Second Hand & Used Car Parts Online

Privacy Policy

INTRODUCTION

This Privacy Policy sets out how Hills Salvage & Recycling Ltd ("we", "our", "us", "the Company") handle the Personal Data of our customers, suppliers, employees, workers and other third parties.

This Privacy Policy applies to all Personal Data we process regardless of the media on which that data is stored or whether it relates to past or present employees, workers, customers, clients or supplier contacts, shareholders, website users or any other Data Subject.

At Hills Salvage & Recycling we take the privacy of our users seriously. We are committed to safeguarding the privacy of our users while providing a personalised and valuable service. This Privacy Policy outlines the types of information that are collected by us, and how we use and protect it. This Privacy Policy also outlines your rights regarding data protection and tells you how to contact us.

This Privacy Policy and our procedures for the storage and use of personal data have been updated in compliance with the European Data Protection Regulation will be applicable as of May 25th 2018 (GDPR). For further information about GDPR you will find a useful guide here: https://gdpr-info.eu/

This privacy statement explains how we collect and use personal information about you.

Further information can be found in the headings which follow and can be accessed through these links:

- Types of personal information we collect

- How we use your information

- Where we collect your information from

- Who we share your information with

- If you choose not to give us your information

- How we use your information to make automated decisions

- How long we keep your information for

- Where we hold your data internationally

- Using our website

- Your rights

- Changes to our privacy statement

- Contact information and further advice

- Complaints

Types of personal information we collect

We may collect, use and store different types of personal information about you, which we have grouped together as follows.

Types of personal information	Description
Identity Data	ID information, including your name and title.
Contact Data	Where you live and how to contact you, including email, postal address and telephone number
Financial Data	Your financial position, status and history, including bank and PayPal details.
Transactional Data	Details about payments to and from you.
Contractual Data	Details about the services we provide to you.
Communications Data	What we learn about you from letters, emails and conversations between us, including social media account profiles.
Publicly Available Data	Details about you which are publicly available, such as on social media platforms or elsewhere on the internet.
Marketing Data	Details about your preferences in receiving marketing communications from us and our third parties.
Consents Data	Any permissions, consents or preferences that you give us.

How we use your personal information

The table below explains how we use your personal information and the reasons that we rely on in doing so. Where these reasons include legitimate interests, we explain what these legitimate interests are.

What we use your information for	Our reasons	Our legitimate interests
*Generally*
· To contact you in the course of carrying out our functions and operations as a business	· Legitimate interests	· To run our business efficiently · To keep a record of your relationship with us
· To process a payment you have made	· Legitimate interests	· To process payments securely
· To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance and audit	· Legitimate interests · Corporate governance · Legal obligations	· To manage our relationship with you and fulfilling our responsibilities generally · To keep a record of your relationship with us
· To manage our relationship with you which will include notifying you about changes to our privacy statement	· Legitimate interests · Contract performance	· To keep you updated about changes in the legal terms that apply to the use of our website · Record keeping and firm management
· To register you as a visitor when you visit our premises and ensure your health and safety when you are on our premises	· Legal obligations · Vital interests · Legitimate interests	· For the prevention of crime and public safety (including the safety of our own employees) · Security of our premises · Incident management and breach reporting · To ensure your health and safety whilst on our premises
· Prevention of crime and public safety, including through the use of CCTV	· Legal obligation · Legitimate interests	· Managing the risk of crime and safety for us, our employees and our customers · Developing and improving how we deal with crime · Reporting criminality or the suspicion of criminality · Being efficient about how we fulfil our responsibilities
· To comply with legal or regulatory requirements	· Legal obligation	· To be efficient about how we comply with our legal duties · To protect our reputation
· To establish, enforce and defend legal claims	· Legal claims · Legitimate interests	· To comply with laws and regulations that apply to us · To respond to questions or complaints · To maintain records to evidence matters that may be in dispute
· To exercise our rights set out in contracts and agreements	· Contractual performance
*Marketing and communications*
· Marketing and business development activities, to include sending marketing communications and materials to you and promoting our business and its products	· Legitimate interests · Consent	· To develop our relationship with you and others · To hold events to promote our business · Telling you about products and developments that might interest you · To ensure we know how you prefer to be contacted · Seeking your consent if we need it to contact you
· To manage the systems that contain our marketing database · Managing marketing preferences and keeping our records up to date	· Legitimate interests · Consent	· Data management for marketing and business development purposes · Improving our systems and services · Seeking feedback · Seeking your consent when we need it to contact you
· Press and media relations	· Legitimate interests · Consent	· To contact you to publicise our work through press releases and other published material, subject to obligations of confidentiality
*When you visit our websites*
· To provide you with information you may ask for, including information about our products	· Consent · Legitimate interests	· To fulfil enquires you might make of us and provide you with relevant information that might interest you
· To administer and protect our business and websites (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	· Legitimate interests	· To fulfil enquires you might make of us and provide you with relevant information that might interest you
· To manage our relationship with you which will include notifying you about changes to our website terms and conditions	· Legitimate interests · Contract performance	· To keep you updated about changes in the legal terms that apply to the use of our website · Record keeping and firm management
*Recruitment* (if you are applying for a job with us)
· To process a job application, including carrying out background and reference checks and to communicate with you about the recruitment process	· Employment purposes · Legal obligation · Legitimate interests	· Recruitment and resourcing · Pre-employment screening · To decide whether to recruit you for the role · To check whether you are legally entitled to work in the United Kingdom · To decide whether to enter into a contract of employment with you · To comply with regulations that apply to us · Risk management
· To keep records related to our hiring processes	· Employment purposes · Legitimate interests	· To run our business in a proper and efficient way
· We will use information about your disability status to determine whether we need to provide appropriate adjustments during the recruitment process	· Employment obligations · Legal obligation · Legitimate interests	· Recruitment and resourcing · To allows us to implement meaningful equal opportunity monitoring and reporting within our organisation · To comply with regulations that apply to us

