Section 1: Scope

 About this policy

Fluid Detailing and Valeting Limited (“Fluid Detailing”) respects individuals rights to data privacy and protection when you communicate (online or offline) with us through our websites, mobile applications, offline programs, and events. 

Fluid Detailing which operates the website you are visiting or service you are receiving is the Data Controller of any personal information. We may collect personal information. We may combine personal information that we collect via one method (e.g., a website) with personal information that we collect via another method (e.g., in person/email). We do this to get a more complete view of our suppliers and consumers, which, in turn, allows us to serve you better.

This privacy policy sets out how we look after your personal data including when you visit our website (regardless of where you visit it from), your privacy rights and how the law protects you. Our website is not intended for children, and we do not knowingly collect data relating to children.

We reserve the right to make changes to our Privacy Notice at any time. Changes will be notified on our website or platform where this Privacy Notice applies. Our website may include links to third-party websites, plug-ins, and applications which we do not control, and we are not responsible for their privacy statements.

 Who this Policy applies to?

This policy applies to you if you are:

A customer: a private individual, sole trader, partnership or a contact at a corporate customer or a prospective customer;

A supplier: an independent supplier, sole trader, partnership, or a contact at a corporate supplier who provides services to us as a business;

An interested person: an individual who is not a customer but is interested in our services, updates, or events and who may receive updates or attend events, or who makes an enquiry;

A relative of a member of our staff: a close family member or next of kin of a member of our staff, or

A website visitor: a visitor to our website who isn’t in any of the categories above.

By using our websites, applications or by otherwise giving us your personal information you are accepting the practices described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use our websites or applications, or share any of your personal information with us.

Section 2: Key Information

Data protection officer and queries

We do not have a data protection officer. For the purpose of the GDPR, the data controller is Fluid Detailing, a company incorporated in England with company number 11648090. 

We are entered in the Information Commissioner's register of data controllers with registration number ZB383692. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Section 3: Procedure

Personal Information which we may collect:

Identity Data: this includes first name, last name, username or similar identifier, marital status, title, date of birth and gender.

Contact Data: this includes postal address, email address and telephone numbers.

Financial Data: this includes bank account details.

Transaction Data: this includes details about payments to and from you and other details of products and services you have purchased from us.

Technical Data: this includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.

Profile Data: this includes purchases or orders made by you, your interests, preferences, feedback, and survey responses.

Usage Data: this includes information about how you use our website, products, and services.

Marketing and Communications Data: this includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

Summary of our purposes

Here is a summary of the purposes for which we use personal information and the legal bases for our use:

To enable us to provide products or services: Consent; Contract; Legal obligation; Legitimate interests

To enable us to provide certain financial products and services as part of our normal services: Consent; Contract; Legal obligation; Legitimate interests

To enable us to purchase products or services: Consent; Contract; Legal obligation; Legitimate interests

To maintain our accounts and records: Contract; Legal obligation; Legitimate interests

To promote and advertise our services: Consent; Legitimate interests

To support and manage and train our prospective employees (where appropriate): Consent; Contract; Legal obligation; Vital interest; Legitimate interests

To analyse data and produce reports for business planning and management: Legitimate interests

Legal basis

The following provides a description of each legal basis:

Consent: your consent to one or more specific purposes

Contract: entering into a contract with you or performing a contract with you

Legal obligation: we are required by law to do this

Vital interest: to protect yours or another individual's vital interests (e.g., life or death situation)

Public task: we are required to do this because it is required in the public interest

Legitimate interests: we have identified this as a legitimate interest of ours or a third party; we consider that use of your personal information is necessary to achieve that legitimate interest; and we have balanced all that against your interests, rights, and freedoms.

How we collect personal data

We use different methods to collect data from and about you including through:

 ·       Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

o   make an enquiry about, or engage us to provide, our products and services.

o   subscribe to our mailing list, participate, or view our webinars or download any publications from our website.

o   request marketing to be sent to you.

o   enter a survey; or

o   provide us with feedback.

 ·       Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data or Technical Computer Information about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Examples may include your computer’s IP address, operating system type, and web browser type. For mobile device users, the collected information may also include your phone’s unique device ID, or other similar mobile device data. Please see our Cookie Policy for further details.

 ·       Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

o   Technical Data from analytics providers such as Google

o   Identity and Contact Data from publicly availably sources such as Companies House or credit reference agencies.

Disclosure of personal data

We may share your personal information with:

•       Selected third parties as follows:

o   business partners, suppliers and contractors acting as processors (based in the UK or country in which we are providing services to you) who provide IT and system administration services and where required for the performance of any contract we enter into with you.

o   Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services.

•       HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers.

•       Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

We may process your personal data or disclose it to third parties, without your knowledge or consent, where this is permitted by law or where we are under a duty to process or disclose your personal data in order to comply with any legal obligation.

CCTV

The Company records CCTV at our premises for the purpose of crime prevention, security and health and safety. Images are retained for a minimal amount of time. After which images are permanently destroyed.

How Do We Protect Your Data?

We take all necessary technical and organisational measures to protect the confidentiality and security of your personal information. Including; storing personal information in secure operating environments that are not available to the public and that are only accessible to authorized employees, service providers/agents and those with whom we have contracts; using industry-standard SSL/TLS encryption (or similar) to protect the security of certain sensitive personal information (such as credit card information, health or patient information) during transmission, and, verifying the identities in relation to subject access requests.

How long do we keep your personal information?

We may store the personal information in our databases such as our Customer Relationship database. We will only keep your personal information for as long as it is reasonably necessary taking into consideration our need to answer queries or resolve problems, provide improved and new services, and comply with applicable law(s).

 This means that we may retain your personal information for a reasonable period after you stop using our services (including our website or applications). After this period, your personal information will be removed from our systems. We remind you that you have a right to have your personal information deleted at any time.

Rights of a Data Subject

The Company has put in place processes to enable data subjects to exercise their legal rights and provide information requested by a Data Subject pursuant to their rights under the GDPR without undue delay and, in any event, within one month of receipt of a request. This period may be extended by a further two months, if for example there are a number of requests made or a request is particularly complex.

 As Data Subject you have the following rights under the GDPR:

•       right of access to personal data and certain other information.

•       a right to have any personal data which we hold, which is inaccurate rectified.

•       right to have incomplete personal data completed.

 In certain circumstances:

•       a right to have personal data erased, including where the personal data is no longer necessary for the purposes for which it was collected or processed, or if the personal data has been unlawfully processed.

•       a right for the processing of personal data to be restricted, including where a data subject contests the accuracy of the personal data held about them, or if the processing of their personal data is unlawful.

•       the right to receive the personal data in a portable format that can be transmitted to another data controller without hindrance.

•       the right to object to certain types of processing, profiling, and processing for direct marketing purposes; and

•       the right not to be subject to a decision which is based solely on automated processing, and which produces a legal effect which significantly affects the Data Subject, for example, where we make a processing decision based on an individual’s age or on the postcode in which they live.