Privacy Policy - Chemco UK

Who we are
The information we collect about you
Legal basis for processing your data
When and how we collect information about you
Protecting your data
Purpose for processing your data
Who we share your information with
Processing your information outside the UK
How long will we hold your information
How to exercise your information rights (including the right to object)
Cookies
How to contact us and/or Our Data Protection Officer/Lead
Changes to this notice

1. Who we are

Chemco UK Limited Privacy Statement refers to our commitment to our compliance to data protection legislation including The Data Protection Act 2018.

Throughout this document “we”, “us”, “our” and “ours” refers to Chemco UK Limited. Our registered address is Resource House, High Street, Brackley, Northants, NN13 7DS, United Kingdom.

2. The information we collect about you

We collect and process your personal data in the course of business (sales and after-sale support), and for hiring personnel, contractor details. This personal data includes any offline physical data or online data that makes a person identifiable.
We process data for the following groups of individuals (current and former):

Job Candidates
Sales Leads
Customers
Contractors
Outsourced Service Providers
Other Parties whose personal data is processed by us.
We are the controller for the personal information we process, unless otherwise stated.

3. Legal basis for processing your data

We collect your data based on the following legal basis:

Consent
Where you have explicitly agreed to us processing your information for a specific reason such as for us to take photos or videos for promotional purposes.

Where consent is relied upon as a basis for processing of any personal data, you will be presented with an option to agree or disagree with the collection, use or disclosure of personal data. Once consent is obtained, it can be withdrawn at any stage.

Contract
Contract only staff/contract drivers/temporary staff/builders where you have entered into a service with us and the processing is necessary to perform this service

Compliance
The processing is necessary for compliance with a legal obligation we have such as keeping records for revenue or tax purposes or providing information to a public body or law enforcement agency; we may be required to process certain data to carry out our obligations under employment, social security or social protection law; the processing is necessary for the establishment, exercise or defence of legal claims

Legitimate interest
Processing is necessary for the purposes of a legitimate interest pursued by us to safeguard the safety and security of our employees, property, and clients, buildings, information located or stored on the premises, and assets, and those of service providers, consultants, and advisors that assist us in carrying out its functions. To prevent fraud, to inform recruitment decisions taken about appointments and new hires. To operate our business generally and manage and administer our services to clients, suppliers and potential candidates

From time to time we may conduct customer satisfaction surveys. Where we do so we rely on the lawful processing of legitimate interest to enhance our service delivery. When completing your sales contract, under the data protection section, you will be presented with an option to opt out of such surveys.

4. When and how we collect information about you

You directly provide us with most of the data we collect. We collect data and process data when you:

Place an order for any of our products or services
Voluntarily complete a customer survey or via email
Use or view our website via your browser’s cookies

As part of our services, we need to obtain and process personal data as required where necessary to provide our services such as:

Types of Personal Data (i.e. any information relating to an identified or identifiable person)

Types of Personal Data (i.e. any information relating to an identified or identifiable person)
Demographic Data	name
Contact Details	we collect either home or work details whichever you provide home/work landline phone number, personal/work mobile, home/work postal address, personal/work email address
Financial Data	Supplier bank account number
Digital Identifiers	IP Address, cookie identifier
Social Media	URL LinkedIn
Government Identifiers	driver’s licence, income tax number
Onsite	Health Questionnaires
Contractors	Training records, safe pass, manual handling, ADR licence

We may also receive your data indirectly from recruitment agencies.

5. Protecting your data

We collect this data in a transparent way and only with the full knowledge of interested parties. Once this information is available to us, the following rules apply.

Our data will be:

Accurate and kept up-to-date
Collected fairly and for lawful purposes only
Processed by us on the basis of either a valid contract, consent, legal compliance or legitimate interest
Protected against any unauthorised access or illegal processing by internal or external parties.

Our data will not be:

Communicated to any unauthorised internal or external parties
Stored for longer than required for the purpose obtained
Transferred to organisations, states or countries outside the UK without adequate safeguards being put in place as required under Data Protection Law.

Our commitment to protect your data:

Restrict and monitor access to sensitive data
Develop transparent data collection procedures
Train employees in data protection and security measures
Build secure networks to protect online data from cyberattacks
Establish clear procedures for reporting privacy breaches or data misuse
Establish data protection practices (document shredding, secure locks, data encryption, frequent backups, access authorisation etc.).

