This privacy policy sets out how J & C R Wood Limited (“we”, “us”, “Metalcraft”) uses, maintains and protects any information that users (“you”) give us when you visit our website www.metal-craft.co.uk or if you decide to purchase directly from us by phone, post, fax, email, or at an exhibition or event or visit to or from us.

This privacy policy applies to all customers including users of our website and all products and services offered by us under the Metalcraft brand.

We recognise the importance of protecting the privacy of personal information and regularly review and update strict policies and security measures to protect your information collected in accordance with:

• The Data Protection Act 1998
• The Privacy & Electronic Communications (EC Directive) Regulations 2003
• The EU General Data Protection Regulation (Regulation EU 2016/679), effective from 25^th May 2018

J & C R Wood Limited may change this policy from time to time by updating this page. We will endeavour to notify you of any major changes to our policies but recommend you also check this page from time to time to ensure that you are happy with any changes.

We may collect personal information from users in a variety of ways including, but not limited to:

• when users visit our site
• register on the site for a Login account (with no obligations to purchase)
• complete a form

or

• request a catalogue
• make a purchase from our webstore (i.e become a customer) contact us directly by phone, post, fax, email, or at an exhibition or event or visit to or from us.

The personal information we may collect, store and process are

• Identity & Contact Data – including first name, last name, company or organisation name (if applicable) address, phone no, fax no, email address
• Marketing Data – where you first learnt of Metalcraft and whether you also require a catalogue(s) to be mailed to you
• Privacy Data – your preferences in receiving future marketing from us and your communication preferences
• Profile Data [Website visitors only]– User Name & Password (but only if you register for a Login account. Note – the password is encrypted so we cannot see it but we have the ability to reset it in the event of you having problems accessing your account
• Transaction Data (only if you purchase items through our webstore or order directly from us by phone, post, fax, email, or at an exhibition or event or visit to or from us) – Order Date, Billing Address, Delivery address (if different), Items Purchased & Delivery Preferences
• Financial Transaction Data (only if you purchase items through our webstore) – because we use a hosted Paypal integrated shopping cart, we do not store any sensitive payment details relating to your Paypal account or any credit or debit card details submitted to Paypal. We only receive a notification of an amount received into our Paypal account, who it is from and a confirmation of some of the Transaction Data above.
• Financial Transaction Data (if you order directly from us by phone, post, fax, email, or at an exhibition or event or visit to or from us – we only hold details of your credit or debit card number and expiry date (and 3 digit CCV security code for orders placed by phone, post, fax, email) temporarily until your order has been shipped. If paying by cheque your bank account no, sort code and payee name are held temporarily until the cheque is paid into our bank.

We use this data in the following ways depending on how you contact us:

For visitors to our site, who complete our Request a Catalogue or Rest of the World forms on our site:

1. Your Identity & Contact data enables us to initially register your interest in our products and identify which country you are located in, so we can establish where you are based and whether under distributor agreements we have in place we can supply any or selected goods from our product range to you. If we are not we will advise you who you need to contact instead. This data may be used to service any requests for a catalogue by yourself (if applicable) and is stored in readiness for any possible subsequent orders we hope to receive from you.
2. The Marketing Data is recorded purely for us to analyse the effectiveness of our overall marketing activities
3. Your Privacy Data allows us to record your consent to opt in to receiving direct marketing regarding new products, promotions, special offers and news about Metalcraft. It also identifies your preference as to how you wish to receive such material. Furthermore, you are free to change those preferences at any time by post, phone, fax, or email as identified on our Contact Us page. We will not send any direct marketing to you unless we have your consent to do so.

For prospective customers who contact us directly to request a catalogue or further information by phone, post, fax, email, or at an exhibition or event or visit to or from us:

1. Your Identity & Contact data enables us to initially register your interest in our products and identify which country you are located in, so we can establish where you are based and whether under distributor agreements we have in place we can supply any or selected goods from our product range to you. If we are not we will advise you who you need to contact instead. This data may be used to service any requests for a catalogue by yourself (if applicable) and is stored in readiness for any possible subsequent orders we hope to receive from you.
2. The Marketing Data is recorded purely for us to analyse the effectiveness of our overall marketing activities
3. Your Privacy Data allows us to record your consent to opt in to receiving direct marketing regarding new products, promotions, special offers and news about Metalcraft. It also identifies your preference as to how you wish to receive such material. Furthermore, you are free to change those preferences at any time by post, phone, fax, or email as identified on our Contact Us page or related marketing material. We will not send any direct marketing to you unless we have your consent to do so.

