The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore the way we process, stores and protect user data and information will also be detailed within this policy.
We take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of our users throughout their visiting experience. This website complies to all UK national laws and requirements for user privacy. Any data submitted via this website is encrypted via HTTPS using a 128 bit key and TLS. You can confirm this by clicking on the green symbol next the address bar at the top of your browser window.
Types of Data we Collect
We use a third party service, Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
Business and Other Enquiries
When you communicate with us whether through the contact form on our website, through email, text, over the phone, social media messaging, social media posting or any other communication that you send us, we process this data for the purposes of responding to your enquiry.
For suppliers and customers we use software systems for invoicing, acknowledgements, quotes etc. It stores addresses, phone numbers and email addresses of companies along with the first name and surname of the contact in each company.
Employees and Applicants
For employees; we use sage payroll to store personal details. Bank details are only kept in the bank. We keep employees payroll records for 3 years after an employee leaves the company, as required by HMRC. Employees’ personal records, performance appraisals, employment contracts, etc. are retained for 6 years after they have left which is both our legal obligation, and legitimate interest.
For applicants’ correspondence (including but not limited to CV’s, covering letters and notes and/or recordings) we keep this information for at least 6 months to protect against discrimination claims that could be brought against us.
Data Retention and Security
We will only retain your personal data for as long as necessary to fulfil the purposes it was provided, including for the purposes of satisfying any legal, accounting, or reporting requirements. When deciding what the correct time is to keep the data for we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.
For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.
We have effected data security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We store your data both onsite and using secure cloud-based systems for data recovery. We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
The copyright of the material contained in the Website, text and graphics, and their selection and arrangement, and all software compilations, underlying source code and software belongs to BigStuff or the providers of such information. All rights are reserved. None of this material may be reproduced or redistributed without our express written permission. You may, however, download or print a single copy for your own off-line viewing.
Product and company names mentioned on this website may be the trademarks or registered trademarks of their respective owners.
Contact & Communication
Users contacting this website and/or its owners do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use, as detailed in the Data Protection Act 1998. Every effort has been made to ensure a safe and secure form to email submission process but advise users using such form to email processes that they do so at their own risk.
This website and its owners use any information submitted to provide you with further information about the products / services they offer or to assist you in answering any questions or queries you may have submitted. This includes using your details to subscribe you to any email newsletter program the website operates but only if this was made clear to you and your express permission was granted when submitting any form to email process. Or whereby you the consumer have previously purchased from or enquired about purchasing from the company a product or service that the email newsletter relates to. This is by no means an entire list of your user rights in regard to receiving email marketing material. Your details are not passed on to any third parties.
Although this website only looks to include quality, safe and relevant external links, users are advised adopt a policy of caution before clicking any external web links mentioned throughout this website.
The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts. Users should therefore note they click on external links at their own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Embedded Content from other Websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Shortened Links in Social Media
This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls [web addresses] (this is an example: http://bit.ly/2wNNGaM).
Users are advised to take caution and good judgement before clicking any shortened urls published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine urls are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
Access to your Personal Information
Under the GDPR data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.
You can see more about these rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of the rights set out above, please contact us
You will not have to pay a fee to access your personal data (or to exercise any of the other rights).
However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you.
Resources & Further Information
- ICO – Guide to GDPR
- Data Protection Act 1998
- Privacy and Electronic Communications Regulations 2003
- Privacy and Electronic Communications Regulations 2003 – The Guide
Last updated 29 May 2018 by BigStuff
BigStuff, Unit D Woodside Trade Centre Parham Drive, Eastleigh, SO50 4NU