Privacy Statement For Customer, Supplier and Business Partner Data
1. Introduction
This is the Privacy Statement for customer, supplier and business partner data. This Privacy Statement provides information on the processing of personal data by CYO Seeds (Midlands) Ltd hereafter referred to as CYO, we or us.
The primary purpose of this Privacy Statement is to be a dynamic resource and business tool so that we can offer our services to you in the best possible way. We want you to feel secure when dealing with us and are committed to maintaining your privacy when doing so.
This Privacy Statement may be changed over time. The most up-to-date Privacy Statement is published on our website. This Privacy Statement was last changed on 25/05/2018.
2. When does this privacy statement apply?
This Privacy Statement is applicable to the processing by CYO of all personal data of its customers, suppliers and business partners and other individuals. This Privacy Statement does not address the processing of personal data of employees in the context of their employment relationship with us.
3. Who is responsible for your personal data?
CYO is the controller of the processing of all personal data that falls within the scope of this Privacy Statement. This Privacy Statement indicates what personal data is processed by CYO and for what purpose, and to which persons or entities the data will or may be provided.We will only collect information that you voluntarily give us. We will not sell or rent this information to anyone.
We will use the personal information you supply to deal with your enquiry or order. We will not share your information with any third party outside of our organisation, other than as necessary to fulfil your request or if we are legally obliged to do so.
4. For which purposes do we process your personal data?
As a company pursuing our business activities, we process your data to pursue our legitimate business interests.
4.1 When you contact or do business with us
(a) For enquires, orders and account operation
(i) What does this purpose entail?
When you get in contact with CYO, we will process your personal data for assessment and acceptance purposes, for example in order to confirm and verify your identity. CYO will further process your personal data for other administrative purposes such as due diligence and screening against publicly available government and/or law enforcement agency sanctions lists.
When you have purchased a product or service from us as a customer, or when you work together with us as a supplier or business partner, we process your personal data for administrative purposes such as sending invoices and making payments. We also use your personal data in order to deliver or receive and administer our or your products or services. CYO will process your personal data in order to further execute our agreement, including for the delivery of customer services.
If you get in touch with us either via the contact form on our website, email, post or phone we will use your personal data in order to reply to and answer your question.
(ii) On what legal ground do we process personal data for this purpose?
We process personal data for this purpose because this is necessary for the conclusion of a contract between you and us or to adequately answer your questions. We cannot enter into contracts without obtaining the required information.
(iii) Which personal data do we process for this purpose?
For these purposes, we may process your contact details such as your address, phone number and email address, personal details such as your name, payment and credit information and details of your correspondence with us, and any other personal data you have provided which is necessary to answer your question or complete your order.
(b) For relationship management and marketing
(i) What does this purpose entail?
CYO uses the information stored in its customer database to send you suitable newsletters, as well as to provide customer services and perform account management.
(ii) On what legal basis do we process personal data for this purpose?
When sending you newsletters and/or other relationship management letters, we process personal data based on your consent or legitimate interest.
(iii) Which personal data do we process for this purpose?
For this purpose, we process your contact details such as your address and email address, personal details such as your name, contact preferences and correspondence with us.
(c) For business process execution and internal management
(i) What does this purpose entail?
We process your personal data in the performance and organisation of our business. This includes general management, order management. CYO also processes your personal data for its internal management. We conduct audits and investigations, implement business controls, and manage and use customer, supplier and business partner directories. Also, we process your personal data for finance, accounting, archiving, legal and business consulting and in the context of dispute resolution.
(ii) On what legal ground do we process personal data for this purpose?
We process personal data for this purpose based on our legitimate interest to maintain and improve sound business operations.
(iii) Which personal data do we process for this purpose?
For this purpose, we process your contact details such as your address and email address, personal details such as your name, payment and credit information, payment and order history, correspondence with CYO and data generated during the performance of the agreement between you and CYO.
4.2 When you use our Website
(i) What does this purpose entail?
The only personal data we collect from our website is that you provide via our contact us form.
If you use our CYO Website it uses cookies to function but these do not collect any personal data. Other cookies allow google analytics to function but we collect no personal data from this and believe google do not either but we have no control over Google so recommend you check their policy regularly. : https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
(ii) On what legal ground do we process personal data for this purpose?
We process personal data for this purpose because this is necessary to adequately answer your questions.
(iii) Which personal data do we process for this purpose?
For this purpose, we process the personal data you have entered into our contact form and that required to adequately answer your questions.
5. Cookies
Below you will find a list of the cookies used on our website.
| Cookie
|
Name
|
Purpose
|
|---|---|---|
| surfer, visit
|
surfer, visit
|
These cookies allow the website to identify distinct visitors to store items added to a basket or other form mechanism within a session
|
| __utma, __utmb, __utmc, __utmz, __utmv
|
__utma, __utmb, __utmc, __utmz, __utmv
|
These cookies enable the function of Google Analytics. This helps us collect and analyse visitor information such as browser usage, new visitor numbers, response to marketing activity and shopping times. That information helps us to improve the website and your shopping experience, and to make our marketing campaigns relevant.
|
6. Who has access to your personal data?
6.1 Access to your personal data within CYO.
CYO employees are authorised to access personal data only to the extent necessary to serve the applicable purpose and to perform their jobs.
6.2 Access to your personal data by third parties
The following third parties have access to your personal data, where relevant, for the operation of our business or services: Our accountants.
When third parties are given access to your personal data, CYO will take the required contractual, technical and organisational measures to ensure that your personal data is only processed to the extent that such processing is necessary. The third parties will only process your personal data in accordance with applicable law.
We do not transfer data outside the EU.
In other cases, your personal data will not be supplied to third parties, except where required by law.We may be required to disclose your information by law or where a court, the police or other enforcement agency has asked for it.
7. How Is your personal data secured?
CYO has taken safeguards to ensure the confidentiality and security of your personal data. CYO has implemented appropriate technical, physical and organisational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access, as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing. Examples are IT security, staff training and secure servers.
8. How long do we retain your personal data?
Your personal data will be retained for a minimum of 7 years for accounting and business purposes. Some data may be retained longer if we are legally obliged. You can request removal from our mailing list at any time by contacting us.
9. Questions or requests for access, correction and removal
You can request access, correction, restriction, portability or removal of the data that CYO processes about you at any time.
If you have any concerns or complaints about how we are handling your data please do not hesitate to get in touch with us.
You have right to make a complaint with the Information Commissioner www.ico.org.ukif you think that any of your rights have been infringed by us.
10. Contact information
phone: 01858 880882
email: info@cyoseeds.com
post: CYO Seeds (Midlands) Ltd, Station Road, North Kilworth, Lutterworth, LE17 6JB
