This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.
Recab UK is committed to protecting your privacy and maintaining the security of any personal information received from you. Recab UK strictly adheres to the requirements of the data protection legislation in the United Kingdom. The shop.recabuk.com website is also provided by Recab UK Ltd.
The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent. For example, when you tick a box to receive email newsletters.
When collecting your personal data, we’ll always make clear to you which data is necessary for connection with a particular service.
In certain circumstances, we need your personal data to comply with our contractual obligations. For example, if you order an item from us for delivery, we’ll collect your address details to deliver your purchase, and pass them to our courier.
If the law requires us to, we may need to collect and process your data. For example, we can pass on details involved in fraud or other criminal activity affecting us to law enforcement.
In specific situations, we require your data to pursue our legitimate interests in a way that might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. For example, we will use your purchase history for RMA or EOL purposes and we will also use your address details to send you direct marketing information regarding products or changes.
When do we collect your personal data?
- When you visit any of our websites and use your account to buy products and services.
- When you create an account with us.
- When you create a shop.recabuk.com account, to receive our product newsletter, you have to opt-in. We will not send you product information otherwise.
- Unless you subscribe to the newsletter (above), the only correspondence we will send will be related to your order (i.e. status updates and/or parcel tracking information).
- When you purchase a product by phone but don’t have (or don’t use) an account.
- When you engage with us on social media.
- When you contact us by any means with queries, complaints etc.
- When you ask us to email you information about a product or service.
- When you choose to complete any surveys we send you.
- When you comment on or review our products and services.
- When you fill in any forms. For example, for RMA's, Credit Application
- If you visit us and use our car park, the owner of the site uses NPR which will track vehicles and where occupants go on the site. This system may record your image during your visit.
What sort of personal data do we collect?
- When you place an order, we need to know your name, company name (if applicable), VAT number (if applicable), address, email address and telephone numbers. This allows us to process and fulfil your order. You have the option to withhold personal information that is not required for the order process.
- Details of your visits to our websites.
- Payment card information (note we collect this via our 3rd party PCI DSS compliant card provider — we do not capture the details ourselves)
- Your comments and product or service reviews.
Here’s how we’ll use your personal data and why:
- To process any orders that you make via any method. If we don’t collect your personal data during checkout or when inputting your order, we won’t be able to process your order and comply with our legal obligations.
- For example, your details may need to be passed to a third party to supply or deliver the product or service that you ordered and we may keep your details for a reasonable period afterwards in order to fulfil any contractual obligations such as refunds, guarantees and so on.
- To respond to your queries, refund requests and complaints. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.
- To protect our business and your account from fraud and other illegal activities. This includes using your personal data to maintain, update and safeguard your account. We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.
- For example, by checking your password when you log in and using automated monitoring of IP addresses to identify possible fraudulent logins from unexpected locations.
- To process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests. This also helps to protect our customers from fraud.
- With your consent, we will use your personal data, preferences and details of your transactions to keep you informed by email, web, text, telephone and post about relevant products and services.
- Of course, you are free to opt-out of hearing from us by any of these channels at any time.
- To send you relevant, personalised communications by post in relation to updates, offers, services and products. We’ll do this on the basis of our legitimate business interest.
- To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, product recall notices, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.
- To develop, test and improve the systems, services and products we provide to you. We’ll do this on the basis of our legitimate business interests.
- To comply with our contractual or legal obligations to share data with law enforcement.
- To send you surveys and feedback requests to help improve our services. These messages will not include any promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products or services more relevant to you.
- Of course, you are free to opt-out of receiving these requests from us at any time by updating your preferences in your online account
- Sometimes, we’ll need to share your details with a third party who is providing a service (such as delivery couriers or a fitter visiting your home). We do so to maintain our appointment with you. Without sharing your personal data, we’d be unable to fulfil your request.
How we protect your personal data
- We know how much data security matters to all our customers. With this in mind, we will treat your data with the utmost care and take all appropriate steps to protect it.
- We secure access to all transactional areas of our websites using ‘HTTPS technology.
- Access to your personal data is password-protected, and sensitive data such as payment card information) is secured and to ensure it is protected.
- Website Orders: We do not collect or store your credit/debit card information - it is passed directly to our payment processor (Sagepay).
- Telephone Orders: After processing credit card orders, we securely dispose of any paperwork containing your details.
- We regularly monitor our system for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security.
- We will not sell, rent or exchange your personal information with any third party for any reason. Your personal information will be kept private and is not publicly accessible.
- We follow strict security procedures in the storage and disclosure of information that you have given us, to prevent unauthorized access in accordance with the United Kingdom data protection legislation.
How long will we keep your personal data?
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected. At the end of that retention period, your data will be deleted completely.
Where your personal data may be processed
Sometimes we will need to share your personal data with third parties and suppliers outside the European Economic Area (EEA). The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. For example, this might be required in order to fulfil your order, provide support services, deliver your order to you.
Sometimes we’ll need to transfer your personal data between countries to enable us to supply the goods or services you’ve requested. In the ordinary course of business, we may transfer your personal data from your country of residence to ourselves and to third parties located in the UK.
By dealing with us, you are giving your consent to this overseas use, transfer and disclosure of your personal data outside your country of residence for our ordinary business purposes.
Protecting your data outside the EEA
Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.
We’ll ensure that reasonable steps are taken to prevent third parties outside your country of residence from using your personal data in any way that’s not set out in this Privacy Notice. We’ll also make sure we adequately protect the confidentiality and privacy of your personal data.
We’ll ensure that any third parties process your personal data only in accordance with their legitimate interests. These third parties may be subject to different laws from those which apply in your country of residence. Please note that we do not take active steps to ensure that any overseas recipient of your personal data complies with the laws which apply in your country.
What are your rights over your personal data?
You have the right to request:
- Access to the personal data we hold about you, free of charge in most cases.
- The correction of your personal data when incorrect, out of date or incomplete.
- That we stop using your personal data for direct marketing (either through specific channels, or all channels).
- That we stop any consent-based processing of your personal data after you withdraw that consent.
You can contact us to request to exercise these rights at any time as follows:
- To ask for your information please contact The Data Protection Officer,
- If we choose not to action your request we will explain to you the reasons for our refusal.
Your right to withdraw consent :
- Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Where we rely on our legitimate interest
- In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation.
- We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
Direct marketing :
- You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request.
- Click the ‘unsubscribe’ link in any email communication that we send you. We will then stop any further emails from that particular division.
Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.
By using our services or providing your personal data to us, you expressly consent to the processing of your personal data by us or on our behalf. Of course, you still have the right to ask us not to process your data in certain ways, and if you do so, we will respect your wishes.
We hope this Privacy Notice has been helpful in setting out the way we handle your personal data and your rights to control it.
If you have any questions that haven’t been covered, please contact us via the Contact Us page.