6. Purpose for processing your data

You agree that any data you provide to us will be true, complete and accurate in all respects and you agree to notify us immediately of any changes to it. We will only collect personal information from or about you which is necessary for the following purposes:

General

To provide this website to you and respond to your queries
To comply with all relevant law
To manage your safety and security while you are on our premises
To facilitate the prevention, detection and investigation of crime and the apprehension or prosecution of offenders
To investigate, exercise or defend legal claims or other claims of a similar nature.

Sales Leads and Customers

To provide quality chemical logistics and distribution services, and after sales services, to you
Set up and administer your account as a customer with us
To maintain our relationship with you whilst you are a customer and investigate any complaints or disputes or accidents
Provide you with information relating to our services
Provide you with information relating to products provided
To provide essential communication with you, including to respond to information requests submitted
To obtain your feedback on our products and services
To notify you about changes to contracted services relevant to you
To obtain credit references, credit checks and for debt collection, fraud detection and prevention and risk management purposes
To liaise with the relevant employees of the customer throughout the various stages of the products and services provided

Contractors

Set up, avail of your services, contact you and administer our account as a customer with us formally, currently and in the future.

Outsourced service providers

Set up, avail of your services, contact you and administer our account as a customer with us formally, currently and in the future.

Candidates for Jobs

To select suitable candidates for employment with us formally, currently and in the future.

7. Who we share your information with

Your personal information may also be processed by other organisations on our behalf for the purposes outlined above. We may disclose your information where necessary to the following:

HM Revenue & Customs, Department for Work and Pensions (DWP), Information Commissioner’s Office (ICO), outsourced Employment Law advisors, pension brokers & trustees, legal advisors, business advisors, financial and leasing institutions, law enforcement, Police, debt collectors, IT providers, couriers, shredding company, security company, printing company, CCTV company, administration services, accountant/auditors, insurers, recruitment agents, client and end user of the products, marketing consultants or subcontractors and to possible successors to our business.

We may share employees and contractor details with our client(s) and end users of the products.

8. Processing your information outside the UK

Some of third parties we share your data with may reside outside the United Kingdom (UK). If we do this, your information will be treated to the same standards adopted in the UK and include the following data protection transfer mechanisms:

Model Clauses (also known as Standard Contractual Clauses) are standard clauses in our contracts with our service providers to ensure that any personal data leaving the UK data-protection law (UK GDPR). Copies of our current Model Clauses are available on request.
Transfers to countries outside the UK which have an adequate level of protection as approved by the Information Commissioner’s Office (ICO) (such as EEA states).
Transfers permitted in specific situations where a derogation applies as set out in Article 49 of the UK GDPR. For example, where it is necessary to transfer information to a non-EEA country to perform our contract with you.

9. How long will we hold your information

We will only retain personal data for as long as necessary for the purposes for which it was collected as required by law or regulatory guidance to which we are subject or to defend any legal actions.

10. How to exercise your information rights (including the right to object)

Erasure

When have I the right to all my personal data being deleted by Chemco UK?

You have the right to have your personal data deleted without undue delay if:

The personal data is no longer necessary in relation to the purpose(s) for which it was collected/processed
You are withdrawing consent and where there is no other legal ground for the processing
You object to the processing and there are no overriding legitimate grounds for the processing
The personal data has been unlawfully processed
The personal data must be erased so that we are in compliance with legal obligation
The personal data has been collected in relation to the offer of information society services with a child.

What happens if Chemco UK has made my personal data public?

If we have made your personal data public, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform those who are processing your personal data that you have requested the erasure.

What happens if Chemco UK has disclosed my personal to third parties?

Where we have disclosed your personal data in question to third parties, we will inform them of your request for erasure where possible. We will also confirm to you details of relevant third parties to whom the data has been disclosed where appropriate.

Data portability

When can I receive my personal data in machine readable format from Chemco UK?

You will receive your personal data concerning you in a structured, commonly used and machine-readable format if:

processing is based on consent or contract
processing is carried out by automated means.

