Owen Mumford Limited (“us” or “we”) are committed to protecting and respecting your privacy. We will retain data about you which is obtained as a result of your visiting our website at www.owenmumford.com (the “Website”). This data may be:
- personal data, our collection and use of which is governed by this Policy.
If you have not already read our Website Terms & Conditions, please do so by clicking here.
We are the data controller of the personal date we collect through the Website. We are a company registered in England and Wales under company number 01257871, and our registered office address is Brook Hill, Woodstock, Oxfordshire OX20 1TU. We are VAT registered under number GB195 9293 07.
Information We May Collect from You
We may collect and process the following data about you:
- information that you provide to us by filling in forms on the Website or otherwise by contacting us using the Contact form provided on the Website -this information may include your name, address, date of birth, email address and any other information you provide to us when contacting us for any other reason;
- records of your correspondence (if any) with us; and
- details of your visits to the Website including, but not limited to, traffic data, the Internet protocol (IP) address used to connect your device to the Internet, location data, files downloaded, weblogs and other communication data.
- information that you provide to us if you ask us to provide you with other marketing communications such as information about our products or services.
We may also collect, use and share special categories of personal data (for example about your physical or mental health) if you give this information to us.
IP Addresses and Cookies
Where We Store Your Personal Information
All information you provide to us or that we collect from you is stored on our secure servers or on the servers of our respective hosting service providers, which we may change from time to time. We may share your personal data with other Owen Mumford group companies, and our servers may be located outside the EEA. Therefore, the information that we collect from you may be transferred to, and stored at, a destination outside the EEA. It may also be processed by staff operating outside the EEA who work for us or for one of our group companies or suppliers (for example, in order for the most appropriate member of our group to process and respond to your enquiry).
Whenever we transfer your personal data out of the EEA, we ensure that a similar degree of protection is afforded to it to that applying within the EEA by ensuring that at least one of the following safeguards is implemented:
- Your personal data will be transferred to a country that has been assessed by the European Commission to provide an adequate level of protection for personal data. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
- Where we use service providers, we will use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
- Where we use a service provider based in the US, it will be covered by the Privacy Shield which requires it to provide a similar level of protection to that in Europe to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data outside the EEA.
The transmission of information via the internet is not completely secure. Although we will use our best endeavours to protect your personal data, we cannot guarantee the security of your data transmitted to the Website and any transmission is at your own risk. Once we have received your information, we will use suitable procedures and security features to try to prevent unauthorised access.
Uses Made of the Information
We (and where applicable our group companies) use information held about you in the following ways:
- to ensure that content from the Website is presented in the most effective manner for you and for your computer;
- to correspond with you and to address any queries you may raise through the Website;
- to carry out our obligations arising from any contracts entered into between you and us;
- to use data analytics to improve the Website, products/services, marketing, customer relationships and experiences; and
- to provide you with information regarding our products or services that you request from us or which we feel may interest you where you have consented to be contacted for such purposes.
If we wish to use your data for marketing purposes, we will always inform you (before collecting your data) and either request your consent or, if permitted by law, provide you with the opportunity to opt out. You can exercise your right to prevent such processing by contacting us at firstname.lastname@example.org or by clicking “unsubscribe” on any marketing emails you receive from us.
Disclosure of Your Information
We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006, from time to time. For example, group companies may share hosted servers for the storage of their data. Likewise, personal data may be shared between group companies to achieve organisation-wide goals (for instance, ensuring that the appropriate group company is able to respond to your enquiry).
We may disclose your personal information to third parties:
- who provide us with hosting services;
- who provide us with marketing and customer relationship management services;
- who provide us with logistics and fulfilment services;
- if all or the relevant part of our business is acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Website Terms of Service or any other terms or agreements.
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention.
We may use automated decision-making in the following circumstances:
- where it is necessary to enable us to deliver decisions within a shorter time frame and improve efficiency, and appropriate measures are in place to safeguard your rights; and
- in limited circumstances, with your explicit written consent and where appropriate measures are in place to safeguard your rights.
We may automatically direct any enquiry you send to us to the most appropriate team within our group of companies based on the location of your IP address. We do this automatically, and without human intervention, to enable us to process and deliver a response to your enquiry within a shorter timeframe and to improve our efficiency at responding to your enquiry. This does not affect your legal rights. For the avoidance of doubt, if you are a resident of the EEA we will not transfer your enquiry to a group company located outside the EEA without your explicit consent.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.
