Privacy Policy

Who we are

Strongdor Limited is a manufacturer and stockist of British and European steel door-sets.

Our website address is:

https://www.strongdor.com

The website is owned and managed by

Strongdor Limited
Oakwood Way,
Carnforth Business Park,
Carnforth
LA5 9FD

Tel. 01524 727000
Email: [email protected]

Unless otherwise stated any reference to Strongdor Limited shall take the form of ‘We’.

What personal data we college and why we collect it

Sometimes we will need to collect certain types of information in order to provide information about the service or product you have requested.

We will only collect information that is necessary for that purpose. By default our while our website does collect tracking information, it does not collect personal, sensitive information.

We collect personal information in a number of ways (see “How we collect personal data,” below). Some of the information we collect may include the following:

Identity Data: including first name, last name, username or similar identifier, title, date of birth and gender.
Company Data: including job title, company name, company address, phone and fax number, the relationship with Strongdor
Contact Data: including billing address, delivery address, email address and telephone numbers.
Financial Data: including bank account and payment card details.
Transaction Data: including details about payments to and from you and other details of products and services you have purchased from us.
Technical Data: including your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile Data: including your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
Usage Data: including information about how you use our website, products and services.
Marketing and Communications Data: including your preferences in receiving marketing from us and our third parties and your communication preferences.

How we collect personal data

We collect data in several different ways:

Direct interaction. You give us your personal data by filling in forms or by corresponding with us by post, phone, email or through the website. This includes personal data you provide when you: make enquiries about Strongdor products or services; apply for or purchase Strongdor products or services; visit our website or submit a form using our website; subscribe to our publications and newsletters; request marketing be sent to you; enter a competition, promotion or survey; give us a business card (or similar); give us some feedback.
Electronic communications: This occurs when we exchange emails, have telephone conversations or other electronic communications with Strongdor employees, our information technology systems will record details of those conversations, sometimes including their content.
CCTV: For security and safety purposes, our head office has a closed circuit TV system which may record you if you visit us.
Business relationships: If we have a business relationship with the organisation that you represent, your colleagues or other business contacts may give us information about you such as your contact details or details of your role in the relationship.
Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
Third parties or publicly available sources: We may receive personal data about you from various third parties (and public sources) as follows:

For anti-money-laundering, background checking and similar purposes, and to protect our business and comply with our legal and regulatory obligations.
Technical Data from analytics providers such as Google LLC based outside the EU, search information providers such as Google LLC and Microsoft Corporation based outside the EU.
Contact, Financial and Transaction Data from providers of technical, payment and delivery services
Identity and Contact Data from data brokers or aggregators
Identity and Contact Data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.

How we use your personal data

We will only use your personal data when the law allows and where you have given us your express consent to do so. You have the right to withdraw consent at any time by contacting our Data Protection Officer. We will use you personal data if we need to perform a contract to which you are a party or are about to be a party; where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; Where we need to comply with a legal or regulatory obligation and where it is necessary in order to protect your vital interests.

Purposes for which we will use your personal data

Where you have provided your consent:

To send you emails to keep you up to date with the latest special offers, events, services and products.
To supply brochures and other marketing materials to you. To conduct surveys about our products and services.
Where we need to perform the contract we are about to enter into or have entered into with you:
To process and deliver your orders including managing payments, fees and charges.
To enable you to partake in a prize draw or competition.
To process orders.
To facilitate the purchase of our products.
To process and fulfil our warranty and service obligations to you.

