Privacy Policy

Newbury Electronics Ltd, under company number 647234 and with registered office address of Faraday Road, Newbury, Berkshire, RG14 2AD (“Business”, “we”, “us”, “our”), is registered with the Information Commissioner’s Office (“ICO”) under the registration number ZA715147. Our details can be viewed by visiting the ICO website.

We will process your personal data in accordance with this policy, in the course of providing our services and advice in the areas of Governance, Finance, Human Resources, Payroll and Virtual Offices, including access to our website (“Services”). 

Contact details:

Here at Newbury Electronics Ltd, we are the processor of your personal data, which means that we have direct legal obligations under the data protection laws and that we are subject to regulation by supervisory authorities. We respect and value your privacy and are committed to protecting your personal data. Your personal data will be kept confidential and will never be sold to third parties. We will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

If you have any questions about this policy, please contact our Data Protection Officer via:

E-mail address:                 info@newburyelectronics.co.uk

Changes to the privacy policy and your duty to inform us of changes

We keep our privacy policy under regular review. This version is dated 6^th May 2021, Historic versions can be obtained by contacting us. We may update this privacy policy from time to time. When we change this policy in a material way, we will update the version date. For significant changes to this policy, we will try to give you reasonable notice unless we are prevented from doing so.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third Party Links

The website may include links to third-party websites, plug-ins and application. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Data protection by design and default

We are required by law to put in place appropriate technical and organisational measures to implement the data protection principles effectively, having regard to the nature of our business, and safeguard individual rights. We endeavour to consider our data protection practices upfront in everything we do. It can help us to ensure that we comply with the GDPR’s fundamental principles and requirements in our efforts to ensure transparency and accountability. Please see below how we comply with this obligation:

• We consider data protection issues as part of the design and implementation of systems, services, products and business practices.
• We make data protection an essential component of the core functionality of our processing systems and services.
• We anticipate risks and privacy-invasive events before they occur and take steps to prevent harm to individuals.
• We only process the personal data that we need for our purposes(s), and that we only use the data for those purposes.
• We ensure that personal data is automatically protected in any IT system, service, product, and/or business practice, so that individuals should not have to take any specific action to protect their privacy.
• We provide the identity and contact information of those responsible for data protection both within our organisation and to individuals.
• We adopt a ‘plain language’ policy for any public documents so that individuals easily understand what we are doing with their personal data.
• We provide individuals with tools so they can determine how we are using their personal data, and whether our policies are being properly enforced.
• We offer strong privacy defaults, user-friendly options and controls, and respect user preferences.
• We only use data processors that provide sufficient guarantees of their technical and organisational measures for data protection by design.
• When we use other systems, services or products in our processing activities, we make sure that we only use those whose designers and manufacturers take data protection issues into account.
• We use privacy-enhancing technologies, such as (PETs) to assist us in complying with our data protection by design obligations.

 What is Personal Data?

“Personal data” means any information relating to an identified or identifiable natural person, known as ‘data subject’, who can be identified directly or indirectly; it may include name, address, email address, phone number, IP address, location data, cookies and similar information. It may also include “special categories of personal data” such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a data subject, data concerning health or data concerning a natural person’s sex life or sexual orientation.

How is your personal data collected?

Where we are required to process special categories of personal data relating to data subjects where such data has not been anonymised, we ensure that any transfer to and processing by us is on the lawful transfer basis under the data protection legislation.

Where you purport to transfer personal data relating to any identifiable individual, you must first make sure that you have a lawful basis to do so. If not, you must immediately cease to process any such data and must not transfer it to anyone else.

How do we use your personal data?

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract, we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

Please note that provision of certain personal data is mandatory in order for us to comply with mandatory client due diligence requirements and consequently to provide the Services. If you are unable to provide the relevant personal data required to comply with our legal obligations and/or our terms of business, we may not be able to provide the services to you.

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications (marketing of services which are not specifically tailored to you) to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

Where we have indicated that we use our legitimate business interests or legitimate interests of a third party commercial partner, we always disclose the nature of such interest and process personal data on the basis of such interests only in the circumstances where they are not infringing on data subjects’ rights and freedoms.

We will only process personal data, in accordance with applicable law, for the following purposes (and other compatible purposes):

• responding to your queries, requests and other communications;
• providing the Services, including, where applicable, procuring acts from foreign organisations;
• enabling suppliers and service providers to carry out certain functions on our behalf in order to provide the Services, including web hosting, data storage, identity verification, technical, logistical, courier or other functions as applicable;
• ensuring the security of the Business and preventing or detecting fraud;
• administrating our business, including complaints resolution, troubleshooting of our website, data analysis, testing of new features, research, statistical and survey purposes;
• developing and improving our Services;
• as you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data using cookies and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies.
• complying with applicable law, guidelines and regulations or in response to a lawful request from a court or regulatory body.

If we need to use your data for any unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

How will we share your information?

We share your personal details with:

• people within our organization who are involved in carrying out the processing described above;
• our subsidiaries or associated offices;
• our suppliers and service providers to facilitate the provision of Services, including couriers, translators, IT consultants, web hosting providers, consultants for example, in order to protect the security or integrity of our business, including our databases and systems and for business continuity reasons;
• successor or partner legal entities on a temporary or permanent basis for the purpose of a joint venture, collaboration, financing, sale, merger, reorganisation, change of legal form, dissolution or similar event relating to a Business. In the case of a merger or sale, your personal data will be permanently transferred to a successor company;
• public authorities where we are required by law to do so; and
• any other third party where you have provided your consent.

