Data Privacy Policy

(Updated 23 May 2018)

THE CAST IRON BATH COMPANY takes the privacy of its customers very seriously and the security of your personal information is extremely important to us.

This Policy sets out when and why we collect personal information about people who visit our websites, write to us, or interact with us via social media, or use our products or services in our showrooms, over the telephone or online.

This Policy also explains what we do with your personal information, the conditions under which we may disclose it to others and what we do to keep it secure. It also sets out where and how we collect your personal information, as well as your rights over any personal information we hold about you.

By using our Services, you are agreeing to the content of this Privacy Policy.

Who we are

The Cast Iron Bath Company is a limited company, registration number 06585399. Our registered address is Aurora House, Hopper Hill Road, Eastfield, Scarborough, North Yorkshire YO11 3YS.

What information might THE CAST IRON BATH COMPANY collect?

When you place an order with THE CAST IRON BATH COMPANY in our showrooms, via our telesales department or on our website, the information that we collect and store relating to you is primarily used to enable us to provide our products and services to you.

The personal information collected is held for as long as necessary to provide the products and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations, fulfilling the product guarantee, resolving disputes and enforcing our agreements.

The personal information that we will collect could be:

• your name, address, telephone number and email address;
• information about the services or products that we provide, or have provided to you;
• any feedback you give to us;
• details of the telephone conversations, emails and other electronic communications that you have sent to us (including completing a survey, uploading photographs, requesting a call back from a sales representative or reporting a problem with our products).

If you make a payment online or purchase a product from us, your card information is not held by us, it is collected by our third-party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions.

We may use your information to:

• make our products or services available to you;
• process your orders;
• carry out our obligations arising from any contracts entered into by you and us;
• take payment from you or give you a refund;
• help us to prevent fraud;
• for statistical analysis to help us understand more about you as a customer, the products and services you consume, the way you consume them and how, and where, you shop so we can serve you better;
• improve our services, showrooms and websites;
• where you have given your consent (if necessary), contact you about our products and services, including to seek your views or comments on the products and services we provide;
• notify you of changes to our Services;
• provide for the safety and security of our colleagues and customers, for example via CCTV;
• help answer your questions and solve any issues you have;
• process a job application.

How might we share your data?

We will never sell your details to other companies so that they can market to you.

Your name, address and contact details may be shared with our suppliers and delivery contractors to ensure that we can fulfil our contractual arrangement with you to deliver the products and services you purchase from us.

Suppliers who deliver to you directly will be passed your full contact details, that you provide us, to allow them to fulfil this requirement. In some cases, where they are responsible for the product guarantee, this information may be stored for the full period of the guarantee to allow them to fulfil this.

If you provide information to us about any person other than yourself (e.g. to arrange for delivery of the product), you must ensure that the third party has understood how their information will be used and you must ensure that they have given their permission for you to share their information.

Finance Applications: If you wish to enter into a finance agreement to purchase product, we will facilitate this for you by passing your information to the finance providers with whom we have agreed arrangements in place (Close Brothers Finance). Close Brothers is a third party data controller and is therefore responsible for any information that you provide to them.  Details of the privacy policy are available directly from Close Brothers.

Once the finance company have accepted your application for finance, THE CAST IRON BATH COMPANY only keep records in relation to loan deposit,  terms and the value of the finance requested.

International Transfers of Your Personal Information

In certain circumstances, we may transfer your personal information to our suppliers or service providers based outside of the EEA for the purposes described in this Privacy Policy. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing and processing.

In these circumstances, we will take reasonable steps to ensure that your personal information is adequately protected in accordance with our privacy policy.

Your interests

When we process your personal information for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

How do we store your data?

Any personal data provided to us is stored on our secure servers and those of our service providers. Any download of information relating to any transactions entered into on our site will be encrypted to help ensure its safety.

In accordance with the General Data Protection Regulations (EU 2016/679), we employ strict physical, electronic and administrative security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage both on-line and off-line. The transmission of information via the internet is, however, not secure and therefore we cannot guarantee the security of data sent to us electronically by you. Any transmission of such data is therefore entirely at your own risk. If you have any questions relating to security of your data, please contact us using the details set out in the Contact Us section.

Legal Obligations

You should be aware that if we are requested by the police or any other regulatory or government authority investigating suspected illegal activities to provide your personal information, we may be obliged to do so.

Where we sell part or all of our business to a third party, in which case we may disclose your personal data to the prospective or actual seller or buyer of such business or assets.

Where we are legally required to disclose your information or in order to enforce or apply our terms and conditions or other agreements; or to protect our rights, property, or safety or those of our customers or other third parties.

Third Party Links

You may find links to third party websites on our site. The operators of those websites will apply their own privacy policies and you should check them before you use them or submit any data to them.

We are not responsible for their policies or the way they use your data or cookies, and we will not be liable for any loss, damage or distress you may suffer of incur as a consequence.

Your Rights

By law, you have the right to:

• request access to the personal data we hold about you. This will be provided to you within 28days and free of charge;
• rectify your personal data when data is incorrect, out of date or incomplete;
• erasure of personal information where there is no good reason for us to continue to hold it;
• restrict processing of personal information, for example if you wish to establish the accuracy or reason for processing;
• transfer your personal information to a third party;
• withdraw of consent.

Contact Us

If you have any questions or concerns with how THE CAST IRON BATH COMPANY process your personal information please do not hesitate to contact us via our website or by email privacy@castironbath.co.uk, you also have the right to refer the complaint to the regulator, the Information Commissioners Office.

You can do this by visiting the ICO website or contacting them at 0303 123 1113.