If you have any questions regarding how we store or use your personal data, or would like to make a request concerning your personal data, please email firstname.lastname@example.org
Under GDPR, strukta Group Ltd is the Data Controller.
Our registered address is:
36 Walworth Road, Walworth Industrial Estate, Andover, SP10 5LH.
You can call us on 033 33 21 00 13 between 6:30am and 4:30pm, Monday – Friday.
We don’t have a Data Protection Officer (DPO) and there is no requirement for us to appoint a DPO under the terms of the GDPR; contacting us using the details above will enable us to deal with any related enquiries.
WHAT IS PERSONAL DATA?
Under the EU’s General Data Protection Regulation ‘Personal Data’ is defined as:
“any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
WHY DOES STRUKTA NEED TO COLLECT AND STORE PERSONAL DATA?
In order for us to provide you with our products and services we need to collect personal data for correspondence purposes, including contacting the right person regarding queries, sales and invoices, and to deliver goods to site. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy. We may pass your personal data on to our service providers who are contracted to strukta in the course of our dealings with you. Our contractors are obliged to keep your details securely and use them only to fulfil the service they provide you on our behalf. Once your service need has been satisfied or the case has been closed, they will dispose of the details in line with strukta’s procedures.
We do not collect or use data about our customers that is classified under GDPR as ‘special categories’.
HOW STRUKTA USES YOUR INFORMATION
strukta will process – that means collect, store and use – the information you provide in a manner that is compatible with the EU’s General Data Protection Regulations (GDPR). We will endeavour to keep your information accurate and up to date and not keep it for longer than is necessary. In some instances the law sets the length of time information has to be kept, but in most cases strukta will use its discretion to ensure that we do not keep records outside of our normal business requirements.
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.
The basis for processing your personal data
We use a combination of legitimate interest and gathering consent to process personal data, depending on the situation.
We are a specialist builders’ merchant, supplying products and services aimed at general builders, developers, roofers, carpenters, plasterers, ground workers and other specialist trades involved in the construction of residential and commercial properties. We have an active customer base and market our products and services to our customers and prospective customers. We only process any personal data in a way that you might reasonably expect and we consider to have minimal impact on your privacy.
If you are an individual or run a business as a sole trader or a partnership that is not related to the building and construction industry and haven’t previously entered into negotiation regarding prices with us, communicated with us, registered on our website or purchased from us, we will ask for your consent to process your data.
If you work for a Limited company, PLC, or similar, and we are processing your personal data, your rights under GDPR and PECR are unaffected unless we need them to satisfy a legal obligation or as part of a contract.
Categories of personal data processed by strukta
In the course of negotiating, marketing and doing business with customers we may collect any combination of the following categories of personal data:
• Name, job title and/or trade
• Contact details, including email address, postal address, social network handle and telephone numbers
• Location, including additional addresses and GPS coordinates
• Computer device, including IP address, Mac address, browser fingerprint
• Communication, including telephone recordings, voice mail, email
• Transactional, including purchases from strukta, credit information if the business is a sole trader or partnership
USING YOUR PERSONAL DATA
We will use the information you provide for the following purposes:
Internal record keeping: we use a system to record our customers’ names and contact details, along with dates of orders, what was ordered, brief descriptions of when our team have corresponded, met or talked to our customers, as well as delivery addresses and any names and contact details needed to get our goods to your site or supplied by customers as referees when opening a credit account. This helps us answer questions about past orders, ensure our invoices are correct, contact customers if there’s ever a problem, and anything else that helps us provide the excellent level of service our customers expect.
Business correspondence: from time to time we get in touch with our customers via post, email or phone; this includes sending invoices, arranging meetings, keeping customers updated with their orders, catalogue requests, invitations to events, sending gifts, account management, opening times over holidays, unplanned closures (e.g. due to poor weather conditions), changes to our terms and conditions, or prices.
Delivery to site: sometimes building sites are hard to find, so we make sure that we have some contact details to help the driver deliver goods where they’re needed. This is usually a name and mobile number – whatever our customer feels is the best information to give. Occasionally we use courier or delivery companies to get our goods to site, or goods will need to be delivered direct by the manufacturer or our supplier; these are third parties working on our behalf and their obligations are detailed above.
