Policy

This privacy policy sets out how Anchor Manufacturing Ltd uses and protects any information that you provide to us.

Anchor Manufacturing Ltd is committed to ensuring that your right to privacy and confidentiality is protected. Any personal identifiable information (PII) by which you can be identified is regulated by the Data Protection Act (and from 25 May 2018, by the General Data Protection Regulation). You can be assured that we will only use your information in compliance with these laws and accordance with this privacy policy.

Anchor Manufacturing Ltd may change the privacy policy from time to time and will always endeavour to let you know that changes have been made. You should check our website www.anchormanufacturing.co.uk from time to time to review this policy to ensure that you are still happy with how we manage and protect your information. This privacy policy is effective from April 2018.

Key details

Anchor Manufacturing Ltd is a registered company (3887898) in England and Wales.

Any personal information provided or obtained by Anchor Manufacturing Ltd is used and processed only for its own legitimate purposes.

If you have any questions or concerns relating to how Anchor Manufacturing Ltd may use your personal information please contact:

Stephen Linaker (Company Director)

E-mail: Steve (at) anchormanufacturing.co.uk

Telephone Number: 0114 242 0444

Anchor Manufacturing LTD, 70 Broad Oaks, Sheffield S9 3HJ


Personal information collected about you

We will collect the following information about you that will be held securely on a central database:

  1. Name
  2. Contact information including email address and telephone number
  3. Demographic information such as postcode, communications & preferences

The information we collect is necessary for us to be able to provide you with the service you require, for the effective management of Anchor Manufacturing Ltd.  Refer to the section below ‘What we do with your information’ for further details.

Where we collect your information from

The following are the different sources we may collect personal data about you from:

  1. Directly from you. This is information you provide to us when you submit a web form sign up for one of our events, and purchase products from our upcoming online shop.
  2. When you access Anchor Manufacturing LTDs social media. We might also obtain your personal data through your use of social media such as Facebook, WhatsApp, Twitter or LinkedIn, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this.

https://www.facebook.com/policy.php
https://www.whatsapp.com/legal/#privacy-policy

 Through publicly available sources. We may use the following public sources:

    • Newspaper or other media coverage, open postings on social media sites such as LinkedIn, and data from Companies House.

 By Reference or word of mouth. For example, you may be recommended to us by a friend or a family member may purchase a product on your behalf.

What we do with your information

 What we do with the information we gather:

 Internal record keeping, accurate accounting and financial reporting and compliance purposes

  1. Processing of payments
  2. To contact you in response to a specific enquiry, compliment or complaint
  3. Promotional awareness
  4. We may use the information to improve our products and services that we provide
  5. We may periodically send emails about new products, special offers or other information which we think you may find interesting. However you will need to have given consent to us for this purpose.
  6. We may use your email address to contact you for purposes that relate to your membership, to respond to your questions or queries.
  7. We may use your information for statistical reporting purposes, archiving for historical purposes.
  8. We are obliged to process our information in compliance with any lawful request made by order or the court or under police warrant.

What we will not do with your information

Anchor Manufacturing LTD respects your rights under data protection laws and takes our obligations seriously. Any information provided to us is used and protected by us for our own legitimate purposes. Your rights to privacy, confidentiality and information security are highly important to us and upheld by us. Your support is extremely important to Anchor Manufacturing LTD so we do not and will not share, swap, or sell your personal information with any other organisation without your explicit consent.

We will not use your information for a different and non-compatible purpose to those described above or those that you would not reasonably expect. We will always let you know at the time of capturing your information if our intended purpose is different to those described above.

We do not carry out automated decision making or automated profiling.

Information Sharing

Anchor Manufacturing LTD will share your information for its own internal purposes and only where necessary.

Any sharing will be carried out under formal non-disclosure agreements and only after due diligence processes have been followed to ensure that those we work with support our aims and objectives.

Non-disclosure agreements are designed to protect information security, your confidentiality and set strict obligations as to the control and use of your information. Any information that is shared is secured through security protocols such as encryption and secure file transfer portals.

We never have and never will share, swap or sell your personal details to any organisation for their own marketing purposes. Your privacy and confidentiality is paramount to us and we will only use the information that you provide for Anchor Manufacturing LTD’s own purposes.