Where we collect your personal information from

We may collect personal information about you (or your business) from the following sources:

- Directly from you, including where you talk to us over the phone and email us

- Indirectly from you, including through your use of our products and services (e.g. payment and transaction data)

- Social networking sites, such as Facebook and Twitter, when you interact with us

- Publicly available resources, such as Companies House, the media or online

- Market researchers

- Analytics providers, such as Google Analytics

- Recruitment agencies, background check providers and credit reference agencies

- Former employers or other referees

- CCTV footage

- Intermediaries

Who we share your information with

We may share your personal information with the following third parties:

- Other companies and service providers who we use to help us carry out our functions, such as PayPal

- Our staff, consultants and contractors

- Law enforcement agencies

- Relevant regulators, including the Information Commissioner’s Office in the event of a personal data breach

- Our insurers

- Recruitment agencies (when providing feedback on candidates)

- Benefits providers

- Journalists and other members of the media

- Potential or actual purchasers of any part of our business or assets, or other third parties in the context of a possible transfer, merger or restructuring of our business

Beyond this, we will only share your personal information with another organisation where you have given us your explicit consent to do so, unless we are obliged to do so by law.

If you choose not to give your personal information

Where we need to collect your personal information in order to meet our legal obligations or under the terms of a contract we have with you and you fail to provide that data when requested, it may delay or prevent us from being able to perform the contract we have entered into with you and/or comply with our own legal obligations as a business. As such, we may not be able to provide products or services to you.

How we use your information to make automated decisions

You will not be subject to decisions that will significantly impact on you based solely on automated decision-making.

How long we keep your personal information

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

In general terms, we will retain personal information about you for the duration of our relationship with you and afterwards for any period required by applicable law or regulatory requirements. In the absence of such laws or regulatory requirements then we will generally retain personal information until the time period in which legal claims can arise has expired.

If you wish to know how long we may hold your particular personal information then please e-mail dpo@hills-motors.co.uk

Where we hold your personal information internationally

We do not transfer your personal information outside the European Economic Area (EEA).

WEBSITE

When someone visits www.hills-motors.co.uk we use a third-party service, Google Analytics, to collect standard Internet log information and details of visitor behaviour patterns.

This is done to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Where we do want, or need, in order to provide you with the best possible service, to collect personally identifiable information through our website, we will be open and honest about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

Where visits come as the result of using a search engine, such as Google, search queries and results are logged anonymously to help us improve our website and search functionality. No user-specific data is collected by either Hills Salvage & Recycling Limited or any third party.

COOKIE POLICY

Our website uses cookies. By using our website and agreeing to this policy, you consent to Hills Salvage & Recycling Limited's use of cookies in accordance with the terms of this policy.

Cookies are files sent by web servers to web browsers and stored by the web browsers. The information is then sent back to the server each time the browser requests a page from the server. This enables a web server to identify and track web browsers.

