Privacy Policy
This policy
This website is operated by Excel Vending Ltd. We collect some personal data via our website (www.excel-vending.co.uk) and this privacy policy explains what we collect and how we use it.
Controller
Excel Vending Ltd is the controller for your personal data (referred to as “Excel Vending”, “we”, “us” or “our” in this policy).
If you have any questions about this policy, including any requests to exercise your legal rights, please contact us using the details set out below:
Email info@excel-vending.co.uk or call 01355 269999
Policy updates
We will publish any changes to this policy on our website and the latest update is referenced at the top of this policy. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights
You have the following rights in relation to how we use your personal data:
The right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you.
- The right to have the personal data that we hold about you corrected
- The right to request erasure of your personal data. This can apply where we do not have a good reason to continuing processing it or where you have successfully exercised your right to object
- The right to object to processing of your personal data where we are relying on our legitimate interest (or that/those of a third party). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. You also have the absolute right to object where we are processing your personal data for direct marketing purposes
- The right to request restriction of processing of your personal data
- The right to data portability. This means that you can request the transfer of your personal data to yourself or to a third party and we must provide it to you in a structured, commonly used, machine-readable format. However, this right only applies to automated data which you provided consent for us to use or where we used the information to perform a contract with you
- Your right to withdraw consent. This right arises at any time where we are relying on consent to process your personal data.
Personal data we collect
Personal data means any information about an individual from which that person is identifiable or can be directly or indirectly identified.
Special categories of personal data means any information about you which includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
We do not collect any special categories of personal data about you.
We process the following kinds of personal data:
- Communication data – this includes the channel and method by which we communicate with you and the content of the communication
- B2B contact data – this includes billing and correspondence addresses, professional email address, professional telephone numbers and business cards, social media profile, details of the organisation you work for, what sector you work in and your job role/title
- Identity data – such as name, email address, home address, marital status, title, date of birth, gender, photograph and/or image, national insurance number, passport or identity card details and driving licence details
- CV data – this may include information about schools and universities you attended, your qualifications and experience, information about current and past employment and interests
- Marketing data – this includes your preferences in receiving marketing from us and how you heard about us
- Technical data – this includes internet protocol (IP) address (which allows for geolocation), browser type and version, time zone setting and location, browser plug-in types, operating system and platform
- Usage data – this includes information about how you use our website and services.
Failure to provide personal data
If you fail to provide certain information when requested, we may not be able to perform the contract we have with you, or we may be prevented from complying with our legal obligations (such as to ensure we comply with our health and safety obligations) or you may not be permitted to enter operational sites.
How we collect personal data
We use different methods to collect personal data from and about you including through the following interactions set out below:
Direct interactions. You give us your data by filling in forms or by corresponding with us by post, phone, email or online (including via social media). This includes personal data you provide when you:
- use our “Contact Us” form or log a service call;
- subscribe to our newsletter;
- request marketing to be sent to you;
- send us your CV; or
- provide us with feedback.
Automated interactions. We may automatically collect Technical and Usage data about your equipment and browsing activity. We collect this personal data by using cookies and other similar technologies. You can see a copy of our cookie policy by clicking here https://www.excel-vending.co.uk/cookie-policy/ .
How we use personal data
We will use your personal data only where the law allows us to and for the following purposes:
Legal or regulatory obligation – to comply with a legal or regulatory obligation to which we are subject;
Legitimate interest – where it is in our legitimate interests or that of another third party. We will always make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.
Consent – generally we do not rely on consent as a legal basis for processing your personal data. If we do, we provide you with a way to withdraw your consent at any time. For example, if your consent relates to the use of cookies, you can withdraw consent by clicking on the Manage Consent tab at the bottom of the screen on any page of our website, which will take you to Cookie Consent Preferences. Please see our cookie policy for further details on our use of cookies. With regard to consents for marketing, you can withdraw these by checking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing communications sent to you or by contacting us by email info@excel-vending.co.uk or call 01355 269999.
See below a more detailed breakdown of the purposes for which we process personal data and the corresponding lawful basis:
Processing Purpose | Type of Data | Lawful Basis |
Managing job applications | Identity data Contact data Communication data CV | Legitimate Interest |
To send you our newsletter (if you have subscribed) | Communication data Contact data Identity data Marketing data | Legitimate interest Consent – where electronic communications |
To respond to “Contact Us” or Service Log enquiries | Identity data B2B contact information Communication data | Legitimate interest |
Administration and protection of our business and website including: ensuring the confidentiality of sensitive information, maintaining the security of our systems and data, data analysis, testing, system maintenance and support. | Identity data B2B contact data Technical data Usage data | Legal obligation Legitimate interest |
To recognise your device and track how you use this website. Please see the cookie policy for more details. | Technical data Usage data | Consent |
How we use personal data for marketing
We may use your personal data to infer what may be of interest to you: which products, services and offers may be relevant for you. You may receive marketing communications from us if you have requested this information and you have not opted out of receiving marketing communications.
You can ask us to stop sending you marketing communications at any time by adjusting your marketing preferences or by following the opt-out links in any marketing communications sent to you or by contacting us by email info@excel-vending.co.uk or call 01355 269999
Data sharing
We may have to share your personal data with third parties, such as:
- Service providers who provide IT and system administration services and access to platforms we use for operational purposes to run our business;
- Professional advisers including lawyers, barristers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services to us;
- HM Revenue & Customs, regulators and other authorities based in the UK who require reporting of processing activities in certain circumstances, for example to ensure we are complying with legal and regulatory obligations;
- Third parties who require access to the personal data we process for the purposes of the prevention or detection of crime or for the purposes of legal proceeding
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law and the terms of the contract we have in place with them. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
International data transfers
We do not currently process your personal data outside the UK or the EEA. However, if we decide to engage third parties based outside the UK, we will implement an appropriate mechanism and safeguards to ensure a level of protection which complies with UK law on international transfers.
Data security
We have appropriate security measures in place to prevent your personal data from being altered, accidentally lost, or used, accessed, or disclosed in an unauthorised way. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We also have in place procedures to deal with a personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
We maintain a Data Retention Policy and record the retention period for data relating to each activity in our Records of Processing as defined in data protection legislation.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Once we no longer need to process your personal information, we will securely destroy your personal information in accordance with our Document and Data Retention Policy which is informed by the applicable laws and regulations that we are required to take into account.
How to complain
You have the right to make a complaint at any time to your local supervisory authority.
In the UK that is the Information Commissioner’s Office (ICO) (www.ico.org.uk).
We would, however, appreciate the chance to deal with your concerns before you approach the ICO; so please contact us in the first instance.