Customer feedback and market research: we regularly ask customers to feedback about their recent experience by email and may also contact customers for market research purposes by email, post or phone.
Charitable giving: we’re often asked by customers to donate to a charitable cause on their behalf or sponsor them; we in turn ask their permission to use their name, company name and any other relevant details, such as a link to their ‘JustGiving’ page, in our promotion of the event or cause, which we do via social media, emails and blog posts on our website.
Competitions: occasionally we run competitions and will collect names and contact details so that we can notify the winner(s). We announce the winner(s) via social media, emails and blog posts on our website and this is always detailed in the competition’s terms and conditions available on request via email@example.com and on our website.
CCTV and photography: all of our sites have CCTV systems installed and running. We use the footage to investigate issues as they arise. At events and/or for marketing purposes, we may ask to take photographs of customers; we always ask customers to sign an agreement giving us permission to use their picture and keep the agreement on record, giving a copy to the customer for their future reference. The majority of our fleet of vehicles have dashboard cameras recording the drivers’ journeys; we use this footage as evidence should any of the vehicles be involved in a road traffic incident or similar event.
Customer testimonials: we’re lucky to have customers giving us testimonials about the excellent service they’ve received from strukta, and all customers are asked to sign an agreement giving us permission to use their testimonial with their name, company name and position, and we keep the agreement on record, giving a copy to the customer for their future reference.
Marketing: customers receive marketing messages by email and SMS, and we always provide a means of opting out. Customers can manage their email preferences using links at the bottom of our messages. We make every attempt not to send more than 3 emails a week; most customers receive 1 or 2 a week, depending on the type(s) of email they’ve asked to receive. We do send marketing messages by post and it is always regarding products or services similar those previously purchased or used, or related to the industry our customers work in.
Social Media: we also use the Facebook Pixel application which tracks the actions taken on our website by individuals who have viewed our Facebook advertisement campaigns. This tool allows us to measure success of individual campaigns and deliver more relevant advertisements to users that better align with individual interests. Read Facebook’s GDPR Statement.
IP Tracking Software: strukta.co.uk uses IP tracking software which obtains information on the activity of users that visit the website. The software we use is fully GDPR compliant and does not store any personal data such as the user’s name.
The IP tracking software this website uses is for the purposes of marketing, optimization, products and service. The company Whois Data Ltd (https://www.whoisvisiting.com) are used on this website. Information recorded includes: your organization’s contact number, web address, email, business description and where possible, the SIC Code. The software records the user journey on strukta.co.uk. The data recorded cannot be used to identify any individual and the IP addresses are made anonymous upon collection. We may use some of the information collected to contact the business. If you do not agree with this, you can object to the collection, processing or storage of your IP address at any time with effect for the future by clicking on the link below: https://app.whoisvisiting.com/opt-out
OTHER INFORMATION WE HAVE ACCESS TO
Systems we use or have accounts with may record information about you through your use of, or interaction with them. For example, if you open our emails on your mobile device and have GPS switched on, the email platform we use may record your location – this is usually managed by you with settings on your device. By liking or following strukta on social media networks that you are a member of, we may be able to see information about you depending on your privacy settings on the social network you’re using.
ORGANISATIONS THAT PROCESS DATA ON OUR BEHALF
In line with GDPR, we need to tell you of any other organisations (processors) involved in the processing of your data. For the most part our information is stored on our internal systems here in our offices. We have sought and have recorded assurances from other processors, where they are used; and they are as follows:
Oracle NetSuite: we use this cloud-based solution to record and manage all our customer, supplier and product information and transactions. This data is held within European data centres owned by Equinix. The system is managed by Equinix and Oracle and certified to all relevant legal requirements and industry best practices including ISO 27001 and Privacy Shield.
Smartsheet: we use this cloud-based solution as a means of managing activity which includes who our staff have spoken to. We only store data essential to the activity on this system. Servers for Smartsheet are in the USA and the company is a member of Privacy Shield.
Blue Bee Solutions: our website is hosted, developed and maintained by this company.
Dotmailer: we use this email platform to create and deliver our emails. Dotmailer is linked to other systems we use to enable us to send personalised and timely messages. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our emails.
Message box: we use this system to create and deliver SMS messages to customers that have given us permission to do so.
MarketScan: we use this company to purchase some customer data from which includes de-dupe of our current data.