There are two main kinds of cookies: session cookies and persistent cookies. Session cookies are deleted from your computer when you close your browser, whereas persistent cookies remain stored on your computer until deleted, or until they reach their expiry date.

We use cookies on this website for the following purposes:

- Make login faster to our website by remembering your login details

- Make the page load quicker by sharing the workload across computers

- Ensure our website pages are optimised for your browser or device by giving us technical information about the device or browser you are using

For more information about cookies and for instructions on how to delete them please consult the help menu on your Internet browser. Please note that if you delete cookies your ability to use part of or the entire website may be impaired or restricted.

SECURITY & PERFORMANCE

We use a third-party service to help maintain the security and performance of the Hills Salvage & Recycling Ltd website. To deliver this service, it processes the IP addresses of visitors to the website.

CONTACT FORMS

Should you choose to contact us using a contact form on our website or an email link, the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP). We use a third-party service which encrypts the email content using SHA-2, 256-bit cryptography before being sent across the Internet. The email content is then decrypted by our local computers and devices.

SOCIAL MEDIA

If you send us a private or direct message via social media the message will be stored within our password protected account. It will not be shared with any other organisations.

EMAILS AND LIVE CHAT

We use a third-party provider to encrypt and protect our email traffic. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

EMAIL MARKETING

We use a third-party provider, Mail Chimp to deliver our email marketing. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-marketing activity. For more information, please see Mail Chimps privacy notice.

CCTV

Hills Salvage & Recycling Ltd uses CCTV internally and externally on site as a security measure. Appropriate signage is displayed to inform individuals that CCTV is in operation. CCTV footage is stored securely on site and 6 weeks of recordings are held and the rest are erased.

USE OF INFORMATION

When referring to “personal information”, we mean information we collect from you, from which you may be personally identified. Typically, this may include your name, email, telephone number, address and product specific data such as car registration number, item serial number and other necessary specific identifiers. All personal information you submit to us will be held in accordance with our responsibilities under the General Data Protection Regulations (GDPR) 2018.

Any personal information you register with us will only be used to help us deliver content to you and to improve the website.

We collect personal information from you in a number of situations. For example, if you purchase products from our website we ask for your name, address, phone number, email address and credit/debit card details.

We use your personal information:

- To process orders for products or services which you may place with us;

- To contact you about any products or services which you are receiving from us; and

- To provide you with access to areas of the website and to assist in the smooth operation and running of the website.

We may occasionally use your personal information to contact you with information about our products and services which we think you may be interested in. We will always ask you whether you want us to use your personal information for this purpose when we collect that information from you. At any stage subsequently, you can inform us that you do not wish to receive information from us by clicking the unsubscribe link in an email or sending an email to: IT@hills-motors.co.uk

We recommend that you should regularly review the personal information you have to ensure that is correct and up to date.

Personal information stored on our website will be stored in a secure manner and in accordance with our responsibilities under GDPR. Unless you ask us to and except as expressly provided in this Privacy Policy, we will not provide your personal information to third parties unless strictly necessary to deliver your order (except in the unlikely event that we are legally required to do so by law enforcement).

We may employ external carrier companies such as TNT and DPD to deliver your order (the “Carrier”). Only your name, address and contact number will be delivered to the Carrier in order to deliver your goods.

ACCESS TO PERSONAL INFORMATION

Hills Salvage & recycling Ltd will be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’. If we do hold information about you, we will:

- Give you a description of it,

- Tell you why we are holding it,

- Tell you who it could be disclosed to, and

- Let you have a copy of the information in an intelligible form.

To make a request to Hills Salvage & Recycling Ltd for any personal information we may hold, you need to put the request in writing addressing it to the address provided below.

If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.

If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting us via the address below.

LINKS TO OTHER WEBSITES

This privacy policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

CHANGES TO THIS PRIVACY NOTICE

We keep our privacy notice under regular review. This privacy notice was last updated on 24 May 2018.

HOW TO CONTACT US

If you want to request information about our privacy policy, you can email us at dpo@hills-motors.co.uk or write to:

Hills Salvage & Recycling Ltd

Gerrard Place

East Gillibrands

Skelmersdale

WN8 9SU

Tel: 01695455777

Complaints

We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office:

Online: https://ico.org.uk/global/contact-us/email/

By phone: 0303 123 1113

By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF