Privacy Policy
Privacy Policy of G A Imports Ltd
Effective Date: 12/12/2024
At G A Imports Ltd, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR).
Please take a moment to read this policy carefully to understand how we handle your information.
1. Who We Are
G A Imports Ltd is a UK-based company that provides timber products. We are the data controller for the personal data we process, meaning we are responsible for ensuring your data is processed lawfully, transparently, and securely.
Our contact details are as follows:
Company Name: G A Imports Ltd
Registered Address: Unit 6 Bluebridge Industrial Estate, CO9 2EX
Email: sales@gaimports.co.uk
Phone Number: 01787479914
If you have any questions about how we process your data or would like to exercise any of your rights, please contact us.
2. Information We Collect
We collect personal data that is necessary for our business operations. The types of personal data we may collect include:
Personal Identification Information: Name, postal address, email address, phone number.
Business Information: Business name, sales order history, invoices.
Transaction Information: Payment details, purchase history.
We may also collect information when you interact with us via our website, email, phone, or in person.
3. How We Use Your Information
We process your personal data for the following purposes:
To process transactions: We use your personal data to manage orders, invoices, and payment processing.
To communicate with you: We use your contact details to send you important information about your orders or services, respond to inquiries, and provide customer support.
To improve our services: We may use your data to analyse trends, identify potential improvements, and optimize the services we provide.
To comply with legal obligations: We may retain certain information for legal, regulatory, or tax purposes.
4. Legal Basis for Processing Your Data
We will process your personal data only where we have a lawful basis for doing so, in accordance with the UK GDPR. The legal bases we rely on include:
Consent: Where we have obtained your consent (e.g., for marketing communications).
Contractual Necessity: For the performance of a contract, such as processing orders and payments.
Legal Obligation: To comply with legal requirements (e.g., retaining invoices for tax purposes).
Legitimate Interests: For activities such as improving our services and communicating with you in a way that is not intrusive or excessive.
5. Sharing Your Data
We do not sell or rent your personal data to third parties. However, we may share your data with trusted third-party service providers for the purposes outlined in this Privacy Policy, such as:
Payment processors to facilitate payment transactions.
Delivery companies for shipping orders.
IT service providers that support our systems and infrastructure.
Legal or regulatory authorities, where required by law.
We ensure that any third-party providers we work with are compliant with data protection laws and only process your data for the purposes we have specified.
6. Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected. For example:
Invoices and sales order history will be kept for up to 6 years to comply with tax and accounting requirements.
Customer data will be kept for as long as you remain a customer and for a reasonable period afterward, in case of any future inquiries or issues.
Once the data is no longer needed, we will securely delete or anonymise it.
7. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request corrections if the data we hold is inaccurate or incomplete.
Right to Erasure: You can request that we delete your personal data, subject to certain conditions.
Right to Restrict Processing: You can request that we limit how we process your data.
Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to certain types of processing, such as marketing or profiling.
If you wish to exercise any of these rights, please contact us using the details provided above. We will respond to your request in accordance with UK GDPR requirements.
8. Security of Your Data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, use, or disclosure. These measures include:
Password protection for access to sensitive data.
Encryption of data during transit and at rest.
Access restrictions to ensure only authorised personnel can access your data.
Regular security audits to identify and mitigate risks.
9. Automated Decision Making and Profiling
We do not engage in any automated decision-making or profiling that produces legal effects or otherwise significantly affects individuals. If we were to use such processing in the future, we would ensure that it complies with the requirements of the UK GDPR and that individuals are informed.
10. Use of Meta Business Tools and Data Sharing
We use Meta Business Tools, including the Meta Pixel, to collect and share certain information with Meta Platforms, Inc. and its affiliates ("Meta"). This data helps us measure the effectiveness of our advertising campaigns and provide relevant content to users. The types of information shared with Meta via these tools include:
Contact Information:
This includes personal information such as names, email addresses, and phone numbers that we may use for matching purposes only.
Contact Information is hashed (anonymised) before being transmitted to Meta to enhance security.
Event Data:
This includes information about user actions on our website or app, such as visits, purchases, and other interactions.
Event Data does not include information created when individuals interact with Meta's platform, such as logging in via Facebook Login or using Social Plugins (e.g., the Like button).
How We Comply with UK Laws (Including GDPR)
To ensure compliance with the UK General Data Protection Regulation (UK GDPR) and other applicable laws:
Lawful Basis for Data Processing: We only share Business Tool Data with Meta if we have a lawful basis for processing, such as your consent or legitimate interest.
Transparency and User Rights: You have the right to know what data is collected and shared, request access to your personal data, or withdraw consent at any time.
Data Minimisation: We only share data that is necessary for the purposes outlined in this Privacy Policy.
Data Security: Meta implements processes and safeguards to ensure the confidentiality, integrity, and security of Business Tool Data.
Children’s Data: We do not knowingly share data about children under the age of 13, nor do we share sensitive data, such as health or financial information.
Your Rights
You have the following rights under UK data protection laws:
To request access to or deletion of your personal data.
To object to data processing based on legitimate interest.
To file a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.
Marketing Emails and Unsubscribe Options
We may use your email address to send you marketing communications about our products, services, or promotions. However, you have the right to unsubscribe from these communications at any time.
To unsubscribe:
Click the "Unsubscribe" link at the bottom of any marketing email you receive from us.
Please note that even if you unsubscribe from marketing emails, we may still send you transactional or service-related emails, such as order confirmations or important account updates.
To exercise your rights, please contact us at sales@gaimports.co.uk.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices or legal obligations. When we make changes, we will update the Effective Date at the top of the policy and notify you where necessary.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, or if you would like to exercise any of your rights regarding your personal data, please contact us:
Email: sales@gaimports.co.uk