The privacy and protection of your personal data is important to us.
We collect information about you for several reasons: to process an order, to facilitate your Centre membership & access and finally to provide you with the best possible service.
The type of information we will collect about you and your transactions include:
- Your name & address
- Your phone number & email address
- Payment details
- Business name & VAT number
- Planning support comments
- Contact preferences
- Club preferences & Information on how, why you heard about the centre and the reasons for visiting
- Additional Membership Data as per your Membership Application form, which includes hobbies and interests, date of birth and other information voluntarily provided by you.
If you visit a website operated by a third party through a link included on our website, your information may be used differently by the operator of the linked website.
How your data is used:
We process your data with legitimate interest with regards to any purchases, membership or transactions made with us or because you have subscribed to hear from us. We may contact you with regards to your transaction or membership using the contact details provided, should it be necessary. We take all possible steps to ensure your data is stored correctly.
The data we process include your contact details and contact name. If you are an existing customer, we are obligated to use your information to fulfil the required business agreements.
For the purposes of completing transactions, your data will be shared with the necessary third party for courier and insurance purposes: Royal Mail, APC, XDP, DPD, Parcel Force, Speed, Night Freight, DHL and UPS.
We do not use automated decision making or profiling to process data. We process information securely in house and with third parties: Mailchimp, Magento, Google Drive, Sage Pay, Wordpress, Sage, Khaos Control and Linnworks with a limited privacy impact and do not share or sell information on to third parties.
Your data may be recorded when using the website, these standard industry systems include; Google Analytics, Google AdWords, Google webmaster tools and Bing webmaster tools, whose systems are separate to our own and where our data is stored securely on our behalf.
Membership (of the British Ironwork Centre)
Your information will be stored securely by Black Country Metal Works LTD (trading as the British Ironwork Centre). Your information can be updated or deleted upon request.
Your data will be used via email, telephone & postal address to contact you with centre events, membership updates & information.
We retain information unless objected to or alternatively where the retention of data would no longer be beneficial or relevant to you.
Your membership data will be stored indefinitely and where possible using SSL technology. You can opt out of membership email updates at any time, by following the link at the bottom of the email. You can request the cancellation of your membership and the erasure of your data at any time by contacting our data protection officer as detailed below.
Membership cards are renewed every 12 months.
You have the right to access, rectification, erasure, to restrict processing, to object or to lodge a complaint if you believe your data is being used incorrectly.
You can opt out of any further communications or withdraw consent including your Centre membership at any time. We retain information unless objected to or alternatively where the relevant interest at the time of processing is no longer relevant.
Non Members (visiting the British Ironwork Centre): Non-member information is held & retained for 3 months only. The information will not be used to contact you or shared. It is stored for health and safety and insurance purposes.
Handling Requests: All requests should be made directly to our Data Protection Officer; details below:
Ben Knowles, British Ironwork Centre, Whitehall, Aston, Oswestry, SY11 4JH
Benk@blackcountrymetalworks.co.uk (please use the email subject “GDPR REQUEST”)
Our handling time for requests of eraser or updates is a maximum of one month. Subject access requests which may be deemed unreasonable may be subject to charge.
Breach Policy: In the event of a confirmed data breach our immediate priorities are:
- Contain any potential breach in order to limit any impact
- Initiate an investigation to establish the data which may have been affected
- Investigate any potential impact on individuals and any measures which may mitigate impact
- Liase with any bodies which form part or are associated with a potential breach, ie Merchant banks who may assist in mitigating the impact or reducing the risk of financial or data loss for individuals.
- Inform those who may have been affected based on an assessment of the level of severity and the likelyhood of loss occuring.
- Report to any necessary bodies ie; Police
When visiting our web pages, we would like to use tracking technologies which record and store information about your visit automatically. This can include using a "cookie" which would be stored on your browser. The information collected by cookies does not identify you personally.
We automatically collect and store only the following information about your visit:-
(a) the internet domain and IP address from where you access our Website;
(b) the type of browser software and operating system used to access our Website;
(c) the date and time you access our Website;
(d) items you have added to the shopping basket, during a current or previous visit
(e) the pages you enter, visit and exit our Website from; and
(f) if you linked to our Website from another Website, the address of that Website.
CCTV & Photography
We use CCTV cameras on our site. Please be advised we do take photographs on site. If you do not wish to have your picture taken, please inform a member of staff. If you require further information, please contact our Data Protection Officer.