Hannay - About Us

Data Protection Policy

 

Introduction

John W Hannay & CO Limited (“the Company”) is committed to protecting (i) your privacy, and (ii) the confidentiality of all information that may pass between you and the Company. Regard for the lawful and correct treatment of any personal data is very important for the Company, not only for its own efficient operations but also to maintain the confidence of those with whom it deals. The Company therefore fully endorses and adheres to the legal obligations and principles of the Data Protection Act 1998.

Information for Ordering and Invoicing Purposes

There are two reasons for the Company collecting personal information from you: - firstly, to process your order and secondly, to provide you with the best possible service.

The type of information the Company collects about you includes, but is not limited to: -

• your name
• address
• phone number
• contact name
• email address
• credit/debit card details where applicable

This information about you will be collected by the Company during the course of providing services to you and may be collected by phone, through the use of purchase orders or by other means.

In certain circumstances, the Company may use the information you provide to it to inform you of certain products or services that may be of interest to you.

The information the Company holds will be accurate and up to date, provided that you notify the Company of any changes to the information that you provide it with. You can check the information that the Company holds about you by contacting the Company and requesting a copy of the information it holds on file. Any inaccuracies you find will be deleted or corrected promptly.

The information provided by you and which the Company holds will be held securely in accordance with the Company’s internal security policy and the law. Such information shall not be retained for longer than is necessary.

You agree that where you default in any payment owed to the Company your details will be passed to a debt collection agency or any other third party the Company may use to recover the debt owed to it. The Company will notify you in writing when action of this nature is to be taken and you will be given reasonable time to clear any monies owed prior to this final action being taken. Information passed to a third party will, so far as the Company is aware, be processed in accordance with the principles of the Data Protection Act 1998 as applied.

The Company has notified with the Information Commissioner and its notification details will be provided on request.

The Company has an office in the Republic of Ireland. Therefore information relating to you may be transferred between the Company’s offices in the United Kingdom and the Company’s office in the Republic of Ireland and vice-versa. However such information will at all times continue to be processed by the Company in accordance with the terms of this Data Protection Policy.

Information for destruction that the Company collects from you

The Company warrants to you that all confidential documentation and information collected by it from you for secure destruction (“the Information”) shall be handled and processed in such a manner that the Information shall remain confidential at all times.

The Company is aware of the provisions of the Data Protection Act 1998, in particular, principle 7, and will use the Information that it collects, records, holds or processes under the agreement the Company has with you solely for the purposes of performing that agreement or as you otherwise instruct.

The Company has appropriate operational and technological processes in place to protect the Information against unauthorised, unlawful or accidental loss, destruction or damage.

The Company has extensive technical and organisational security measures in place to protect the processing and destruction of the Information carried out by the Company on your behalf.

The Company warrants to you that the Information shall not be transferred to a country or territory outside the United Kingdom.

Information that is readily available in the public domain shall not be considered confidential and as such is excluded from this Data Protection Policy.

This Data Protection Policy is in addition to our standard terms and conditions. The Company reserves the right to amend this Data Protection Policy without notification to you.