Webmart: we use this company to handle some of our direct mail.
The Mailing People: we use this company to handle some of our direct mail.
Survey Monkey: this platform provides us with the means to carry out market research and gather feedback about our products and services.
TrustPilot: we use this platform to collect, manage and publish customer reviews.
Signable: we use this company to send digital account forms to customers and prospects.
Pubble: We use Pubble to host our Live Chat functionality on our website.
Couriers and delivery companies: we’re not always able to deliver direct to site using our own fleet of vehicles and use courier and delivery companies including TNT, AET Transport, Swift Couriers, KKM, Sprinter Couriers.
We do not pass or sell personal data to any person or company that is not acting on our behalf.
Before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with the terms of this policy.
ORGANISATIONS THAT SUPPLY US WITH DATA
We buy contact lists from reputable providers that only supply business details that have been checked for quality and against the Telephone Preference Service and Corporate Telephone Preference Service.
You have the right to object to strukta processing your personal data. Your objection would need to be regarding us processing your personal data based on legitimate interest, or for direct marketing, and on grounds relating to your particular situation. Please contact us if you need to raise an objection.
Should we receive an objection relating to direct marketing, we will stop processing your personal data. Direct marketing includes email, SMS (text messages), phone calls and post. All our marketing emails have an unsubscribe link at the bottom, as well as a link to update your preferences. All our SMS have ‘STOP’ instructions.
You have the right to access your personal data and any supplementary information. You can do this by contacting us and making this request. We’ll provide you with what information we have free of charge within one month of receiving your request, after we have verified your identity. If your request is complex, we’ll notify you within one month of receipt that we will need to extend this period and why, and the maximum that we are able to extend it by is a further two months. If we feel that a request is manifestly unfounded or excessive, particularly if requests are repetitive, we can charge a reasonable fee to cover the administrative costs or refuse to respond. If we refuse to respond we will explain why; you would still have the right to complain to the ICO and to a judicial remedy without undue delay and within one month.
You have the right to tell us if your information is incorrect or incomplete and for it to be rectified. Should you notice that data we hold isn’t right, please contact us and we’ll correct it within a month of receiving your request. Should the request for rectification be complex, we’ll let you know that we will need to extend this period and why, and the maximum that we are able to extend it by is a further two months. If we don’t take action following your request, we’ll contact you to explain why and you’ll have the right to complain to the ICO and to a judicial remedy.
You have the right to be forgotten. You can request the deletion of personal data when there is no compelling reason for us to continue to process it by contacting us. This includes where you feel that it is no longer necessary, where you withdraw consent, where there is no overriding legitimate interest, or if you feel it was unlawfully processed. Should there be a reason for us to refuse, such as the exercise or defence of a legal claim, we will tell you. We will endeavour to fulfil your request otherwise, although if we have used your personal data on social networks it may not be entirely possible (we would not do this without your consent).
You have the right to request that we restrict processing of your personal data. This would mean that we continue to store your personal data, but not use it going forward. You can do this by contacting us. We will retain just enough information about you to ensure that the restriction is respected in the future. We’ll also restrict processing of your personal data if you tell us that it’s inaccurate or incomplete. Should you need to establish, exercise or defend a legal claim and we no longer need your personal data, we’ll restrict its processing.
You have the right to request your personal data to reuse it for your own use across different services. However, the type of personal data that we process is unlikely to be useful for this purpose. Please contact us if you’d like to request this and we’ll reply within one month either with the data or a reason why we’re not taking action. If we tell you we’re not taking action, you’ll have the right to complain to the ICO and to a judicial remedy without undue delay and within one month.
strukta don’t use any form of automated decision making including profiling.
If you would like to make a request concerning your personal data, please email firstname.lastname@example.org
Or write to us:
strukta Group Ltd,
36 Walworth Road,
Walworth Industrial Estate,
You can also call us on 033 33 21 00 13 between 6:30am and 4:30pm, Monday – Friday.
strukta Group Ltd was formed in 2013 from the merger of Coastline Building Products and Southern Building Supplies (SBS). Since then strukta Group has acquired Ivel Building Supplies based in Biggleswade, and Advance Fixings based in Taunton (trading as strukta (Taunton) Ltd up until 1st January 2020). Anyone whose details were held by any of these companies were notified of the change in brand and / or ownership at the time.