Would Chemco UK transfer the personal data to another service provider if I requested this?

We can transfer this data to another company selected by you on your written instruction where it is technically feasible taking account of the available technology and the feasible cost of transfer proportionate to the service we provide to you.

Under what circumstances can Chemco UK refuse?

You will not be able to obtain, or have transferred in machine-readable format, your personal data if we are processing this data in the public interest or in the exercise of official authority vested in us.

Will Chemco UK provide me with my personal data if the file contains the personal data of others?

We will only provide you with your personal data, ensuring we protect the rights and freedoms of others. Where personal data of another person may be on the same files as yours, we will redact the full details of the other person.

Automated individual decision making

What are my rights in respect of automated decision making?

Chemco UK does not have any automated decision-making processes. Where any such processes are introduced, we will provide you with the relevant information required under the “General Data Protection Regulation”.

Object

Have I already been informed about my right to object?

We have informed you of your right to object prior to us collecting any of your personal data as stated in our privacy statement.

When can I object to Chemco UK processing my personal data?

You can object on grounds relating to your situation

Chemco UK will stop processing your personal data unless:

we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms
the processing is for the establishment, exercise or defence of legal claims.

What are my rights to object for direct marketing purposes?

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, we will no longer process this data for such purposes.

What are my rights to object in the use of information society services?
In the context of the use of information society services, you may exercise your right to object by automated means using technical specifications.

Restrict processing

When can I restrict processing?

You may have processing of your personal data restricted:

While we are verifying the accuracy of your personal data which you have contested
If you choose restricted processing over erasure where processing is unlawful
If we no longer need the personal data for its original purpose but are required to hold the personal data for defence of legal claims
Where you have objected to the processing (where it was necessary for the performance of a public interest task or purpose of legitimate interests), and we are considering whether our legitimate grounds override.

What if Chemco UK has provided my personal data to third parties?

Where we have disclosed your personal data in question to third parties, we will inform them about the restriction on the processing, unless it is impossible or involves disproportionate effort to do so.

How will I know if the restriction is lifted by Chemco UK and/or relevant third parties?

We will inform on an individual basis when a restriction on processing has been lifted.

Rectification

What can I do if Chemco UK is holding incorrect personal data about me?

Where you suspect that data we hold about you is inaccurate, we will on demand rectify any inaccuracies without undue delay and provide confirmation of same.

What happens if Chemco UK has disclosed my personal to third parties?

Where we have disclosed inaccurate personal data to third parties, we will inform them and request confirmation that rectification has occurred. We will also provide you with details of the third parties to whom your personal data has been disclosed.

Withdraw consent

Under what circumstances could I withdraw consent?

You can withdraw consent if we are processing your personal data based on your consent.

When can I withdraw consent?

You can withdraw consent at any time.

If I withdraw consent what happens to my current data?

Any processing based on your consent will cease upon the withdrawal of that consent. Your withdrawal will not affect any processing of personal data prior to your withdrawal of consent, or any processing which is not based on your consent.

Lodge a complaint

Can I lodge a complaint with the Data Protection Commission?

You can lodge a complaint with the Data Protection Commission in respect of any processing by or on behalf of Chemco of personal data relating to you.

How do I lodge a complaint?

Making a complaint is simple and free. All you need to do is write to the Data Protection Commission giving details about the matter. You should clearly identify the organisation or individual you are complaining about. You should also outline the steps you have taken to have your concerns dealt with by the organisation, and what sort of response you received from them. Please also provide copies of any letters between you and the organisation, as well as supporting evidence/material.

What happens after I make the complaint?

The Data Protection Commission will then take the matter up with Chemco UK on your behalf.

Access your data

When do I have the right to access my personal data from Chemco UK?

Where Chemco UK process any personal data relating to you, you have the right to obtain confirmation of same from us, and to have access to your data.

What information will Chemco UK provide to me?

