Information Collection and Use

E Rand & Sons Ltd is the sole owner of the information collected on rand.uk.com. Our website collects information from our users at several different points. Other than for specific purposes as agreed with the user such as fulfilling an online enquiry the information that is collected through this site is used for marketing or analysis purposes only.

Analysis

Information gathered through this website will be held in a database at our offices in Chapel Lane, Great Blakenham, Ipswich Suffolk IP6 0JY and may be used periodically to assess the success of the website and the actions generated from the levels of traffic generated.

When you request a page from the site’s web server, the server automatically collects some information about your system, including your IP address. E Rand & Sons collects the minimum information necessary to ensure our service works.

Enquiry Form

We ask for information from the user on our enquiry form. Information gathered through this form will be held in a database at our offices and be used periodically to assist in the various marketing activities of E Rand & Sons Ltd. We do not currently provide or share your information with other third parties.

Order Form

We ask for information from the user on our order form. As goods are being ordered from our site or in person the user / client must provide us with their name, email and delivery address, along with the requested financial information, such as the credit card number and associated details or credit account number to enable us to process the order as requested. This information is used solely for charging/invoicing and to dispatch the order and any credit card information will not be retained If we have difficulties processing or fulfilling an order these details are used to contact the user.

If you are using this site to order goods or services, certain information is automatically collected so that an order can be tracked and delivery made to the right user. To aid this order process ‘Cookies’ may be stored on your computer by the browser. Although you can set your browser to disable cookies, you might find some site features will not work.

We do not currently provide or share your information with other third parties.

Legal Disclaimer

Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our website.

Business Transitions
In the event E Rand & Sons Ltd goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets, users’ personal information will, in most instances, be part of the assets transferred. If as a result of the business transition, the users’ personally identifiable information will be used in a manner different from that stated at the time of collection they will be given choice consistent with our notification of changes section.

Links

This website contains links to other sites. Please be aware that E Rand & Sons Ltd is not responsible for the privacy practices of such other sites. This privacy statement applies solely to information collected by this website.

Changes to this Statement

E Rand & Sons will occasionally update this Privacy Statement to reflect company and customer feedback. E Rand & Sons Ltd encourages you to periodically review this Statement to be informed of how E Rand & Sons Ltd is protecting your information.

Unsubscribing

We’ll remove you from our database of site users and stop sending you information upon request. Simply send us an email to unsubscribe at this email address.

Contact Information

If users have any questions or suggestions regarding our privacy policy, please contact us at:

Tel: +44 (0)01473 832833
Email: sales@rand.uk.com

E Rand & Sons Ltd
Chapel Lane
Great Blakenham
Ipswich
Suffolk
IP6 0JY
United Kingdom

E Rand & Sons Ltd
Company Registration No: 1507907

1. Data protection principles

E Rand & Sons Ltd is committed to processing data in accordance with its responsibilities under the GDPR.

Article 5 of the GDPR requires that personal data shall be:

a. processed lawfully, fairly and in a transparent manner in relation to individuals;

b. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;

c. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

d. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;

e. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals; and

f. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

2. General provisions

a. This policy applies to all personal data processed by E Rand & Sons Ltd.

b. The Responsible Person shall take responsibility for the Companies ongoing compliance with this policy.

c. This policy shall be reviewed at least annually.

d. E Rand & Sons Ltd shall register with the Information Commissioner’s Office as an organisation that processes personal data.

3. Lawful, fair and transparent processing

a. To ensure its processing of data is lawful, fair and transparent, the Company Secretary of E Rand & Sons Ltd shall maintain a Register of Systems.

b. The Register of Systems shall be reviewed at least annually.

c. Individuals have the right to access their personal data and any such requests made to E Rand & Sons Ltd shall be dealt with in a timely manner.

4. Lawful purposes

a. All data processed by E Rand & Sons Ltd must be done on one of the following lawful bases: consent, contract, legal obligation, vital interests, public task or legitimate interests (see ICO guidance for more information).

b. E Rand & Sons Ltd shall note the appropriate lawful basis in the Register of Systems.

c. Where consent is relied upon as a lawful basis for processing data, evidence of opt-in  consent shall be kept with the personal data.

d. Where communications are sent to individuals based on their consent, the option for the individual to revoke their consent should be clearly available and systems should be in place to ensure such revocation is reflected accurately in E Rand & Sons Ltd systems.

5. Data minimisation

a. E Rand & Sons Ltd shall ensure that personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

6. Accuracy

a. E Rand & Sons Ltd shall take reasonable steps to ensure personal data is accurate.

b. Where necessary for the lawful basis on which data is processed, steps shall be put in place to ensure that personal data is kept up to date.

7. Archiving / removal

a. To ensure that personal data is kept for no longer than necessary, E Rand & Sons Ltd shall put in place an archiving policy for each area in which personal data is processed and review this process annually.

b. The archiving policy shall consider what data should/must be retained, for how long, and why.

8. Security

a. E Rand & Sons Ltd shall ensure that personal data is stored securely using modern software that is kept-up-to-date.

b. Access to personal data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.

c. When personal data is deleted this should be done safely such that the data is irrecoverable.

d. Appropriate back-up and disaster recovery solutions shall be in place.

9. Breach

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, the Charity shall promptly assess the risk to people’s rights and freedoms and if appropriate report this breach to the ICO (more information on the ICO website).