At UPU Industries Ltd. we understand that your privacy and the security of your personal information is extremely important and we are committed to protecting and respecting your privacy. In accordance with the General Data Protection Regulation (GDPR) this Privacy Notice explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure.
This Notice gives effect to our commitment to protect your personal information. Please note that we are constantly reviewing how we process and protect data, therefore changes to our Privacy Notice may occur at any time. We will endeavour to publicise any changes.
What’s in this notice?
This notice tells you:
- Your rights as a Data Subject.
- Who we are.
- What type of information we hold.
- How your information is used.
- The legal basis we rely on to process personal information.
- Who has access to your information.
- How long we keep your information for.
- How you can access and update your information.
- Our Data Protection Officer and their contact details.
Your Rights as a Data Subject
As a contact of UPU Industries Ltd you have:
- The right to be informed.
- The right of access.
- The right to rectification.
- The right to erasure.
- The right to restrict processing.
- The right to data portability.
- The right to object to processing.
- The rights in relation to automated decision making and profiling.
Who We Are
UPU Industries is a family run business built on family values, proud to have served the agricultural community for over 40 years. We are manufacturers of premium and bespoke plastic net and wraps.
The Type of Information We Hold
The personal information we collect might include your name, address, email address, sensitive information regarding your physical wellbeing, third party information including bank details, records of you on CCTV footage. This is not an exhaustive list and what personal information we collect is dependent upon the service you are engaging.
We may collect your personal information in a number of ways
For Example, when you:
- Use our services.
- Visit our website.
- Enquire about our products.
- Engage with us on Social Media (Facebook).
- Engage with us at Trade Shows.
- Contact us by any means with queries, complaints etc.
- Have had your information passed to us by a third party.
In some cases, we will collect data about you from third parties such as credit reference agencies and social networking websites.
How your information is used
We may use your information to:
- Enable UPU Industries Ltd. to provide a tailored service to you.
- Enable UPU Industries Ltd. to provide customer service and support to you.
- Seek your views or comments on the service/goods we provide.
- Notify you of changes to our business/products.
- To carry out our obligations arising from any contracts entered into by you and us.
The Legal Basis We Rely on to Process Personal Information
In order to fully comply with data protection legislation, we need to keep a register of the full range of personal information that we hold. On this register we also must state the legal basis which allows us to hold this information. The law on information protection sets out a number of different bases on which an organisation may collect and process your personal information including;
In specific situations, we can collect and process your information with your explicit consent.
- Performance of a Contract
In certain circumstances, we need your personal information in order to perform a contract that we have entered into with you.
- Lawful Obligation
If the law requires us to, we may need to collect and process your information. We may also need to pass your information onto a third party if required by law.
- Legitimate Interest
In specific situations, we require your information to pursue our legitimate interests in a way which may reasonably be expected as part of running our business and delivering our services.
Who has access to your information
Within UPU Industries Ltd. access is only available to those who need this information in order to provide a service to you or fulfil the contract that we have with you. Access may be required by departments such as ICT and Finance, as well as those involved in the direct delivery of services to you.
- Third Party Service Providers working on our behalf
We may pass your information to our third-party service providers, agents, transport companies and credit reference agencies and other associated organisations for the purpose of completing tasks and providing services to you on our behalf. However, when we use third party providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Please be assured that we will not release your information to third parties beyond UPU Industries Ltd, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime. If you wish to see this not exhaustive list, please contact the company.
- Third Party Entities Outside of the EU
At UPU Industries Ltd in rare cases we may need to transfer your information on to a third party outside of the EU. To ensure that your personal data receives an adequate level of protection we seek to ensure that your personal data is treated by those third parties and entities outside the EU in a way that is consistent with and which respects the EU laws on data protection.
How long do we keep your information for
We will only keep your information for as long as we need to or for as long as we are legally required to do so. We review our retention periods or personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as it is necessary for the relevant activity, or as long as is set out any relevant contract you hold with us.
How you can access and update your information
The accuracy of your information is important to us. If any of your information that we hold in inaccurate or out of date, please notify us. You have the right to ask for a copy of the information that UPU Industries Ltd hold about you. This is known as a Subject Access Request (SAR) and we have 30 calendar days to comply with such a request. There is no charge. However, should your request go beyond what is reasonable there may be an administration fee charged.
Security precautions in place to protect the loss, misuse or alteration of your information
When you give us personal information, we take steps to ensure that it is treated securely. Any confidential and sensitive information is securely filed and we apply software to our ICT to prevent unauthorised access to your information. We host our servers on site minimising the risk of a breach in our systems. We have appropriate procedures in place for data security and management of records. All of our staff are trained in data protection and GDPR.
We also monitor compliance with data protection procedures through internal audits.
Should you have any queries regarding any aspect of Data Protection within UPU Industries Ltd, please contact:
Data Protection Officer
UPU Industries Ltd
1 Quillyburn Business Park