For visitors to our site, who complete the Register form (for a Login Account):

1. Your Identity & Contact data enables us to initially register your interest in our products and identify which country you are located in, so we can establish where you are based and whether under distributor agreements we have in place we can supply any or selected goods from our product range to you. If we are not we will advise you who you need to contact instead. This data is stored in readiness for any possible subsequent orders we hope to receive from you.
2. The Marketing Data is recorded purely for us to analyse the effectiveness of our overall marketing activities.Your Privacy Data allows us to record your consent to opt in to receiving direct marketing regarding new products, promotions, special offers and news about Metalcraft. It also identifies your preference as to how you wish to receive such material. Furthermore, you are free to change those preferences at any time by post, phone, fax, or email as identified on our Contact Us page or by going into your Login account and changing your Opt In preferences. We will not send any direct marketing to you unless we have your consent to do so.
3. Your Profile Data is only collected to help us to help you in the event of any technical issues in logging into your login account. We do not have access to seeing your chosen password, only to re-setting in the event of any problems

For customers, who have registered for a Login account and then purchase from our webstore or indeed those just ordering directly from us by phone, post, fax, email, or at an exhibition or event or visit to or from us:

1. Your Identity & Contact data is essential to us to fulfil our contract to supply goods to you as our customer and help notify you of the progress of your order. For those organisations that request credit accounts, we may also use this data to obtain a credit rating report from a third party supplier.
2. The Marketing Data is recorded purely for us to analyse the effectiveness of our overall marketing activities.
3. Your Privacy Data allows us to record any updates to your consent to opt in to receiving direct marketing regarding new products, promotions, special offers and news about Metalcraft. It also records any updates identifies your preference as to how you wish to receive such material. Furthermore, you are free to change those preferences at any time by post, phone, fax, or email as identified on our Contact Us page or by going into your Login account if you purchase through our website and changing your Opt In preferences. We will not send any direct marketing to you unless we have your consent to do so.
4. Your Transaction Data allows us to fulfil our contract to supply goods to you as our customer. We also retain these details for legitimate business interests in order to service any transactional or technical queries over your order, deal with any claims under warranty and provide exemplary customer service in providing technical advice in the event of a need for spare parts for any of our products. We also retain these details in the unlikely event of having to respond and contest any public liability claims for damage or injury stemming from customers who may have purchased products not manufactured or supplied by us.
5. If purchasing through our website Your Financial Transactional data does not contain sensitive credit/debit card information or paypal account data. We only use this to confirm that payment has been authorised through Paypal and allow your goods to be despatched.

However, if purchasing directly by phone, post, fax, email, or at an exhibition or event or visit to or from us – your credit or debit card number and expiry date (and 3 digit CCV security code) are deleted immediately your order has been shipped and order processing completed. The bank details of those customers who pay by cheque are held securely and can no longer be seen once your cheque is paid into our bank.

We do not, and will not, sell any of your personal data to any third party – including your name, address, email address or any other personal data we hold on you. We want to earn and maintain your trust, and we believe this is essential in order do that.

However, we share your data with the following categories of companies as an essential part of being able to provide our services to you, as set out in this statement:

Payment service providers (primarily Paypal, Barclays Merchant Services, Barclays PLC)

Delivery companies (primarily Parcelforce, Royal Mail, TNT, Eurovision Logistics, D& P Haulage, Fastnet Forwarding)

Website Design & Hosting Company (Arrival Design) who manage our website design and hosting and email marketing

Conventional Direct Marketing agencies (Zero5, JEM Marketing) who co-ordinate bulk postal mailings on our behalf

For those customers who request a credit account – we may share your contact details with our Credit Reference Agency (Graydon) in order to obtain a credit report on your credit worthiness.

We may provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you.

We are advised by those parties that the personal data of any of our UK, EU or EEA prospects or customers is not transferred outside of the EU or EEA unless it is done so in a manner in strict accord with the provisions within the EU General Data Protection Regulation (Regulation EU 2016/679) governing such transfers.

If you have said we can, we’ll send you marketing messages by email, post or by phone, to keep you aware of what we’re up to and to help you see and find our products.

How to stop marketing messages from Metalcraft

You can stop receiving marketing messages from us at any time

You can do this:

• If you have set up a Login account on our website, you can change your Privacy settings by logging into your account
• By clicking on the ‘unsubscribe’ link in any email or notifying us through the forms we provide on our postal mailings
• By contacting our Metalcraft sales team on +44 (01)482 345067 or by email to info@jandcrwood.co.uk or by writing to us at the address give at the end of this policy

Once you do this, we will update your profile to ensure that you don’t receive further marketing messages.

Please note that it might take a few days for all our systems to be updated, so there is an outside chance that you might still receive a marketing message from us while we process your request.

Note - This will not stop other essential messages that we need to send you regarding the status of any orders you have placed with us.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the legal requirements.

