Privacy Policy For Customers

D. Transfers of Data Outside of The UK

We may transfer some of your personal data to countries that are not part of the United Kingdom. These are known as “third countries” and may not have data protection laws that are as strong as those in the UK.  As such, we take additional steps to safeguard your personal data to ensure is treated just as safely and securely as it would be within the UK.

These transfers occur when we share your data with “international organisation”, like PayPal, who are based around the world.  We have in place “standard contractual clauses” with these organisations to ensure that your personal information is treated by those third parties in a way which is consistent with and which respects the domestic UK laws on data protection. 

In addition to these clauses, we also rely on Adequacy Decisions from the Information Commissioner’s Office, where they recognise a country outside of the U.K. as ensuring an adequate level of protection equivalent to the UK.  We transfer data to the EEA (Germany and Ireland) on the basis of these adequacy decisions.

F. Special Categories of Data

Where a bathroom, washroom, or lavatory is provided, extended, or adapted to suit the condition of a disabled person, it can be zero-rated for VAT.

Depending on your relationship with us, we may process special category i.e., “sensitive” personal data when confirming your eligibility for this VAT relief as part of our Disability Declaration Form.

We process this special category data, Your Health Data, to carry out our legal obligations to maintain records under the VAT Act 1994.

G. Failure to Provide Data

Your failure to provide us with data may mean that we are unable to fulfil an order of goods or be unable to comply with the law.  As such, we may not be able to sell you a product should you fail to provide certain data to us.

H. Informing Us of Changes

It is important that the personal information we hold about you is accurate and correct. Please keep us informed if your personal information changes during your relationship with us.

This can be done by contacting our Customer Service team through the methods listed here, or by contacting dataprotection@victorianplumbing.co.uk.

I. Your Rights

Under data protection law, you have the following rights, which we will work to uphold:

• The right to be informed about the data we hold about you and what we do with it
• The right of access to the data we hold about you, including receiving a copy of the data
• The right to correct inaccuracies in the data we hold about you, this is also known as ‘rectification’
• The right to be forgotten in certain circumstances, allowing you to ask us to delete or remove data where there is no good reason for us to continue processing it, this is also known as ‘erasure’
• The right to restrict (i.e., prevent) the processing of the data if you want us to establish its accuracy or the reason for processing it
• The right to transfer the data we hold about you to another party where we use it with consent or for the performance of a contract. This is also known as ‘portability’
• The right to object to the processing of data where we rely on a legitimate interest and there is something in your particular situation which makes you want to object to the processing. You also have this right if we process data for direct marketing purposes
• Rights relating to any automated decision-making and profiling of your personal data.

J. Withdrawing Consent

You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us.  In addition to the rights listed above, you also have the right to withdraw consent at any time should you change your mind. 

Should you do this, we will stop processing data under this basis and, where there is no other basis for continuing to process the data, we will delete any data reliant on that consent.

You can withdraw consent by clicking the “unsubscribe” link at the bottom of any of our emails or by sending an email to dataprotection@victorianplumbing.co.uk.

K. Retention Periods

We only keep your data for as long as we need it for, which, when you purchase a good from us, will be at least for the duration of your order with us.  In most cases we will keep your data for a period after your order has completed.  Some data retention periods are set by the law, for example the need to retain tax details for seven years.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of it, the potential risk of harm from unauthorised use or disclosure, the purposes for which we collected it for, and the applicable legal requirements.

When your data reaches the end of its defined retention period or criteria, we will delete any electronic data from our IT systems, and any physical copies will be securely destroyed.

L. Automated Decision Making

Automated decision-making means making decisions about you using no human involvement e.g. using computerised equipment. No decision about you, which has a significant impact on you, will be made solely based on automated decision-making unless we have your explicit consent.

Your use of our website, and interaction with our marketing emails, may involve profiling of your behaviour, again subject to your consent.  For more information on how this occurs, please see our Website and Cookies Policy here.

M. Changes to This Notice

We keep this privacy notice under regular review to make sure it is up to date and accurately reflects our data processing.  This may be necessary, for example, if we change our business practices in a way that affects how we process personal data.  Please review our Privacy Policy from time to time.

We will provide you notice of any updates to this Privacy Policy, when necessary, and change the “Last Updated” date at the top of this page.  

N. Data Protection Officer's Contact Details

Our Data Protection Officer (DPO) is Robert Dowson.  He can be contacted via dataprotection@victorianplumbing.co.uk.  Alternatively, you can contact him by post at the above registered address, marking the envelope FAO: Data Protection Officer. 

If you have any questions about this privacy notice, how we handle our personal data, or to request a copy of the safeguards we rely upon for transfer of data outside of the UK please contact the DPO.

O. Making a Complaint

We strive to achieve a high standard in all our data processing.  However, if you think your data rights have not been complied with, you are able to raise a complaint with the Information Commissioner’s Office (ICO), who are the U.K. supervisory authority for data protection, online here:  https://ico.org.uk/make-a-complaint/.

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance. See Contact Us, above.