Last updated 27th November 2019
Company Name: Great North Auto Services
Email Address: firstname.lastname@example.org
Your information is your information, and we understand that. This is why we are committed to respecting the privacy of anyone who uses our services or our website.
Who are we and what do we do?
The Site and our Services are operated by Great North Auto Services Ltd (“we”, “us” or “our”).
Great North Auto Services is the data controller responsible for your personal information.
Great North Auto Services is an English company whose registered office is. Rabbit Hill Business Park, Great North Road, Arkendale, Knaresborough, HG5 0FF.
What personal information do we collect and how do we use it?
We collect and use your personal information in a variety of ways. For example, to provide you with the Services that you have requested. To update you on the progress of those services. To remind you of annual subscriptions and services. In addition, we may occasionally supply current news and information about products and services.
We have set out below the ways in which we collect your personal information and the reasons why we use it.
Fulfilment of Services
We collect and maintain personal information that you voluntarily submit to us during your use of our Services. In providing the Services, we may collect the following types of personal information:
title, first name and surname.
contact telephone number/s.
history of services including dates and charges.
How do we share your personal information?
We do not sell any of your personal information to any third parties. Your privacy is important to us.
How do we obtain your consent?
Where our use of your personal information requires your consent, you can provide such consent at the time of booking, face to face, verbally or by email. We are unable to progress with the booking without a “yes” or “no” to this consent.
Existing customers and information stored
Due to the nature of our services many existing customers have a requirement to be contacted to renew existing and essential services and subscriptions. As such we will assume that where customers have provided all or some of the above information we shall continue to use this information in ways outlined above until such a time as:
We contact you to obtain that permission.
A new job is raised, and we are required to update the information and request consent.
You receive information from us and choose to opt out of future communication.
Third party links and services
How long do we keep your personal information for?
Regarding personal information, we have processed in connection with the supply of our products and services to any customer. We will retain personal information relevant to that supply of products or services for at least six years from the date of supply. In compliance with our obligations under the EU General Data Protection Regulation (or similar legislation around the world).
We may then destroy such files without further notice or liability. Regarding any other personal information, we have processed, we will retain relevant personal information for a period of at least five years from the date of our last interaction with you. If you have opted out of receiving marketing communications from us, we will need to retain certain personal information indefinitely, so we do not send you marketing communications again. If your information is only useful for a short period e.g. for specific marketing campaigns, we may delete it at the end of that period.
Confidentiality and security of your personal information
We are committed to keeping the personal information you provide to us secure. GNAS will take reasonable precautions to protect your personal information from loss, misuse or alteration. We have implemented information security policies, rules and technical measures to protect the personal information that we have under our control from:
improper use or disclosure.
unlawful destruction or accidental loss.
You have the following rights in relation to the personal information we hold about you:
Your right of access
If you ask us, we’ll confirm whether we’re processing your personal information. If so, provide you with a copy of that personal information (along with certain other details). Assuming you require additional copies, we may need to charge a reasonable fee.
Your right to rectification
If the personal information we hold about you is inaccurate or incomplete, you’re entitled to have it rectified. If we’ve shared your personal information with others, we’ll let them know about the rectification where possible. Assuming that you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
Your right to erasure
You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If we’ve shared your personal information with others, we’ll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances. Such as where you contest the accuracy of that personal information or you object to us processing it. It won’t stop us from storing your personal information though. We’ll tell you before we lift any restriction. If we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
Your right to data portability
With effect from 25 May 2018, you have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine-readable format). And to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Your right to object
You can ask us to stop processing your personal information, and we will do so, if we are:
relying on our own or someone else’s legitimate interests to process your personal information. Except if we can demonstrate compelling legal grounds for the processing;
processing your personal information for personalised direct marketing; or
processing your personal information for non-personalised direct marketing.
Your rights in relation to automated decision-making and profiling
You have the right not to be subject to a decision when it’s based on automatic processing. Including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.
Your right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your personal information. You have the right to withdraw that consent at any time.
Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the UK Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at: https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.
All of our employees and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of the personal information of all users of our Services.