We will also share your personal information:

• if we think this is necessary to in order to protect the rights, property, or safety of our business, our employees, our partners, or our customers. This includes sharing information for the purposes of fraud protection and credit risk reduction.
• with government authorities and/or law enforcement officials if required by law.

Opting out and updating your personal information

You have the right to withdraw consent at any time. Please note that we may not be able to provide our Services if you withdraw consent for us to use your personal data. You can also update your personal information at any time. If you wish to do either, contact us at info@newburyelectronics.co.uk

You can ask us to stop contacting you with regards to direct marketing at any time by emailing info@newburyelectronics.co.uk or by following the opt-out links on any marketing messages sent to you.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites and or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly. For more information about the cookies we use, please refer to our Cookie Policy.

International transfer of your personal data

Your personal information may be stored and processed outside of the country where it is collected, including outside of the European Economic Area. When transferring information to others, within the EEA or otherwise, we ensure that appropriate and suitable safeguards and technical measures are in place to protect your personal data. To do this, we make use of standard contractual clauses that have been approved by the European Commission, or we implement other similar measures required by laws around the world. If you would like further information about this, please contact us at info@newburyelectronics.co.uk

Retention of personal data

We will only keep records of your personal information for as long as is reasonably necessary for the purposes for which we have collected it, and in order to comply with any statutory or regulatory obligations in relation to retention of records. We respect requests to stop processing your personal data for marketing purposes. This includes keeping a record of your request indefinitely so that we can respect your request in future.

We may keep an anonymized form of data, which will no longer refer to you and therefore is not considered to be personal data, for statistical purposed without time limits.

Security of personal data

We will implement technical and organisational security measures in order to prevent unauthorised access to your personal data. However, please be aware that the transmission of information via the interest is never completely secure. Whilst we can do our best to keep our own system secure, we do not have full control over all processes involved in, for example your use of our website or sending confidential material to us via email, and we cannot therefore guarantee the security of your information transmitted to us on the web.

Data subject rights

Under certain circumstances, you have rights under the relevant data protection laws in relation to your personal information. Your rights are explained below:

• Right to make a subject access request (SAR)

Data subjects may request in writing copies of their personal data. However, compliance with such requests is subject to certain limitations and exemptions and the rights of other data subjects. Each request should make clear that a SAR is being made. You may also be required to submit proof of your identity and payment, where applicable.

• Right to rectification

Data subjects may request that we rectify any inaccurate or incomplete personal data.

• Right to withdraw consent

Data subjects may at any time withdraw their consent to the processing of their personal data carried out by the business on the basis of previous consent.

• Right to object to processing, including automated processing and profiling

We do not make automated decisions. We may use third party due diligence platforms which provide recommendations about data subjects by automated means. We will comply with any data subject’s objection to processing unless we have a compelling overriding legitimate ground for the processing, the processing is for the establishment, exercise or defence of legal claims or we have another lawful reason to refuse such request. We will comply with each valid opt-out request in relation to marketing communications.

• Right to erasure

Data subjects may request that we erase their personal data. We will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping the personal data, such as, our archiving obligations that we have to comply with.

• Restriction

Data subjects may request that we restrict our processing of their personal data in various circumstances. We will comply, unless there is a lawful reason for not doing so, such as, a legal obligation to continue processing your personal data in a certain way.

• Right to data portability

In certain circumstances, data subjects may request the controller to provide a copy of their personal data in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services. To the extent such right applies to the Services, we will comply with such transfer request. Please note that a transfer to another provider does not imply erasure of the data subject’s personal data which may still be required for legitimate and lawful purposes.

• Right to lodge a complaint with the supervisory authority

We suggest that data subjects contact us about any questions or complaints in relation to how we process personal data, however, each data subject has the right to contact the relevant supervisory authority directly

Children’s Privacy:

We (Newbury Electronics Ltd) do not knowingly collect personal information from children under the age of 13. If we find that we have collected personal information on children aged under 13, that data will be deleted.

We suggest parents and guardians guide their children as follows:

Educate children never to give personal information (such as name, address, phone number, school, etc.) unless supervised by a parent or responsible adult.
Get to know the websites your children are visiting and which websites are appropriate.
Look for website privacy policies.
Know how your child’s information is treated.

Do Not Track (DNT):

A Do Not Track (DNT) standard has not been adopted till date, and therefore Newbury doesn’t respond to DNT signals in browsers. We do not share personal data with third parties for any purpose.

What is a DNT signal?
Currently, various browsers (including Internet Explorer, Firefox, and Safari) offer a DNT option that relies on a technology known as a DNT header that sends a signal to websites visited by the browser user about the user’s DNT preference. You can usually access your browser’s DNT option in your browser’s preferences.

Is there a DNT technology standard?
The World Wide Web Consortium (W3C) has been working with industry groups, Internet browsers, technology companies, and regulators to develop a DNT technology standard. While some progress has been made on this issue, it has been slow, and to date no standard has been adopted. Without an industry standard for DNT, users cannot know how any given company abides by a DNT signal they receive from browser headers.

Please visit the government official website for more tips on DNT.