Privacy Policy

Who we are?

We are Building Materials Nationwide, this is our Privacy Policy; it applies to all our brands, their websites, mobile applications, and email. We can be found at 10 Grove Park, Waltham Road, Maidenhead, SL6 3LW. You can contact us in the following ways.

Writing to the above address.
Emailing us at sales@buildingmaterials.co.uk 
Phoning us on 01628 674910

We are committed to processing your data securely with your rights always considered.

The data we directly collect from you and how we do it

We collect your data whenever you contact us by phone, email, or use one of our web services.

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate interest

To register you as a new customer
To maintain a list of active prospects where we have collected data through Social Media, Referral or Business Networking who have expressed an interest in our products and services

  1. Identity
  2. Contact

 

  1. Performance of a contract with you

 

  1. Necessary for our legitimate interests (to contact you in relation to products and services which may be of interest to you

To process and deliver your order including:

  1. Manage payments, fees and charges
  2. Collect and recover money owed to us
  1. Identity
  2. Contact
  3. Financial
  4. Transaction
  5. Marketing and Communications
  1. Performance of a contract with you
  2. Necessary for our legitimate interests (to recover debts due to us)

 

To manage our relationship with you which will include:

  1. Notifying you about changes to our terms or privacy policy
  2. To provide relevant information to active customers for new products and services.
  3. To provide relevant information to active customers for new products and services.
  4. Asking you to leave a review or take a survey
  5. To maintain client contracts
  1. Identity
  2. Contact
  3. Profile
  4. Marketing and Communications

 

  1. Performance of a contract with you
  2. Necessary to comply with a legal obligation
  3. Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

 

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

  1. Identity
  2. Contact
  3. Technical

 

  1. Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
  2. Necessary to comply with a legal obligation


The data we automatically collect from you and how we do it, including, cookies 

We automatically gather certain, limited, data about your visits to our sites: This includes demographic data and browsing patterns; your IP address which identifies the computer, and location that you use to access the sites; the time and date of your visit; browser type and version; operating system; internet connection details, as well as a breakdown of your journey through our sites and products. This data is used to build up marketing profiles, aid strategic development, manage our relationship with advertisers and audit usage of the sites. The provision of our sites is a service provided to you on the basis of our legitimate interests. This use of this service also creates a contract between you and us. Where applicable, our legitimate interests, and the contract, will affect your rights under UK and EU data protection regulations.

We use 'cookies' to identify you and your use of our sites. Cookies confirm you are logged in and build up a demographic profile. Our use of cookies allows us to provide our registered users with a personalised version of the sites. Cookies are enabled on the basis of your consent. The acceptance of cookies does not create any conditions regarding your rights under UK and EU data protection regulations.

Please note that if you do disable cookies, certain services on our sites may not be available. If you reject all cookies, you will not be able to use products, or services, that require you to "sign in" and you will not be able to take full advantage of the offerings on our Sites.

When we are required to share your data

In certain circumstances, we may be required at law to disclose your personal data to third parties, such as government bodies, law enforcement agencies, and data protection regulators. These recipients determine the data we share and the times we collect the specific data.

HM Revenue & Customs, regulators and other authorities [acting as processors or joint controllers] based [in the United Kingdom] [who require reporting of processing activities in certain circumstances].

Partners and suppliers

To deliver our services we may also provide your data to partners. We may need to transfer your data to partners outside the European Economic Area (EEA). Our partners process data on our behalf, to provide the services we offer, and do not use, disclose or transfer your personal data in any other way. Where data is transferred outside of the EEA it is only transferred to countries approved by the EU Commission, and on the basis of contract. Prior to engaging with a data processor, or 3rd party, to process your data, we carry out extensive due diligence to ensure compliance with UK and EU data protection regulations. Where you may have a specific concern regarding the processing of your data by our partners and suppliers please contact us.

Currently we have partners processing data
These partners are:

Acuity;
Sage;
Salesforce;
Rixxo;
Natterbox.

How long do we keep your data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

By law we have to keep certain basic information about our customers (including Contact, Identity, Financial and Transaction Data) for a minimum of 12 months and up to six years after they cease being customers for tax purposes.

Automated decision making, including profiling

We do not perform automated decision making, including profiling.

Your Rights

We will enable you to exercise your rights regarding personal data at all times. The following are your rights under UK and EU data protection regulations.

  1. Know if we are processing your personal data.
  2. A copy of your personal data processed by us.
  3. Rectification of any errors in your personal data.
  4. Under specific conditions erasure of your personal data.
  5. Restrict the processing of your personal data.
  6. Under specific conditions the right to data portability.
  7. Object to automated decision making, including profiling.

 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you
updated.

Emailing us at sales@buildingmaterials.co.uk 
Phoning us on 01628 674910

However, should our standards not meet your expectations, you have the right to contact the Information Commissioner at www.ico.org.uk and make a complaint.

Changes to our Policy

From time to time we may be required, or need to, update this Policy. Policy changes will be notified on our sites under the Privacy Policy section. All changes will be accessible through this Privacy Policy, under this section. Notification of the last date of change will be placed at the top of the Privacy Policy.