Where it is necessary for our legitimate interests (or those of a third party):

General business need.
To administer and protect our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
To ensure that our website remains up to date and is secure.
To run, maintain and develop our network drives, internal applications, systems and databases to improve business efficiency and ensure that such systems are kept up to date.
To undertake the management of backups for network drives, internal applications, systems and databases.
To use data analytics to improve our website, products, services, marketing, customer relationships and experiences.
To better understand our customer’s buying habits and preferences.
To operate, manage, develop and promote our business and, in particular, our relationship with the organisation you represent (if any) and related transactions – this includes, for example, billing / payment purposes.
To protect our business from fraud, money-laundering, breach of confidence, theft of proprietary materials and other financial or business crimes.
To comply with our legal and regulatory obligations and bring and defend legal claims.
To collect CCTV footage on and around our premises. To enforce payment and recover debts owed.
To undertake audits and for reporting purposes to help us manage our business effectively and efficiently.
To allow us to monitor the efficiency of our business and to identify areas of improvement.
To create and maintain online accounts for our customers.
To handle queries and requests which are made by customers and prospective customers.
To collect and analyse information from recorded calls and webchats when customers and prospective customers contact us. For training and monitoring purpose and to ensure that we have an accurate record of any information provided.
To process claims for insurance for damage and accidents.
To undertake credit checks to assess creditworthiness, confirm identity, manage your account effectively and where necessary trace and recover debts and prevent criminal activity. For general business administration and service notifications.
To provide for restructures or reorganisations or to prepare for the sale of all or part of our business.
To organise events and conferences.
To conduct surveys about our products and services.

Marketing:
To send postal or electronic marketing to you where we consider such marketing relevant to you and where we are satisfied that we have a legitimate interest in doing so. To analyse our marketing strategy and create customer profiles, in order to allow us to adjust strategy accordingly in order to best promote our business. To conduct market research to better understand our existing and potential customer base

Where we need to comply with a legal or regulatory obligations:
To assist HMRC, the police or any other regulatory entity. To comply with any request you make to enforce any of your legal rights. To notify you of any non-urgent safety notices.

Where it is in your vital interests:
To notify you of any urgent safety notices as such processing is in your interests and is necessary to ensure that we prevent potential harm to you.

We will tell you, when we ask you to provide information about yourself, if provision of the requested information is necessary for compliance with a legal obligation or, on the other hand, if it is purely voluntary and there will be no implications if you decline to provide the information. Otherwise you should assume that we need the information for our business or compliance purposes (as described above).

Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising and ensure that we only send information which we think will be of interest to you. You may opt-out of our marketing at any time by following the opt-out links on any marketing message sent to you, by contacting our Data Protection Officer.

Promotional offers from us: We may use your Identity, Contact, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing). You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and, in each case, you have not opted out of receiving that marketing.
Third-Party Marketing: We will get your express opt-in consent before we share any personal data with any company for marketing purposes.
Opting Out: You can ask us or participating third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting our Data Protection Officer at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of your purchase of a product or service, your reported experience of a product or service experience, warranty registration or other transactions.
Cookies: You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy.
Change of Purpose: We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact our Data Protection Officer. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Disclosures of your personal data

In exceptional circumstances, we may have to share your personal data, for the reasons set out below.

Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
Your colleagues within the organisation that you represent;
Service providers who host our website or other information technology systems or otherwise hold or process your information on our behalf, under strict conditions of confidentiality and security;
A person who takes over our business and assets, or relevant parts of them;
Competent regulatory, prosecuting and other governmental agencies, or litigation counter-parties, in any country or territory; or where we are required by law to disclose
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a genuine business need. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

How long will you use my personal data for?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We have a data retention policy in place which provides guidance to our employees on data retention.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We will also consider whether there are legal reasons why we may need to contain data for longer than we would otherwise keep it.

Note that we may retain some limited information about you even when we know that you have left the organisation that you represent, so that we can maintain a continuous relationship with you if and when we are in contact with you again, representing a different organisation.

Details of retention periods for different aspects of your personal data can be obtained from us by contacting our Data Protection Officer.

Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. Those rights include:

The right to request access to your personal data.
The right to request correction of your personal data.
The right to request erasure of your personal data.
The right to object to processing of your personal data.
The right to request restriction of processing your personal data.
The right to request transfer of your personal data.
The right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact our Data Protection Officer.

No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.