Privacy Policy

Straw-bale Building UK Limited (“We”, “Us”, “Our”, “The company”) are committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data we collect from you will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of the General Data Protection Regulation, the data controller is Straw-bale Building UK Limited of 5 Brixeys Lane, Wareham, Dorset BH20 4HL.

We may collect the following information from customers:

Your name, address, email address, telephone number, financial and credit/debit card information, and personal descriptions.

You may give us information about you by filling in forms on our websites (www.strawbalebuildinguk.com) or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our website, subscribe to our service, place an order on our website, participate in discussion boards or other social media functions on our website, enter a competition, promotion, or survey and when you report a problem with our website.

This information is processed so that we can facilitate purchasing and delivery of products by you from us and to keep you informed of those purchases. We have identified the lawful basis for this purpose of processing as:

‘processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.’

If you do not provide us with the information we require to complete a transaction, then you will be unable to purchase our products.

The information may also be processed so that you can be notified of technical ‘how to use’ guidance and of potential safety information relating to our products. We have identified the lawful basis for this purpose of processing as:

‘processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.’

The legitimate interest in processing this information comes from our obligations as a UK Limited Company to inform you of such guidance and safety information.

The information may also be processed so that we can provide you with information about goods or services we feel may interest you based on products that you have already purchased or enquired about. We have identified the lawful basis for this purpose of processing as:

‘the data subject has given consent to the processing of his or her personal data for one or more specific purposes.’

We will only conduct this marketing activity where you have specifically ‘opted-in’ to receive such marketing material. Even if you consent to this marketing activity, you have the right to withdraw that consent at any time. You can do this by clicking the ‘unsubscribe’ button in the email you receive, by writing to us at the address provided at the top of this privacy notice, or by completing a contact form on the ‘contact us’ page of our website.

In addition to the above, we may automatically collect the following information when you visit our website:

Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time);
products you viewed or searched for;
page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.

This information is processed for the purposes of:

administering our website and for internal operations, including troubleshooting;
improving our website to ensure that content is presented in the most effective manner for you and for your computer;
allowing you to participate in interactive features of our service;
keeping our website safe and secure.

We have identified the lawful basis for this purpose of processing as:

‘processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.’

The legitimate interest in processing this information comes from our requirement of having a functioning and secure website.

Disclosure of your information

We may share your information with the following third parties:

Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in SW1). We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience].
Analytics and search engine providers that assist us in the improvement and optimisation of our website.
Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.

We may disclose your personal information to third parties, but only in the following, specific circumstances:

In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If we, or substantially all of our assets, are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of the company, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Transfer to countries outside of the European Union

We confirm that no personal data will be transferred to countries outside of the European Union.

How long do we keep your personal data for?

As long as you are a customer of ours we will process your personal data to provide you with the products and services you have asked us to provide. After this we may retain some or all of your personal data for up to 12 years for one or more of these reasons:

To respond to any questions or complaints;
To show that we treated you fairly; or
To meet our ongoing legal and regulatory requirements.

We may keep your personal data for longer than 12 years if we cannot delete it for legal, regulatory or technical reasons. Personal data will be retained with the utmost care and security measures will be applied to ensure your privacy and security are maintained.

Your rights as data subjects

The General Data Protection Regulation provides data subjects certain rights relating to the processing of their personal data.
You may request from us access to the personal data we process concerning you through making a subject access request (or SAR).
You may request rectification of the personal data we process concerning you where it is incomplete or inaccurate.
You may request, subject to certain criteria, the erasure of the personal data we process concerning you.
You may request that we restrict the processing of personal data concerning you. Restriction means that we will only store the personal data and not further process it.
You have the right to object to your personal data being processed. If we receive such an objection, we will, where required under the General Data Protection Regulation stop processing your personal data.
You have the right to data portability whereby we will provide you your personal data in a structured, commonly used and machine-readable format.
You can make a request expressing your rights by writing to us at the address above, or by using the contact form on our website.

Lodging a complaint with the Information Commissioner’s Office

If you feel that your personal data has been, or is being, processed in an inappropriate manner; or you feel that your rights, as described above have been infringed, you may lodge a complaint with the Information Commissioner’s Office (ICO). The ICO is the UK’s supervisory authority regarding data protection matters and has a responsibility to act on complaints made to it. You may lodge a complaint by visiting the website below or calling the ICO’s helpline on 0303 123 1113.

https://ico.org.uk/concerns/