Who are we?
References to ‘us’, ‘we’ or ‘our’ are references to Office Club Limited. Our company registration number is 2736457.
Office Club Limited understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all our website visitors, customers and suppliers, and will only collect and use personal data in the ways that are described here, and in a way that is consistent with our obligations and your rights under the Data Protection Act 2018 and the General Data Protection Regulation / GDPR (EU) 2016/679
What data do we collect and hold?
The personal data we collect, is restricted to, but may vary according to the relationship with us:
- Postal address / Company Address
- Email / Company Email
- Telephone numbers / Company Telephone numbers – Landline and Mobile
- Bank / Payment Details
Information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our services.
Where do we collect personal data from?
We collect personal information from that you have supplied to us either in person, by telephone, by email or via the contact form on our website.
This data is processed so that no one is identified. You may disable cookies in your browser, though doing so may affect your experience when using our website.
Do we collect personal data from third parties?
Only for the purposes of legitimate business-to-business marketing we do, at times, collect data from other companies, suppliers and wholesalers websites.
How will we use your personal data?
We must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because we have a legal obligation, or because we have a legitimate interest. Your personal data may be used for one of the following purposes:
- To perform our contract if we have entered into a contractual relationship with you
- Maintaining our business relationship with you once any contracted services have been supplied
- To perform pre-contract activities if we are mutually working towards a contractual relationship
- For the legitimate purpose of business to business marketing
- To respond to specific requests that you make via telephone, email or our website
- Website administration
Will we share your personal data?
We do not share your personal information with third parties, other than our preferred suppliers for the sole purpose of business-to-business marketing of their products and services, but you will have the option to opt-out at any time.
We use your data for our own use and for the supply of goods and services to you and may include the use of our IT and cloud services.
The only other time we share any information is when we need to do so to deliver our goods and services.
For example, we may share your information with a delivery company to enable them to deliver goods to you, or we may share information with service delivery companies to enable them to provide quotations or deliver their services.
The only other time your data may be shared is if we are required to do so by law, in connection with any legal proceedings or in order to establish, exercise or defend our legal rights.
How do we protect your personal data?
To maintain the security of your personal data, we implement technical and organisational measures that are appropriate to the risks associated with the loss or any illegal processing of your personal information. Information is stored at our head office and at our data centre that are both located in the UK.
How long will we hold your personal data for?
If you have entered into a contract with us, we will retain your personal data for a minimum of seven years after the cessation of the contract. Otherwise, we will delete your personal data twenty-four months after our last contact or attempted contact with you.
What are your rights in relation to the personal data that we hold?
As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email: email@example.com.
In order to process your request, we may ask you to provide a valid form of identification for verification purposes. Your rights are as follows:
The right to be informed
The right of access
You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity, we will provide access to the personal data we hold about you within a month of your request.
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If answering requests is likely to require additional time or unreasonable expense, we will inform you.
The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
The right to erasure (the ‘right to be forgotten’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data we hold. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:
- The accuracy of the personal data is contested
- Processing of the personal data is unlawful
- We no longer need the personal data for processing but the personal data is required for part of a legal process
- The right to object has been exercised and processing is restricted pending a decision on the status of the processing
The right to data portability
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
The right to object
You have the right to object to our processing of your data where:
- Processing is based on legitimate interest
- Processing is for the purpose of direct marketing
- Processing is for the purposes of scientific or historic research
- Processing involves automated decision-making and profiling
The rights related to automated decision making
You have the right to be notified if we are using automated decision making. We may, at times, run credit checks to ensure your credit history is viable.
How can you contact us?
We can be contacted in writing, please address to Managing Director, Office Club Limited, Building 3, Building Research Establishment, Watford, Herts WD25 9PR, by email to firstname.lastname@example.org.
Making a complaint
Should you wish to discuss a complaint, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner.
Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to the Information Commissioner’s Office (ICO), who is our lead supervisory authority:
Tel: 0303 123 1113
Address: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF