Last updated: January 2024
1. Who We Are
CiiLOCK Engineering ("we", "us", "our") is the data controller responsible for your personal data. We are a manufacturer of custom engineered components and hardware, based at Unit 12, Marina Court, Maple Drive, Hinckley, Leicestershire LE10 3BF, United Kingdom.
If you have questions about this policy or how we handle your data, you can contact us at [email protected] or by calling 01455 891604.
2. What Data We Collect
We may collect and process the following categories of personal data:
- Identity data: your name, job title and company name
- Contact data: your email address, telephone number and postal address
- Enquiry data: the content of messages you send us through our website contact form, by email or by telephone
- Technical data: your IP address, browser type, operating system and general location data collected automatically when you visit our website
- Transaction data: details of products or services you have purchased or enquired about
3. How We Collect Your Data
We collect personal data through the following means:
- When you fill in our website contact form
- When you send us an email or telephone us
- When you request a quote for our products or services
- When you visit our website (technical data collected automatically)
- When you visit our premises
4. How We Use Your Data
We process your personal data for the following purposes:
- To respond to your enquiries and provide the information or quotes you have requested
- To fulfil orders and manage our business relationship with you
- To send you relevant information about our products and services where you have given consent or where we have a legitimate interest to do so
- To maintain and improve our website
- To comply with our legal and regulatory obligations
5. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases for processing your personal data:
- Consent: where you have given clear consent for us to process your data for a specific purpose, such as subscribing to communications
- Contract: where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract
- Legitimate interests: where processing is necessary for our legitimate business interests, such as responding to enquiries and improving our services, provided these interests are not overridden by your rights
- Legal obligation: where processing is necessary to comply with a legal obligation
6. Data Sharing
We do not sell your personal data to third parties. We may share your data with:
- Service providers who assist us in operating our website and business (for example, hosting providers), who are contractually obligated to protect your data
- Professional advisers such as accountants and legal advisers
- Regulatory authorities where required by law
We do not transfer your personal data outside the United Kingdom unless adequate safeguards are in place in accordance with UK GDPR.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for up to 24 months after our last contact with you. Transaction and contract data may be retained for up to 7 years to comply with our legal and accounting obligations.
8. Your Rights
Under UK data protection law, you have the following rights:
- Right of access: you can request a copy of the personal data we hold about you
- Right to rectification: you can ask us to correct inaccurate or incomplete data
- Right to erasure: you can ask us to delete your personal data in certain circumstances
- Right to restriction: you can ask us to restrict the processing of your data in certain circumstances
- Right to data portability: you can request that we transfer your data to another organisation in a structured, commonly used format
- Right to object: you can object to our processing of your data where we rely on legitimate interests
- Right to withdraw consent: where processing is based on consent, you can withdraw that consent at any time
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
9. Cookies
Our website may use cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.
10. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "last updated" date.
12. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
We would, however, appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at [email protected].