Information security and how we store your information

We are committed to ensuring that your information is secure and that your right to privacy and confidentiality are protected. We take information governance and security seriously and have technical and organisational measures in place that include ensuring all antivirus, antispam and software packages are up-to-date, correctly configured firewalls, encryption, secure file transfer protocols, Trust policies, processes and staff training to manage and protect your personal information in order to prevent unauthorised access, unlawful processing, accidental loss, damage, destruction or disclosure.

All information you provide to us is stored securely by Anchor Manufacturing LTD and governed by IT Security Policy and Procedures. Your information remains under the control of Anchor Manufacturing LTD at all times. You have the right to access your information at any time. Refer to section below ‘Your legal rights’.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us online; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access, loss or damage.

Where possible, we try to only process your information within the UK and European Economic Area (EEA).  If we or our service providers transfer personal data outside of the UK or EEA, we always require that appropriate safeguards are in place to protect the information when it is processed.  You can obtain a copy of these safeguards by contacting us.

Website cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive, smart phone, tablet or other device and is used to improve your online experience by almost every website including ours. This is why it is important to understand how cookies work, what they are for and when they are being used.

Once you agree, the cookie file is added to your computer and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use cookies for a variety of reasons, such as to monitor how many people have visited our website and tracking items in the emerging Anchor Manufacturing LTD online shop. More information about cookies can be found at www.allaboutcookies.org

We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. The cookies we use in no way give us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

You can manage your cookie preferences for our website or any other websites by using your browser settings. Your browser’s ‘help’ function will show you how to do this. However, please remember that cookies are often used to enable and improve certain functions on our website. If you chose to switch certain cookies off, it could affect how our website works on your device.

Your legal rights

Individuals have specific rights contained within data protection laws that relates to their personal information. These rights can be enforced against any organisation, from any sector, that holds your information. This section will detail what these rights are and how you can exercise them.

  1. You have the right to be informed of how and why your information is being used and who it is being shared with. This right relates to the first data protection principle of fair and lawful processing and the second data protection principle that relates to processing personal information for specified and lawful purposes. Both of these principles obligate organisations to be open, honest and transparent with what and how they use personal information.

Anchor Manufacturing LTD has published this Privacy Policy to detail how and why we use your information and what we will do with it. This privacy policy is available from our website and on request. Anchor Manufacturing LTD will also endeavour to place data protection statements on all documents that capture or ask for your personal information that draws your attention to how your information will be used as well as how to obtain a copy of this policy.

  1. You have the right to access information about you. This is called a Subject Access Request. This means you can have a copy of your personal information held by Anchor Manufacturing LTD. If an exemption is being relied on to restrict your right to access specific details that contain your information, you are entitled to know which exemption applies. There is no charge for a Subject Access Request and Anchor Manufacturing LTD must provide you with a copy within 30 days.
  2. You have the right to have any incorrect or inaccurate information about you rectified or erased from our records. If we are holding information about you that you know or feel is incorrect you have a right for this to be corrected.
  3. You have the right to be forgotten. This means you have the right to ask Anchor Manufacturing LTD to delete or remove your information from our systems where there is no lawful reason for its continued processing.
  4. You have the right to restrict processing of your information. For example you can request that we do not use your information in a way that will cause you any distress such as the publication of your photograph on our website or in our newsletters.
  5. You have the right to withdraw consent.
  6. You have the right to object to automated decisions and profiling. This right relates to decisions being made about you by automated or mathematical reasoning applied by a computer. There is no human input to the decision making process. This is quite common for online credit card applications where the decision is based upon an algorithm. Anchor Manufacturing LTD does not use this kind of technology.
  7. You have the right to data portability. This means you have the right to move your information from one database to another. For example you could ask to move all of your personal data from one utility provider to another.

There are other more general rights that you have within the law, these are:

  1. The right to compensation for distress caused
  2. The right to complain to the Information Commissioner by calling 0303 123 1113 or visiting the ICO’s website https://ico.org.uk/concerns/
  3. The right to privacy and confidentiality and for your information not to be disclosed without your knowledge or consent.

If you have any questions or queries relating to this privacy policy or any of your rights detailed above please contact Stephen Linaker, by email at Steve@anchormanufacturing.co.uk or by calling 0114 242 0444

Our lawful obligations

All organisations that process personal information are under strict obligations that govern how they use and process personal information. Predominantly these are found within the data protection principles:

  1. Fair and lawful processing. This means we need to tell you about how and why we collect and use your information. Anchor Manufacturing LTD does this through data protection statements and privacy notices.
  2. Specified and legitimate purpose(s). This means that we need to be clear, honest and transparent as to the purpose(s) that we will use your information for. This is also achieved through the use of data protection statements and privacy notices.
  3. Adequate, relevant and not excessive. This relates to the capture of information about you not being excessive for the intended purpose. For example asking for your banking details when they are not required would be excessive.
  4. Accurate and where necessary up to date. This relates to our obligations around the management of your information.
  5. Not kept for longer than necessary. This principle means that the information held about you cannot be held indefinitely. Your information can only be retained for the purpose(s) required and to comply with certain other legal obligations. For example tax laws require information to be retained for seven years. Anchor Manufacturing LTD will retain your information to conform with legal requirements and for as long as is justifiable for the management and historical account of our work.
  6. Appropriate security against unlawful and unauthorised processing. This obligation means that organisations are under a lawful duty to protect your information. Information security comes in different forms from physical security, technical and organisational measures to restrict access to your information and protect it from unlawful or unauthorised disclosure.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

Postal communications will be sent to you under the legitimate interest of Anchor Manufacturing LTD. You can stop these communications at any time by emailing Steve@anchormanufacturing.co.uk or by calling 0114 242 0444.

Anchor Manufacturing LTD will comply with your request without unreasonable delay, but please note that it may be difficult to stop communications that are in the process of being mailed.

Electronic communications (emails) require your consent before Anchor Manufacturing LTD can lawfully send them.

You can email Steve@anchormanufacturing.co.uk or by calling 0114 242 0444 and Anchor Manufacturing LTD will stop all email communications without any unreasonable delay.

  1. You are entitled to enforce any of your legal rights and to make a complaint to the Information Commissioner’s Office. Refer to the section above ‘Your legal rights’.
  2. If you believe that any information we are holding on you is incorrect or incomplete, please let us know as soon as possible. We will promptly correct any information found to be incorrect.
  3. If you have any questions, concerns or complaints please contact Stephen Linaker by e-mail or telephone.

 CCTV POLICY

Closed circuit television (CCTV) is installed at the  premises for the purposes of staff, customer and premises security. Cameras are located at various places on the premises, and images from the cameras are recorded. The use of CCTV falls within the scope of the Data Protection Act 1998 (“the 1998 Act”). This code of practice follows the recommendations issued by the Data Protection Commissioner in accordance with powers under Section 51 (3)(b) of the 1998 Act.

 In order to comply with the requirements of the 1998 Act, data must be:

  1. Fairly and lawfully processed
  2. Processed for limited purposes and not in any manner incompatible with those purposes
  3. Adequate, relevant and not excessive
  4. Accurate
  5. Not kept for longer than is necessary
  6. Processed in accordance with individuals’ rights
  7. Secure

Data Protection statement

  1. Mr Stephen Linaker is the Data Controller under Section 4(4) of the Act.
  2. CCTV is installed for the purpose of staff, customer and premises security.
  3. Access to stored images will be controlled on a restricted basis within the workshop.
  4. Use of images, including the provision of images to a third party, will be in accordance with the practice’s Data Protection registration.
  5. CCTV may be used to monitor the movements and activities of staff and visitors whilst on the premises.
  6. CCTV images may be used where appropriate as part of staff disciplinary procedures.
  7. External and internal signage is displayed on the premises stating of the presence of CCTV, and indicating the names of the Data Controllers and a contact number during office hours for enquiries. 

RETENTION OF IMAGES

Images from cameras are recorded on videotape/disc/computer system (“the recordings”). Where recordings are retained for the purposes of security of staff, customers and premises, these will be held in secure storage, and access controlled. Recordings which are not required for the purposes of security of staff, customer and premises, will not be retained for longer than is necessary. (30 Days)

ACCESS TO IMAGES

It is important that access to, and disclosure of, images recorded by CCTV and similar surveillance equipment is restricted and carefully controlled, not only to ensure that the rights of individuals are preserved, but also to ensure that the chain of evidence remains intact should the images be required for evidential purposes.

