Jubilee Direct LTD Data Policy May 2018
This data policy applies specifically to data that is collected with permission when setting up an account with Jubilee Direct Ltd (Jubilee) or contacting us for sales queries.
Jubilee will be what’s known as the ‘Controller’ of the personal data you provide to us. We are registered with the ICO and our data registration number is CSN5974918.
We only collect data about you that is required for the purposes of creating and completing orders with Jubilee. This includes name, address, email, phone number, business name and address. It might also include personal address if that is where you have specified a delivery to go in the event of your personal address also being your business address. This will be a one time purpose.
Why we need your data
We need to know your basic personal data in order to provide you with our office supplies ordering service in line with this overall contract. We will not collect any personal data from you that we do not need in order to provide and oversee this service to you.
What we do with your data
All the personal data we process is processed by our staff in the UK. For the purposes of IT hosting and maintenance this information is hosted with Microsoft within the UK – the data will be spread across a number of different data centres. They do not give out the location information of their data centres.
We use 3rd party vendors who we give specific data to in order to process and deliver your orders you have placed with us. These third parties do not have access to any of your data –they only SPECIFICALLY need your name, delivery address and in some cases where you have specified, a phone number to contact you for delivery. Our third party vendors do not have access to your account with us.
We have a Data Protection policy in place to oversee the effective and secure processing of your personal data. More information on this framework can be found on our website.
We do not and never will sell your data or pass your data on to any party outside of our third party agreements for order processing and fulfilment.
How long we keep your data
We are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it will be destroyed. Your information we use for marketing purposes will be kept with us until you notify us that you no longer wish to receive this information. Please contact kirsten@Jublieedirect.co.uk to request your data to be deleted from marketing activities.
What we would also like to do with your data
We would however like to use your name and email address to inform you of our future offers and similar products. This information is not shared with third purposes and you can unsubscribe at any time via phone, email or our website. Please indicate below if this is something you would like to sign up to.
What are your rights?
If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated. Please contact our data controllers Kirsten Medder and Rachel Edgeson at firstname.lastname@example.org and email@example.com
For how to request your data, please read https://ico.org.uk/for-the-public/personal-information/
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office https://ico.org.uk/