Mac’s Trucks is committed to protecting and respecting the privacy of our customers. Our policy, complete with associated documents referred to within, highlights how we process the personal data you provide us or we collect about you. We advise you to look carefully at the following content to fully understand our views and practices about your personal data and how we treat it.
This privacy policy gives you information about how Mac’s Truck collects and uses your personal data through your use of this website, including any data you may provide when you sign up to our newsletter, purchase a product or service from us or enquire as to our products and services.
For the purpose of the Data Protection Act 2018 and UK GDPR, the data controller is:
Mac’s Truck Sales Limited (company number 03149885), Alexandra Park, Crosland Moor Road, Huddersfield, West Yorkshire, HD3 3ZA (“Mac’s Trucks”).
- Individuals whose data we collect and process
We collect and process data from visitors to our website at macstrucks.co.uk, customers, potential customers and suppliers of products and/or services to us.
- Information we process about individuals and how we may collect it
We may collect and process the following data about individuals:
2.1 Information you provide by filling in forms on our site or interacting with us generally. This includes information provided at the time of registering to use our site, subscribing to our services or requesting further services or information. We may also ask you for information when you report any problems with our site. Information that we may gather may include first name, last name, marital status, title, date of birth and gender and contact information such as billing address, delivery address, email address and telephone numbers;
2.2 If you contact us, we may keep a record of that correspondence;
2.3 We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them;
2.4 Details of any transactions you carry out through our site or directly with us and that could include details about payments to and from you and other details of products and services you have purchased from us;
2.5 Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access; and
2.6 Marketing and communications data including your preferences in receiving marketing from us and any third parties and your communication preferences;
2.7 Financial details including bank account and payment card details; and
2.8 Any information incidental to that listed above.
- Legal Basis for processing
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
3.1 Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.
3.2 Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
3.3 Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
3.4 Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.
- How we use your information
4.1 We use information held about you in the following ways:
4.1.1 To ensure that content from our site is presented in the most effective manner for you and for your computer;
4.1.2 To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;
4.1.3 To carry out our obligations arising from any contracts entered into between you and us;
4.1.4 To allow you to participate in interactive features of our service, when you choose to do so;
4.1.5 To notify you about changes to our service;
4.1.6 To generate personal profile reports about you which we use to help to tailor our site, and our interactions with you to suit your preferences.
4..2 If you are an existing customer we will only contact you by electronic means (includes e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you and where you have not opted out of receiving such information.
4.3 We do not disclose personal information about individuals to advertisers or sell your information to any other organisation for marketing purposes.
4.4 You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right to prevent processing of your data for direct marketing at any time by contacting us at [email protected]
If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes for example relating to order confirmations for a product/service, service-related reminders, updates to our Terms and Conditions, checking that your contact details are correct and so on.
- Retention & Deletion
5.1 Mac’s Trucks` retains your information while you remain an active customer and for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
5.2 We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
5.3 To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
5.4 By law we have to keep basic information about our customers for six years after they cease being customers for tax purposes.
In some circumstances you can ask us to delete your data: see Paragraph 13 below for further information.
- IP addresses, cookies and similar technologies
6.1 We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration purposes. This is statistical data about our users’ browsing actions and patterns and does not identify any individual. This information will be deleted after three months.
6.2 We may obtain information about your general internet usage by using technology such as “cookies”, which store information on the hard drive of your computer. This type of technology helps us to improve our site and to deliver a better and more personalised service for public users and our customers. They enable us:
6.2.1 Understand visitor numbers;
6.2.2 To store information about a public user’s preferences, and so allow us to customise our site according to a public user’s interests and offer them goods or services in which we believe they will be interested;
6.2.3 To speed up your searches; and
6.2.4 To recognise you when you return to our site.
6.3 To find out more about cookies, including how to control and disable them, please visit https://www.allaboutcookies.org.
6.4 You may refuse to accept some technologies such as cookies by activating settings on your browser which allows you to refuse the setting of technologies such as cookies. If you refuse all cookies you may be unable to access certain parts of our site. If you do not activate these settings on your browser then you will be taken to have consented to the use of these technologies.
6.5 We use Google Analytics and other monitoring software on our site. These types of technologies also allow the proprietor of the technology e.g. Google to also access your information, we have no control over how your information is processed by third parties such as Google. Please read the privacy packages of the provider to understand how your information may be used by these third parties.
6.6 Third party services that we use on our site that may set cookies include:
Google Analytics
Hotjar
Facebook
- Where we store individuals’ personal data
7.1Our data is stored within the UK.