Prospective Customers (without a Login account on our website)

For those who have expressed a general interest in our products but not purchased from us or set up a Login account on our website, we retain your personal data for as long as we adjudge necessary to fulfil the purposes we collected it for including marketing analysis and direct marketing.

With over 60 years’ experience in dealing with our customers, Metalcraft is a considered purchase to quite a significant number of our customers and it sometimes seen as an activity or hobby to take up in years to come so for that reason we retain your data for as long as you have opted in to receiving direct marketing.

For those that have opted out of receiving direct marketing, we retain your personal data for no longer than 24 months and remove them from our database through a process of anonymisation.

Prospective Customers (with a Login account on our website)

For those who have expressed a distinct potential interest in our products by taking the time to set up a Login Account on our website, we choose to retain that account indefinitely should you choose to purchase at a later or much later date.

That said we will still respect your wishes, as per your account Privacy setting as to whether we send you direct marketing or not.

Customers

We will hold on to your information for as long as you have your account with us and in order to fulfil the contract of sale to supply you with goods or services. We only use this for direct marketing if you have opted in as described above.

We retain the personal details collected for legitimate business interests in order to service any transactional or technical queries over your order, prevent fraud and abuse, enforce our terms and conditions, deal with any claims under warranty and provide exemplary customer service in providing technical advice in the event of a need for spare parts for any of our products. We also retain these details in the unlikely event of having to respond and substantiate or contest any public liability claims for damage or injury stemming from customers who may have purchased products not manufactured or supplied by us.

We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place. For a company of our size (SME) we always employ state of the art IT security measures appropriate to our company size and the level of data being processed.

We use computer safeguards such as firewalls and data encryption, and we enforce physical access controls to our buildings and files to keep this data safe. We only authorise access to employees who need it to carry out their job responsibilities.

We protect the security of your information on our website while it is being transmitted by encrypting it using Secure Sockets Layer (SSL). Furthermore, we employ monitoring software on our site to try to detect hacking attempts

We enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data. We may occasionally ask for proof of identity before we share your personal data with you.

However, whilst we take appropriate technical and organisational measures to safeguard your personal data, please note that in this day and age when even the Information Commissioners Office (ICO) website has been compromised, we cannot guarantee the security of any personal data that you transfer over the internet to us.

You have a lot of rights relating to your personal information:

• The right to be informed about how your personal information is being used (like this notice!)
• The right to access the personal information we hold about you. No fee is required for this process, however, we may charge a reasonable fee if your request is unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. In order to comply with requests we may need to request specific information to help us to confirm your identity and ensure your rights to access your personal information. This is a security measure to ensure that personal information is not disclosed to any person who does not have the legal right to receive it.
• The right to request the correction of inaccurate personal information we hold about you (although you can probably do most of this through your Login Account on our website if you have one)
• The right to request that we delete your data, or stop processing it or collecting it, in some circumstances and where there is no good, or legal reason for us to do so. You have the right to object to the process of your personal data where we are relying on a legitimate interest if you feel it may impact on your fundamental rights and freedoms
• The right to stop receiving direct marketing messages, which you can do through you Login account on our website, if you have one, or by contacting us (see below) if you don’t.
• The right to request that we transfer your personal data either to you or a third party identified by you. This right only applies to information which you initially provided consent for us to use, or where we used the information to perform a contract of sale.
• The right to complain to your data protection regulator — in the UK, the Information Commissioner’s Office

If you want to exercise your rights, have a complaint, or just have questions, please contact us. We try to respond to all legitimate requests within one month, although it may take longer if your request is complex. In this case, we will notify you and keep you updated.

J & C R Wood Limited have the discretion to update this privacy policy at any time. If any changes are made we will revise the date at the top of this policy. We encourage users to check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this periodically and make yourself aware of any modifications.

Our site may use web browser cookies for important site functionality and to enhance user experience. Please see our Cookie Policy for full details .

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

We shall not be held responsible or liable for any loss or damages caused or alleged to have been caused by use of or in reliance on any content, goods or services available on such linked sites.

By using our website, or requesting information from us or purchasing goods from us, you signify acceptance of this policy and our Terms & Conditions. If you do not agree to this policy, please do not use our site, request information from us or purchase goods from us. Your continued contact with us following any changes to this policy will be deemed to be your acceptance of those changes.

We always want to hear from our customers (especially if you feel we’ve let you down or could do better).

If you:

• Have any questions or feedback about this notice
• Would like us to stop using your information
• Want to exercise any of your rights as set out above, or have a complaint

please contact our Customer Service or Sales team by: 

Email to info@jandcrwood.co.uk
Phone: +44 (0)1482 345067 and go to our Sales Team option
Fax: +44 (0)1482 441141

Or by writing to us at:
Privacy Dept
J & C R Wood Limited
66 Clough Road
Hull
E Yorkshire
HU10 7PW