ACCESS TO IMAGES BY STAFF

Access to recorded images is restricted to the Data Controllers, who will decide whether to allow requests for access by data subjects and/or third parties (see below).

Viewing of images must be documented as follows:

  1. The name of the person removing from secure storage, or otherwise accessing, the recordings
  2. The date and time of removal of the recordings
  3. The name(s) of the person(s) viewing the images (including the names and organisations of any third parties)
  4. The reason for the viewing
  5. The outcome, if any, of the viewing
  6. The date and time of replacement of the recordings

REMOVAL OF IMAGES FOR USE IN LEGAL PROCEEDINGS

In cases where recordings are removed from secure storage for use in legal proceedings, the following must be documented:

  1. The name of the person removing from secure storage, or otherwise accessing, the recordings
  2. The date and time of removal of the recordings
  3. The reason for removal
  4. Specific authorisation of removal and provision to a third party
  5. Any crime/incident number to which the images may be relevant
  6. The place to which the recordings will be taken
  7. The signature of the collecting police officer, where appropriate
  8. The date and time of replacement into secure storage of the recordings

ACCESS TO IMAGES BY THIRD PARTIES

Requests for access to images will be made using the contact form.

The data controller will assess applications and decide whether the requested access will be permitted. Release will be specifically authorised. Disclosure of recorded images to third parties will only be made in limited and prescribed circumstances. For example, in cases of the prevention and detection of crime, disclosure to third parties will be limited to the following:

  1. Law enforcement agencies where the images recorded would assist in a specific criminal enquiry
  2. Prosecution agencies
  3. Relevant legal representatives
  4. The press/media, where it is decided that the public’s assistance is needed in order to assist in the identification of victim, witness or perpetrator in relation to a criminal incident. As part of that decision, the wishes of the victim of an incident should be taken into account
  5. People whose images have been recorded and retained (unless disclosure to the individual would prejudice criminal enquiries or criminal proceedings)

All requests for access or for disclosure should be recorded. If access or disclosure is denied, the reason should be documented as above.

 DISCLOSURE OF IMAGES TO THE MEDIA

If it is decided that images will be disclosed to the media (other than in the circumstances outlined above), the images of other individuals must be disguised or blurred so that they are not readily identifiable.

If the CCTV system does not have the facilities to carry out that type of editing, an editing company may need to be used to carry it out.

If an editing company is used, then the data controller must ensure that there is a contractual relationship between them and the editing company, and:

  1. That the editing company has given appropriate guarantees regarding the security measures they take in relation to the images
  2. The written contract makes it explicit that the editing company can only use the images in accordance with the instructions of the data controllers
  3. The written contract makes the security guarantees provided by the editing company explicit

ACCESS BY DATA SUBJECTS

 This is a right of access, which is provided by section 7 of the 1998 Act. Requests for access to images will be made using the web form on the contacts page.

PROCEDURES FOR DEALING WITH AN ACCESS REQUEST

 All requests for access by Data Subjects will be dealt with by the data controller: Stephen Linaker.

The data controller will locate the images requested. The data controller will determine whether disclosure to the data subject would entail disclosing images of third parties.

The data controller will need to determine whether the images of third parties are held under a duty of confidence. In all circumstances the practice’s indemnity insurers will be asked to advise on the desirability of releasing any information.

If third party images are not to be disclosed, the data controllers will arrange for the third party images to be disguised or blurred. If the CCTV system does not have the facilities to carry out that type of editing, an editing company may need to be used to carry it out. If an editing company is used, then the data controller must ensure that there is a contractual relationship between them and the editing company, and:

  1. That the editing company has given appropriate guarantees regarding the security measures they take in relation to the images
  2. The written contract makes it explicit that the editing company can only use the images in accordance with the instructions of the data controllers
  3. The written contract makes the security guarantees provided by the editing company explicit

The company director will provide a written response to the data subject within 21 days of receiving the request setting out the data controller’s’ decision on the request. A copy of the request and response should be retained.

COMPLAINTS
Complaints must be in writing, and addressed to the company director. Where the complainant is a third party, and the complaint or enquiry relates to someone else, the written consent of the patient or data subject is required. All complaints will be acknowledged within 7 days, and a written response issued within 21 days.