Who are we

Whitney Engineering is a trading division of Ladybird Cranes Ltd

Ladybird Cranes Ltd. will be what is known as the ‘Controller’ of the personal data you provide to us.

Our company registration number is 1320772 and its registered address is: Ladybird House, Brockhill Yard, Hewell Lane, Redditch, B97 6QT.

What we need

Unless otherwise agreed with you, we will only collect basic personal data about you, which does not include any special categories of personal information about you (special category data includes medical information and is often known as ‘sensitive personal data’).
This information we will collect includes the likes of your name, address, email address and employment details.
This is not an exhaustive list.

For example: We may have the following data about you,
Mr Joe Smith
ACME Manufacturing Co Ltd.
1 Main Street
Anytown
AT1 1AB
Tel: 01234 555 555
Email : joe.smith@acme.com

Why we need it

We need to know basic personal data in order to provide you with the products and services you need, and to assert our right to be recompensed in return for these products or services. If you do not provide this information then we will be unable to provide the services you have requested. We will not collect any personal data from you that we do not need in order to provide and oversee the services will provide.

For example: We need your email address to keep you informed of progress of any quotes or orders.

What we do with it

All the personal data we hold about you will be processed by our staff in the United Kingdom and selected third parties will have access to your personal data where there is a legal obligation for us to provide them with this. Please be aware, however, that your information may be stored on a cloud-based system whose servers are located within the European Union.
We take all reasonable steps to ensure that your personal data is stored and processed securely.

For example: We may pass your name and email address to an external email processor such as mailchimp
(This will only be done where absolutely necessary to provide you with necessary functionality such as immediate unsubscribe)

What we would also like to do with it

We would like to send you information about our own products and services, by post, telephone or email.
You have the right to withdraw your consent to receiving marketing contact, and the associated processing of your data, at any time and you can do this via phone or email.

How long we keep it

We will generally keep your personal data for a minimum of 6 years after our business relationship, after which time it will be destroyed if it is no longer required for the lawful purpose(s) for which it was obtained. If you consent to marketing, any information we use for this purpose will be kept with us until you notify us that you no longer wish to receive this information.

Basis for processing basic personal data

The GDPR regulations provide for various lawful processing activities. Applicable examples are listed below (This is not an exhaustive list.)

• Contract
  We process your data in relation to providing a service or product to you.
  This is referred to under GDPR as the ‘Contract’ basis.
• Consent
  Where we have asked you for explicit consent we will process your data as agreed.
• Legitimate Interests
  Where we have an existing business relationship we may process your data for uses such as direct marketing by email. Only your basic data will be used for this purpose and we will not engage in direct marketing more than once per month

Sensitive Personal Data

We do not collect or process sensitive personal data unless specifically agreed with you.

Sensitive Personal Data relates to information consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a person's sex life or sexual orientation.

Should any Sensitive Personal Data be specifically supplied to us in relation to us providing a product or service (for example should a disability require a specific service) then this data shall not be associated with you once the product or service has been supplied unless specifically agreed with you.

What are your rights?

Under data protection legislation, you have several rights regarding the use of your personal data, as follows:

• If at any point you wish to either confirm whether your personal data is being processed and/or access the data we hold on you, you can request to see this information, usually free of charge, and we will respond to this request within a month.
• You also have the right for certain data you have provided to us with to be provided to you in a structured and commonly used electronic format (for example, a Microsoft Excel file), so that you can move, copy or transfer this data easily to another data controller. You may also request that transmit this data directly to another organisation where it is practical for us to do so.
• You are entitled to have data corrected if it in inaccurate or incomplete.
• You are entitled to have data deleted if it is no longer needed or there is no longer a legitimate reason for the processing, or if the data in question has otherwise unlawfully been processed. You may also request deletion of your personal data if it was only being processed as a result of you consenting to this and you now withdraw your consent.
• You have the right to object to the processing of your personal data (note that this only provides you with the right to raise your objections, not a blanket right to have any and all processing cease).
• You have the right to restrict the processing of your personal data under certain circumstances, including if you have contested its accuracy and while this is being verified by us, or if you have objected to its processing and while we are considering whether it has legitimate grounds to continue to do so.

How to complain about the use of your data

If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact our Data Protection Officer, Robert Bird (dpo@ladybirdcranes.co.uk) and they will investigate your concerns.

If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to the Information Commissioner’s Office (ICO). You can find further information about the ICO and their complaints procedure here: https://ico.org.uk/concerns