GDPR Policy and Privacy Statement

Commercial Fuel Solutions Ltd (UK registered company: 6454498) takes your privacy very seriously.

We respect your privacy and protect and maintain all personal data in accordance with General Data Protection Regulation (GDPR).

For more information please contact our designated Data Protection Officer:

dpo@commercialfuelsolutions.co.uk

 

G1.0       The data we collect

The data we collect is limited to that provided by the individual. We do not and never have purchased data databases or marketing lists of any kind.

We may collect some or all of the following data about you when you interact with us

  • name
  • username and password
  • address
  • email address and/or phone number
  • job title
  • payment and delivery details (when purchasing products and/or services)
  • personal data related to the browser or device you use to access our website
  • internet browser
  • operating system
  • recordings of telephone calls you make to us
  • any other personal data you provide.

 

G2.0       How do we use this data and what is the legal basis for this

  • to establish and fulfil a contract with you the individual, including purchases/contract of sale or entering into an agreement to provide or receive services.
  • Identity verification
  • Communicating with you
  • Provide customer services and relevant safety information 
  • Arranging delivery or other provision of products and services

We require this information in order to enter into a contract with you and are unable to do so without it;

  • to comply with applicable law and regulation
  • in accordance with protecting our legitimate interests, including but not limited to, use in connection with legal claims, compliance, regulatory and investigative purposes (including disclosure of such information in connection with legal process or litigation)
  • to respond to any feedback, comments or complaints
  • to monitor use of our website and online services.

We may use your information to help us check, improve and protect our products, content, services and websites, both online and offline, in accordance with our legitimate interests.



G3.0       How we store the data we collect

We do not store payment, debit or credit card data

We hold data electronically in the following ways:

Data submitted electronically via our website by the individual which is stored on our secure dedicated server, excluding any card payment details which are handled by our secure payments server.

Data provided in oral or written communication from the individual which is processed by our staff and stored electronically on our secure dedicated server.

We also access data submitted electronically by the individual on payment gateways we use:
SagePay
Barclaycard
PayPal
X-payments

We hold data in hardcopy format in the following ways:

Data submitted electronically via our website by the individual which is then printed for our records, excluding any card payment details.

Data provided in oral or written communication from the individual which is processed by our staff and stored in written or printed form.

Data submitted to us via inbound emails and mail sent by post

Data necessary in order to uphold the requirements of the Machinery, Low Voltage, Pressure Equipment, directives.

Data necessary to comply with the requirements of HMRC for audit purposes.

Data necessary to comply with international import/export regulation.

We may also access, print and hold data from transactions relating to those made on eBay

G5.0       The sharing of data

The sharing of data is limited to that necessary for us to;

  • to comply with applicable law and regulation
  • provide information to assist with correct selection of products and or services
  • to co-ordinate delivery of products and or services
  • in accordance with protecting our legitimate interests, including but not limited to, use in connection with legal claims, compliance, regulatory and investigative purposes (including disclosure of such information in connection with legal process or litigation)
  • to respond to any feedback, comments or complaints
  • to understand the individuals use of our website and online services.
  • to confirm identity
  • comply with the requirements of HMRC for audit purposes
  • comply with the requirements of export customs control

 

G6.0       How long we will hold your data

We will not keep your data for any longer than necessary. Due to the nature of our work it is necessary in many instances to retain specific information by law, including for HMRC, export, technical and safety information.
The specified retention period is;

  • Where you are a prospective customer and you have expressly consented to us contacting you, we will only retain your personal data for this purpose (a) until you unsubscribe from our communications; or, if you have not unsubscribed, (b) while you interact with us and our content; or (c) for 5 years from when you last interacted with us or our content.
  • no more than 6 years for data relating to purchases excluding those governed by Machinery, Low Voltage, Pressure Equipment, directives
  • no more than 10 years for export, technical and safety information.

We may retain your personal data for a time beyond the specified retention period, to allow for information to be reviewed and any deletion to take place. After it is no longer necessary for us to retain your personal data, we dispose of it securely.

 

G7.0       Your rights


You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data, clicking the unsubscribe button on any communication we have sent to you or by contacting us.

Where you have consented to us using your personal data, you can withdraw that consent at any time.

If the information we hold about you is inaccurate or incomplete, you can notify us and ask us to correct or supplement it.

If you have created a profile on our website it can be updated or deleted by logging into your account, selecting my account and either editing or deleting your profile.

You also have the right, with some exceptions and qualifications, to ask us to provide a copy of any personal data we hold about you.

Where you have provided your data to us and it is processed by automated means, you may be able to request that we provide it to you in a structured, machine readable format.

If you have a complaint about how we have handled your personal data, you may be able to ask us to restrict how we use your personal data while your complaint is resolved. In some circumstances you can ask us to erase your personal data (a) by withdrawing your consent for us to use it; (b) if it is no longer necessary for us to use your personal data; (c) if you object to the use of your personal data and we don't have a good reason to continue to use it; or (d) if we haven't handled your personal data in accordance with our obligations.

 

G8.0       More information?

Should you have any queries regarding this Privacy Notice, about our processing of your personal data or wish to exercise your rights you can contact our designated Data Protection Officer here: 

dpo@commercialfuelsolutions.co.uk

If you are not happy with our response, you can contact the Information Commissioner's Office: https://ico.org.uk/