7.2 Occasionally, we may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK to countries which have laws that do not provide the same level of data protection as the UK law.
7.3 Whenever we transfer your personal data out of the UK to service providers, we ensure a similar degree of protection is afforded to it by ensuring that the following safeguards are in place:
7.3.1 We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data, for example, countries in the EU. Separately, we may transfer personal data to US organisations certified to the “UK Extension to the EU-US Data Privacy Framework”.
7.3.2 Alternatively, we may use specific standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK, namely the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers.
- Security and Control of Data
8.1 All information you provide to us via the website is stored on secure servers. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
8.2 Please note that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features in order to reduce the risk of unauthorised access.
- Sharing your information
9.1 We may share your personal data where necessary with the parties set out below:
9.1.1 a group company of ours if your enquiry or need would be better dealt with by that group company;
9.1.2 Service providers acting as processors based in the UK who provide IT and system administration services;
9.1.3 Professional advisers acting as processors or joint controllers including lawyers, bankers, accountants and insurers based in the United Kingdom who provide consultancy, banking, legal, insurance and accounting services;
9.1.4 HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances;
9.1.5 Contractors acting as processors or controllers with whom we may need to share personal data in connection with the delivery of our services to customers.
9.2 We may also share your personal data with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
9.3 We also may share your personal data with companies that we introduce you to for the purpose of providing finance, who may need to process your information when providing finance to you. If you indicate to us that you would like to arrange finance for your equipment, we may share your contact information with our finance partner, Mac’s Asset Finance, a trading name of Simply Asset Finance Operations Limited (“Mac’s Asset Finance”). For further details on how Mac’s Asset Finance processes your personal data, and how to exercise your rights in relation to its processing of your personal data, please see Mac’s Asset Finance’s privacy policy, which is available on https://simply.finance/privacy/. Clicking on that link may allow Mac’s Asset Finance to collect or share data about you in accordance with their privacy policy. As Mac’s Asset Finance is a trading name of a third party business and not controlled by us, we do not control their website and we are not responsible for their privacy statement or handling of your personal data.
- Links to other sites
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
- Accessing your information
110.1 The Act gives you the right to access information held about you. You can find out if we hold any personal information about you by making a “data subject access request” under UK GDPR. If we do hold information about you we will:
11.1.1 Give you a description of it;
11.1.2 Tell you why we are holding it;
11.1.3 Tell you who it could be disclosed to; and
11.1.4 Let you have a copy.
11.2 Any formal subject access request should be made in writing to the address below. This will be provided free of charge. However, we may charge a reasonable fee for repetitive, unfounded, or excessive requests or additional copies.
- How can you update or change your information?
12.1 If at any time you wish to change your information, you can contact us, providing the updated information.
12.2 If you wish to opt-out of email notifications and communications you can contact us and we will ensure you do not receive any more communications.
- Data Subject Rights
13.1 You have a number of rights under data protection laws in relation to your personal data. You have the right to:
13.1 Request rectification – the right to request the controller to rectify inaccurate personal data.
13.2 Object – the right to object to processing based on either public interests or legitimate interests. Processing must stop, unless the controller demonstrates compelling grounds for continuing the processing or that the processing is necessary in connection with the controller’s legal rights.
13.3 Object to Direct Marketing
13.4 Request erasure of your personal data in certain circumstances – you can ask us to erase or remove personal data without undue delay. This is dependent on the occurrence of one of the following:
13.4.1 The data being no longer necessary;
13.4.2 The data subject withdraws consent (where consent was the legal basis for processing);
13.4.3 Controller has no overriding grounds for continuing processing against the objectification;
13.4.4 Processing was unlawful;
13.4.5 Erasure is necessary with national law.
Therefore, please note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
13.5 Request Restriction of Processing – this enables you to ask us to suspend processing in one of the following scenarios:
13.5.1 If you want us to establish the data’s accuracy;
13.5.2 Where our use of the data is unlawful but you do not want us to erase it;
13.5.3 Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
13.5.4 You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
13.6 Request the transfer of your personal data to you or to a third party – where appropriate, we will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format (usually .xls or .csv format). Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
13.7 We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
13.8 We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
13.9 If you wish to exercise any of the rights set out above, please use the contact details below at paragraph 16.
- Changes to Our Privacy Policy
Any changes we may make to our privacy policy in the future will be posted on this page.
- Complaints
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
- Contact
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected] or in writing to Mac’s Truck Sales Ltd, Alexander Park, Crosland Moor Road, Huddersfield, West Yorkshire, HD3 3ZA