Privacy Policy

How we protect and handle your personal information

1. Introduction

1.1 Merritt and Fryers Holdings Limited is a group of Companies consisting of an ultimate Holding Company, a Property Development Company and a Timber, Builders, Plumbers, Hardware and Decorators Merchant/Timber Importer. For the purpose of this policy it will be referred as 'The Company'.

1.2 The Company is a 'Data Controller', it collects and processes personal information, or personal data, relating to its company personnel, customers, potential customers, contractors, suppliers and contacts (known as 'Data Subjects') to manage the working relationship. This personal information may be held by the Company on paper or in electronic format.

1.3 The Company is committed to being transparent about how it handles your personal information, to protecting the privacy and security of your personal information and to meeting its data protection obligations under the General Data Protection Regulation ("GDPR") and the Data Protection Act 2018.

1.4 This Policy sets out how the Company handles Personal Data. It applies to all Personal Data we Process regardless of the media on which that data is stored on persons in connection with the Company.

1.5 The Company has a data compliance manager to oversee compliance with this privacy policy. If you have any questions about this privacy policy or about how we handle your personal information, please contact Sally Burks at the registered offices, by email info@merrittandfryers.co.uk or by phone 01756 792485.

1.6 The Company may update this notice at any time and we will make this publicly available as soon as is reasonably practical.

2. Data Protection Principles

2.1 Under the GDPR, there are six data protection principles that the Company must comply with. These provide that the personal information we hold about you must be:

2.2 The Company is responsible for and must be able to demonstrate compliance with these principles (Accountability).

3. How do we collect your information?

3.1 The Company may collect personal information about you in a variety of ways. We collect personal information directly in dealings with the individual's concerned. We will also use third parties such as Credit reference agencies and debt collection agencies and through our Website.

Examples of the sources of data we collect about you or your company:

3.2 If you are using any of our financial/credit services, we will collect more data of a financial or personal nature to ascertain the level of service we can offer you. This data could come from internal or third party services.

4. What types of information do we collect?

4.2 The Company collects, uses and processes a range of personal information about you, this may include:

5. Why and how do we use your information?

5.1 Your privacy is protected by law. Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sometimes sharing outside the Company.

5.3 The purposes for which we are processing, or will process, your personal information are to:

11. Data Retention

11.1 The Company will only retain your personal information for as long as is necessary to fulfil the purposes for which it was collected and processed, including for the purposes of satisfying any legal, tax, health and safety, reporting or accounting requirements.

11.2 Unless we explain otherwise to you, we'll hold your personal information based on the following retention periods:

12. Your Rights in Connection with Personal Data

12.2 As a data subject, you have a number of statutory rights. Subject to certain conditions, and in certain circumstances, you have the right to:

12.3 If you wish to exercise any of these rights, please contact our data compliance manager in writing.

12.5 If you believe that the Company has not complied with your data protection rights, you have the right to make a complaint to the Information Commissioner's Office (ICO) at any time.

10. How we protect your information

10.1 The Company has put in place measures to protect the security of your personal information. It has internal policies, procedures and controls in place to try and prevent your personal information from being accidentally lost or destroyed, altered, disclosed or used or accessed in an unauthorised way.

10.2 Where your personal information is shared with third-party service providers, we require all third parties to take appropriate technical and organisational security measures to protect your personal information.

10.5 The Company has in place procedures to deal with a suspected data security breach and we will notify the Information Commissioner's Office and you of a suspected breach where we are legally required to do so.

Data Privacy Enquiries

Last Updated: This Privacy Policy may be updated at any time. The Company reserves the right to change this notice at any time, so please check back regularly to obtain the latest copy.

Governing Law: This Privacy Standard does not override any applicable national data privacy laws and regulations in countries where the Company operates.