VLC (Stairlifts Ltd trading as Versatile Lift Company (VLC) is committed to protecting your privacy and security. This policy explains how and why we use your personal data, to ensure you remain informed and in control of your information.
The General Data Protection Regulation (GDPR) that came into force in May 2018, means that VLC do not routinely use any data it collects for marketing purposes. Therefore if we do require to use any data for these purposes will contact the individuals concerned for consent about how we can contact you. This means you’ll have the choice as to whether you want to receive these messages and be able to select how you want to receive them (email, phone, SMS or post).
You can decide not to receive communications or change how we contact you at any time.
We will never sell your personal data, and will only ever share it with organisations we work with where necessary and if its privacy and security are guaranteed.
Any questions you have in relation to this policy or how we use your personal data should be sent to firstname.lastname@example.org or addressed to The Data Protection Lead, 366 Church Rd, Haydock, WA11 0LG
2. ABOUT US
Your personal data (i.e. any information which identifies you, or which can be identified as relating to you personally) will be collected and used by VLC.
3. WHAT INFORMATION WE COLLECT
We collect data you provide to us. This includes information you give when requesting information, placing an order or communicating with us.
- personal details (name, date of birth, email, address, telephone etc.);
- financial information (payment information such as credit/debit card or direct debit details. Please see section 8 for more information on payment security);
Information from third parties
We receive personal data about individuals from third parties. For example, if we are contracted to provide services with another organisation (e.g. you provide your information to a Council or Housing Trust we work with to provide services). Also, as explained in Section 11 (Cookies and links to other sites).We may collect information from social media where you have given us permission to do so, or if you post on one of our social media pages.
Sensitive personal data
We only collect or store sensitive personal data, such as information relating to health when this is required to provide our services. If this does occur, we’ll take extra care to ensure your privacy rights are protected.
Accidents or incidents
If an accident or incident occurs on our property or involving one of our staff away from our property then we’ll keep a record of this(which may include personal data and sensitive personal data).
4. HOW WE USE INFORMATION
We only ever use your personal data with your consent, or where it is necessary in order to:
- enter into, or perform, a contract with you;
- comply with a legal duty;
- protect your vital interests;
- for our own (or a third party’s) lawful interests, provided your rights don’t override the these.
In any event, we’ll only use your information for the purpose or purposes it was collected for (or else for closely related purposes):
5. DISCLOSING AND SHARING DATA
We will never sell your personal data. If you have opted-in to marketing, we may contact you with information about our partners, or third party products and services, but these communications will always come from VLC and are usually incorporated into our own marketing materials (e.g. advertisements in magazines or newsletters).
We may share personal data with subcontractors or suppliers who provide us with services. However, these activities will be carried out under a contract which imposes strict requirements on our supplier to keep your information confidential and secure.
Occasionally, where we partner with other organisations, we may also share information with them. We’ll only share information when necessary and we’ll make sure to notify you first.
Since 25 May 2018, VLC ask its customers to “opt-in” for most communications. This includes all our marketing communications.
This means you’ll have the choice as to whether you want to receive these messages and be able to select how you want to receive them (post, phone, email, text).
When you receive a communication, we may collect information about you respond to or interact with that communication, and this may affect how we communicate with you in future.
7. HOW WE PROTECT DATA
We employ a variety of physical and technical measures to keep your data safe and to prevent unauthorised access to, or use or disclosure of your personal information.
Electronic data and databases are stored on secure computer systems and we control who has access to information (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data protection procedures which personnel are required to follow when handling personal data.
VLC complies with the payment card industry data security standard (PCI-DSS) published by the PCI Security Standards Council, and will never store card details.
Where we store information
VLC are based in the UK and we store our data within the European Union. Some organisations which provide services to us may transfer personal data outside of the EEA, but we’ll only allow them to do if your data is adequately protected.
For example, some of our systems use Microsoft products. As a US company, it may be that using their products result in personal data being transferred to or accessible from the US. However, we’ll allow this as we are certain personal data will still be adequately protected (as Microsoft is certified under the USA’s Privacy Shield scheme).
How long we store information
We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored for depends on the information in question and what it is being used for. For example, if you ask us not to send you marketing emails, we will stop storing your emails for marketing purposes (though we’ll keep a record of your preference not to be emailed).
We continually review what information we hold and delete what is no longer required. We never store payment card information.
10. KEEPING YOU IN CONTROL
We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- the right to confirmation as to whether or not we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as subject access request);
- the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason);
- the right to have inaccurate data rectified;
- the right to object to your data being used for marketing or profiling; and
- Where technically feasible, you have the right to personal data you have provided to us which we process automatically on the basis of your consent or the performance of a contract. This information will be provided in a common electronic format.
Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.
If you would like further information on your rights or wish to exercise them, please write to our Data Protection Lead at VLC, Unit A1, Redgate Road, South Lancs Industrial Estate, Ashton-in-Makerfield WN4 8DT or email email@example.com
You can complain to VLC directly by contacting our data protection lead using the details set out above. If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you can complain to the UK Information Commissioner’s Office which regulates and enforces data protection law in the UK. Details of how to do this can be found at www.ico.org.uk
11. COOKIES AND LINKS TO OTHER SITES
Our website uses local storage (such as cookies) to provide you with the best possible experience and to allow you to make use of certain functionality (such as being able to shop online). Further information can be found in our Cookies Policy at www.versatileliftcompany.co.uk/cookiepolicy.
Links to other sites
Our website contains hyperlinks to many other websites. We are not responsible for the content or functionality of any of those external websites (but please let us know if a link is not working by using the ‘Contact us’ link at the top of the page).
When purchasing goods or services from any of the businesses that our site links to, you will be entering into a contract with them (agreeing to their terms and conditions) and not with VLC.