Privacy Policy

Who we are

We are Building Materials Nationwide and this is our Privacy Policy. It applies to all our brands, their websites, mobile applications, and email. We can be found at 1 The Pavillions, Ruscombe Business Park, Twyford, RG10 9NN. 

You can contact us in the following ways: by writing to the above address, sending us an email at sales@buildingmaterials.co.uk, or by calling the team on 01628 674910. 

We are committed to processing your data securely with your rights always considered.

The data we directly collect from you

We collect your information whenever you contact us by phone, email, or use one of our web services.

Purpose/ActivityType of dataLawful basis for processing including basis of legitimate interest
To register you as a new customer. To maintain a list of active prospects from whom we have collected data through social media, referral or business networking who have expressed an interest in our products and services. 1. Identity
2. Contact 
1. Performance of a contract with you.

2. Necessary for our legitimate interests (to contact you in relation to products and services which may be of interest to you.
To process and deliver your order including:

1. Manage payments, fees and charges.

2. Collect and recover money owed to us
1. Identity
2. Contact
3. Financial
4. Transaction
5. Marketing and Communications
1. Performance of a contract with you.

2. Necessary for our legitimate interests (to recover debts due to us) 
To manage our relationship with you which will include:

1. Notifying you about changes to our terms or privacy policy.

2. To provide relevant information to active customers for new products and services.

3. To provide information pertinent to active customers for new products and services.

4. Asking you to leave a review or take a survey.

5. To maintain client contracts
1. Identity
2. Contact
3. Profile
4. Marketing and Communications 
1. Performance of a contract with you.

2. Necessary to comply with a legal obligation.

3. Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services). 
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)1. Identity
2. Contact
3. Technical 
1. Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).

2. Necessary to comply with a legal obligation

How we collect data

We automatically gather specific, limited, data about your visits to our sites: This includes demographic data and browsing patterns; your IP address which identifies the computer, and the location that you use to access the sites. Plus, this also covers the time and date of your visit; browser type and version; operating system; internet connection details, and a breakdown of your journey through our sites and products.

This data is used to build up marketing profiles, aid strategic development, manage our relationship with advertisers and audit usage of the sites. The provision of our sites is a service provided to you on the basis of our legitimate interests. This use of this service also creates a contract between you and us. Where applicable, our legitimate interests, and the contract, will affect your rights under UK and EU data protection regulations.

What are cookies?

We use cookies to identify you and your use of our sites. Cookies confirm you are logged in and build up a demographic profile. Our use of cookies allows us to provide our registered users with a personalised version of the sites. Cookies are enabled on the basis of your consent. The acceptance of cookies does not create any conditions regarding your rights under UK and EU data protection regulations.

Please note that if you do disable cookies, certain services on our sites may not be available. If you reject all cookies, you will not be able to use products, or services, that require you to "sign in" and you will not be able to take full advantage of the offerings on our Sites.

When we are required to share your data

In certain circumstances, we may be required by law to disclose personal data to third parties, such as government bodies, law enforcement agencies, and data protection regulators. These recipients determine the data we share and the times we collect the specific data.

HM Revenue & Customs, regulators and other authorities [acting as processors or joint controllers] based [in the United Kingdom] [who require reporting of processing activities in certain circumstances].

Partners and suppliers

To deliver our services we may also provide your data to partners. We may need to transfer your data to partners outside the European Economic Area (EEA). Our partners process data on our behalf, to provide the services we offer, and do not use, disclose or transfer your personal data in any other way. Where data is transferred outside of the EEA it is only transferred to countries approved by the EU Commission and on the basis of a contract.

Prior to engaging with a data processor, or third party, to process your data, we carry out extensive due diligence to ensure compliance with UK and EU data protection regulations. If you have a specific concern regarding the processing of your data by our partners and suppliers please contact us.

Currently, we have partners processing data. These partners are Acuity, Sage, Salesforce, Rixxo and Natterbox.

How long do we keep your data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

By law, we have to keep certain basic information about our customers (including Contact, Identity, Financial and Transaction Data) for a minimum of 12 months and up to six years after they cease being customers for tax purposes.

Automated decision-making, including profiling

We do not perform automated decision-making, including profiling.

Your Rights

We will enable you to exercise your rights regarding personal data at all times. The following are your rights under UK and EU data protection regulations.

  • Know if we are processing your personal data.
  • A copy of your personal data that we process.
  • Rectification of any errors in your personal data.
  • Under specific conditions erasure of your personal data.
  • Restrict the processing of your personal data.
  • Under specific conditions the right to data portability.
  • Object to automated decision-making, including profiling.

Confirming your identity

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

However, should our standards not meet your expectations, you have the right to contact the Information Commissioner and make a complaint.

Changes to our Privacy Policy

From time to time we may be required, or need to, update this Policy. Policy changes will be notified on our sites under the Privacy Policy section. All changes will be accessible through this Privacy Policy, under this section. Notification of the last date of change will be placed at the top of the Privacy Policy.