Purposes for Which We Process Your Data and the Legal Basis for Doing So
We have set out below, in table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data on more than one legal basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis we are relying on to process your personal data where more than one basis has been set out in the table below.
|Purpose/Activity||Type of Data||Legal Basis for Processing, including Basis of Legitimate Interest|
|To ensure that content from the Website is presented in the most effective manner for you and for your computer||Information that you provide by filling in forms on the Website or otherwise by contacting us using the Contact form provided on the Website, and details of your visits to the Website including, but not limited to, traffic data, location data, files downloaded, weblogs and other communication data.||
(a) Necessary for our legitimate interests (to define types of customers for our products and services, to keep the Website updated and relevant, to develop our business, to inform our marketing strategy, for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise); and
(b) Necessary to comply with a legal obligation
|To correspond with you and to address any queries you may raise through our Website||
Information that you provide by filling in forms on the Website or otherwise by contacting us using the Contact form provided on the Website and copies of your correspondence with us.
This information may include your name, address, date of birth, email address and any other information you provide to us when contacting us (including any special categories of personal data).
(a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to address our customers’ concerns and queries)
|To carry out our obligations arising from any contracts entered into between you and us||Information that you provide by filling in forms on the Website or otherwise by contacting us using the Contact form provided on the Website and copies of your correspondence with us. This information may include your name, address, date of birth, email address and any other information you provide to us when contacting us (including any special categories of personal data).||Performance of a contract with you|
|To use data analytics to improve the Website, products/services, marketing, customer relationships and experiences||Information relating to your visits to the Website including, but not limited to, traffic data, location data, files downloaded, weblogs and other communication data.||Necessary for our legitimate interests (to define types of customers for our products and services, to keep the Website updated and relevant, to develop our business and to inform our marketing strategy)|
|To provide you with information regarding our products or services that you request from us or which we feel may interest you where you have consented to be contacted for such purposes||Information that you provide by filling in forms on the Website or otherwise by contacting us using the Contact form provided on the Website and copies of your correspondence with us. This information may include your name, address, date of birth, email address and any other information you provide to us when contacting us (including any special categories of personal data).||Necessary for our legitimate interests (to develop our products/services and grow our business)|
|To provide you with marketing communications, for example, newsletters, updates and recommendations to you about products or services that may be of interest to you.||Information that you provide when you consent to receiving marketing communications from us.||Consent.|
Where we have a legal basis to use your personal data without consent (as we have described above), this policy fulfils our duty to process personal data fairly and lawfully and in a manner that you would expect given the nature of our relationship with you, by giving you appropriate notice and explanation of the way in which your personal data will be used.
Where consent is required for our use of your personal data, by ticking the appropriate consent box or otherwise communicating your consent, you consent to our use of that personal data for the purposes covered by the specific consent that you have given. For example, we will only process your personal data for marketing purposes if we have your consent to do so.
As mentioned above, we would like to, if you have consented to this, send and present you with marketing information about us such as news, events and products and services which we think may be of interest to you.
We will not provide your personal data to third parties so they can use your personal data for marketing purposes.
We will only send and present you with marketing communications if you would like us to. You will have the opportunity to clearly set out whether you wish to receive marketing communications from us by ticking the relevant boxes.
Security of Information
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know it. They will only process your personal data on our instructions and where they are subject to a duty of confidentiality.
Retaining Your Information
We will retain the information we receive and collect about you for a period which is reasonably required for us to use it in accordance with this Policy or in accordance with our legal rights and obligations.
You can request deletion of your personal data from our database by emailing us. You also have the right to object where we are processing your personal data for direct marketing purposes. For example, if you have given your consent to receive team updates or other marketing communications, but have changed your mind, you have the ability to opt out from receiving such communications going forward by contacting us using the details provided below or by clicking the relevant link in any communications you receive.
Current data protection laws gives you the right to access information held about you, subject to certain conditions, and to request its rectification or deletion. These rights can be exercised in accordance with current data protection laws.
The Website may contain links to and from the websites of our partner networks, advertisers, or other third parties, including links to our social media pages hosted by third-party providers, such as LinkedIn, Facebook, Twitter, Google and YouTube. If you follow a link to any of these websites, please note that these websites are operated by third parties and have their own privacy policies governing the use of any personal data you submit through them. We do not accept any responsibility or liability for the use of your personal data by those third parties or under or in connection with those privacy policies. Please check those policies before you submit any personal data through those websites.
If you have any concerns about material which appears on the Website, or any questions or comments regarding this Policy, please contact us at email@example.com or by recorded delivery to our postal address at Brook Hill, Woodstock, Oxford, OX20 1TU, United Kingdom or use the “Contact” form on the Website at by clicking here.
Last update July 2018.