At UPU Industries Ltd. we understand that your privacy and the security of your personal information is extremely important and we are committed to protecting and respecting your privacy. In accordance with the General Data Protection Regulation (GDPR) this Privacy Notice explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure. 

This Notice gives effect to our commitment to protect your personal information.  Please note that we are constantly reviewing how we process and protect data, therefore changes to our Privacy Notice may occur at any time.  We will endeavour to publicise any changes.

What’s in this notice?

This notice tells you:

  • Your rights as a Data Subject.
  • Who we are.
  • What type of information we hold.
  • How your information is used.
  • The legal basis we rely on to process personal information.
  • Who has access to your information.
  • How long we keep your information for.
  • How you can access and update your information.
  • Our Data Protection Officer and their contact details.

Your Rights as a Data Subject

As a contact of UPU Industries Ltd you have:

  • The right to be informed.
  • The right of access.
  • The right to rectification.
  • The right to erasure.
  • The right to restrict processing.
  • The right to data portability.
  • The right to object to processing.
  • The rights in relation to automated decision making and profiling.

Who We Are

UPU Industries is a family run business built on family values, proud to have served the agricultural community for over 40 years. We are manufacturers of premium and bespoke plastic net and wraps.

The Type of Information We Hold

The personal information we collect might include your name, address, email address, sensitive information regarding your physical wellbeing, third party information including bank details, records of you on CCTV footage.  This is not an exhaustive list and what personal information we collect is dependent upon the service you are engaging.

We may collect your personal information in a number of ways

For Example, when you:

  • Use our services.
  • Visit our website.
  • Enquire about our products.
  • Engage with us on Social Media (Facebook).
  • Engage with us at Trade Shows.
  • Contact us by any means with queries, complaints etc.
  • Have had your information passed to us by a third party.

In some cases, we will collect data about you from third parties such as credit reference agencies and social networking websites.

How your information is used

We may use your information to:

  • Enable UPU Industries Ltd. to provide a tailored service to you.
  • Enable UPU Industries Ltd. to provide customer service and support to you.
  • Seek your views or comments on the service/goods we provide.
  • Notify you of changes to our business/products.
  • To carry out our obligations arising from any contracts entered into by you and us.

The Legal Basis We Rely on to Process Personal Information

In order to fully comply with data protection legislation, we need to keep a register of the full range of personal information that we hold. On this register we also must state the legal basis which allows us to hold this information.  The law on information protection sets out a number of different bases on which an organisation may collect and process your personal information including;

  • Consent

In specific situations, we can collect and process your information with your explicit consent.

  • Performance of a Contract

In certain circumstances, we need your personal information in order to perform a contract that we have entered into with you.

  • Lawful Obligation

If the law requires us to, we may need to collect and process your information.  We may also need to pass your information onto a third party if required by law.

  • Legitimate Interest

In specific situations, we require your information to pursue our legitimate interests in a way which may reasonably be expected as part of running our business and delivering our services.

Who has access to your information

Within UPU Industries Ltd. access is only available to those who need this information in order to provide a service to you or fulfil the contract that we have with you.  Access may be required by departments such as ICT and Finance, as well as those involved in the direct delivery of services to you.

  • Third Party Service Providers working on our behalf

We may pass your information to our third-party service providers, agents, transport companies and credit reference agencies and other associated organisations for the purpose of completing tasks and providing services to you on our behalf.  However, when we use third party providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.  Please be assured that we will not release your information to third parties beyond UPU Industries Ltd, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime. If you wish to see this not exhaustive list, please contact the company.

  • Third Party Entities Outside of the EU

At UPU Industries Ltd in rare cases we may need to transfer your information on to a third party outside of the EU.  To ensure that your personal data receives an adequate level of protection we seek to ensure that your personal data is treated by those third parties and entities outside the EU in a way that is consistent with and which respects the EU laws on data protection.

How long do we keep your information for

We will only keep your information for as long as we need to or for as long as we are legally required to do so.  We review our retention periods or personal information on a regular basis.  We are legally required to hold some types of information to fulfil our statutory obligations.  We will hold your personal information on our systems for as long as it is necessary for the relevant activity, or as long as is set out any relevant contract you hold with us. 

How you can access and update your information

The accuracy of your information is important to us.  If any of your information that we hold in inaccurate or out of date, please notify us.  You have the right to ask for a copy of the information that UPU Industries Ltd hold about you.  This is known as a Subject Access Request (SAR) and we have 30 calendar days to comply with such a request.  There is no charge.  However, should your request go beyond what is reasonable there may be an administration fee charged.

Security precautions in place to protect the loss, misuse or alteration of your information

When you give us personal information, we take steps to ensure that it is treated securely.  Any confidential and sensitive information is securely filed and we apply software to our ICT to prevent unauthorised access to your information.  We host our servers on site minimising the risk of a breach in our systems. We have appropriate procedures in place for data security and management of records.  All of our staff are trained in data protection and GDPR.

We also monitor compliance with data protection procedures through internal audits.

Contact Details.

Should you have any queries regarding any aspect of Data Protection within UPU Industries Ltd, please contact:

Data Protection Officer

UPU Industries Ltd

1 Quillyburn Business Park

Banbridge Road

Dromore

BT25 1BY