Data – Merinal Limited trading as Heaters2Go
Purpose and consent for collection
Heaters2Go collects, stores, processes or transmits this data in order to provide Services to our Customers, which may include marketing of our Services, the processing of orders for Customers and customer support activities.
Merinal will collect a range of information about the Subject, either via our website, emails or by telephone. This information includes:
- Organisation (If applicable)
- Job title (If applicable)
- Phone number
- Email address
- IP address
- Credit/debit card details
Please note Credit/debit card details: All payment and card information is processed through the secure payment gateway services of PayPal and World Pay; this information is not stored with us or stored on our servers.
Your privacy as a Customer is very important to us and the Company does not disclose any of your Customer information to any third parties unless directly linked to the fulfilment of the purchase (i.e. Delivery Companies / Couriers).
The cookies used on this shopping website are only to keep track of the content of your Shopping Cart once you have selected an item.
Any information given at the time of ordering is collected by us with the sole intention of completing a Customer order.
We do not send marketing material on to other parties and your information is dormant after your order is completed.
All information is collected lawfully and in accordance with the data protection act 1998.
Merinal does not undertake any automated decision making relating to any Service activities except for third party fraud checking services that may automatically decline a credit or debit card transaction.
Merinal may from time to time contact the Customer via email regarding orders, deliveries and other service related matters such as billing, account management and maintenance.
We will keep your personal information for as long as you are a customer of Merinal Ltd.
After you stop being a customer, we may keep your data for up to 10 years for the following reasons:
- To respond to any questions or complaints.
- To comply with the legal requirements and Warranty Periods.
Data transfers and the use of Data Sub Processors
Merinal will not share data with a third party not directly associated with the provision of services without explicit consent. Merinal will also not transfer Subject data to a third party country outside of the UK or EEA that is not compliant with the applicable data protection laws via adequacy agreement, Binding Corporate Rules or other legally appropriate means as defined by the Information Commissioners Office without their explicit consent.
Merinal makes use of a number of third party organisations for the purposes of delivery of Services to the Customer.
Whilst the following list is not intended to be exhaustive, Merinal typically only transfers the personal data relating to our customers, where required for the activities set out below, to the following third parties or processors:
- TNT – Parcel Delivery Service provider
- Parcel Force – Parcel Delivery Service provider
- Elnur UK Ltd – Supplier / Delivery Service provider
- Sage – Internal Accounting System
Merinal will update this list from time to time as our systems and operations evolve.
By interacting with Merinal as defined in this policy, the Subject provides their consent for this transfer and use of our Data Processors and their Data Sub-Processors, and for transfer to any other appropriate third party Data Processor for the purposes of delivery of the Services and customer relationship management activities. No data transfer will be undertaken that is outside of the strict scope of the Purposes states in this policy, or that will materially degrade the security of the Subject’s data or the Data Subject’s rights and in any event the security provisions will be compliant with the applicable Data Protection Laws. Such Data Processors and Sub Processors will be contractually bound to maintain technical and organisational controls in compliance with the requirements of the GDPR.
Commitment to confidentiality and security of processing
Merinal will use appropriate technical and organisational security measures within our sphere of responsibility to ensure an appropriate level of confidentiality, integrity and, where Merinal is the Data Controller, availability of Subject data and to ensure its availability in the event of a business continuity incident. Merinal will undertake security and data protection assessments of any third parties we elect to use prior to transfer of any Customer Data and regularly thereafter.
Whilst Merinal maintains configured encrypted endpoints for order processing through our HTTPS protected websites the Subject retains sole responsibility for their data when outside of Merinal systems.
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Get in touch
We do not send marketing material on to other parties and your information is dormant after your order is completed. You have the right to ask us not to process your personal data for marketing purposes and you can also exercise the right at any time, or discuss any other data protection matters with us, by contacting us at email@example.com or write to Merinal Limited, Unit 3 East Bond Street, Leigh, Lancashire WN7 1BP, for the attention of the General Manager.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and suppliers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Under Data Protection Laws, Data Subjects can make certain choices in relation to how their personal data is processed. These include whether your personal data are disclosed to third parties, and preferences regarding the frequency, subject matter, and/or format of communications.
Data Subjects, Controllers or any other concerned parties wishing to discuss matters relating to data protection, such as a Subject Access Request or concern over accuracy of collected data, please email firstname.lastname@example.org or write to Merinal Limited, Unit 3 East Bond Street, Leigh, Lancashire WN7 1BP, for the attention of the General Manager. The email address is monitored within working hours and you should receive a reply within two working days.
Should there be a concern regarding a possible security incident or data breach, please email email@example.com