If we are processing your personal data, you are entitled to access a copy of all such personal data processed by us subject to a verification process to ensure we are communicating with the correct person. We will provide any of the following information:

why we are processing your personal data
the types of personal data concerned
the third parties or categories of third parties to whom the personal data have been or will be disclosed. We will information you if any of the third parties are outside the UK or international organisations.
how your personal data is safeguarded where we provide your personal data outside the UK or to an international organisation.
the length of time we will hold your data or if not possible, the criteria used to determine that period
your rights to:
request any changes to inaccurate personal data held by us
have your personal data deleted on all our systems
restriction of processing of personal data concerning you
to object to such processing
data portability
your right to lodge a complaint with the Information Commissioner’s Office (ICO) icocasework@ico.org.uk
where we have collected your personal data from a third party, we will provide you with the information as to our source of your personal data
any automated decision-making, including profiling which includes your personal data. We will provide you with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

What Information is not provided?

Business Information pertaining to your role as an employee

How long will it take to receive my personal data from Chemco UK?

We will provide you with a copy of the personal data we are currently processing within one month of request. In rare situations if we are unable to provide you with the data within one month we will notify you, within one month of your valid request, explaining the reason for the delay and will commit to delivery within a further two months.

How much will it cost me to receive my personal data?

We will not charge for providing your personal data unless we believe the request is excessive and the cost of providing your data is disproportionate to your services provided.

Can I request additional copies of my personal data?

If you require additional copies we will charge £20 to cover our administrative costs.

Can I receive my personal data electronically?

You can request your personal data by electronic means and we will provide your personal data in a commonly used electronic form if technically feasible.

What will Chemco UK do if another person’s personal data is shared with my personal data?

11. Cookies

A cookie is a small piece of text sent to your browser by a website you visit. It helps the site remember information about your visit, which can make it easier to visit the site again and make the site more useful to you.

Below is a list of the cookies used on this website:

Cookie Title	Cookie Description	Cookie Slug	Cookie Type	Cookie Sensitivity	Cookie Duration	Cookie Category
viewed_cookie_policy	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.	viewed_cookie_policy	persistent	necessary	11 months	necessary
cookielawinfo-checkbox-necessary	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category “Necessary”.	cookielawinfo-checkbox-necessary	persistent	necessary	11 months	necessary
cookielawinfo-checkbox-functional	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category “Functional”.	cookielawinfo-checkbox-functional	persistent	necessary	11 months	necessary
cookielawinfo-checkbox-performance	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Performance”.	cookielawinfo-checkbox-performance	persistent	necessary	11 months	necessary
cookielawinfo-checkbox-analytics	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Analytics”.	cookielawinfo-checkbox-analytics	persistent	necessary	11 months	necessary
cookielawinfo-checkbox-others	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Other.	cookielawinfo-checkbox-others	persistent	necessary	11 months	necessary
cookielawinfo-checkbox-advertisement	Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the “Advertisement” category .	cookielawinfo-checkbox-advertisement	persistent	non-necessary	1 year	necessary
ARRAffinitySameSite	This cookie is set by Windows Azure cloud, and is used for load balancing to make sure the visitor page requests are routed to the same server in any browsing session.	ARRAffinitySameSite	persistent	non-necessary	session	necessary
ARRAffinity	ARRAffinity cookie is set by Azure app service, and allows the service to choose the right instance established by a user to deliver subsequent requests made by that user.	ARRAffinity	persistent	non-necessary	session	necessary
_ga	The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.	_ga	persistent	non-necessary	2 years	analytics
_gid	Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website’s performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.	_gid	persistent	non-necessary	1 day	analytics
_gat_gtag_UA_217842906_1	Set by Google to distinguish users.	_gat_gtag_UA_217842906_1	persistent	non-necessary	1 minute	analytics
snazzymaps.com	Set for each session to facilitate the embedding of the map on our Contact page	snazzymaps.com	session	necessary	session	necessary

12. How to contact us and/or Our Data Protection Officer/Lead

There are many ways you can contact us, including by phone, email, and post. More details can be seen here

Our postal address: Chemco UK, Resource House, 76 High Street, Brackley, Northants, NN13 7DS, United Kingdom

13. Changes to this notice

Where changes to this Privacy Statement occur the updated version will be published on our website at www.chemco.co.uk/privacy-policy and where appropriate/possible communicated directly to individuals through a communication channel we deem appropriate.

Cookie	Duration	Description
_ga	1 year 1 month 4 days	Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
_ga_*	1 year 1 month 4 days	Google Analytics sets this cookie to store and count page views.