Challenge Supply Co Limited
Who are we?
Challenge Supply Co Limited (Company number: 08197935) are a family run business that has been established since 1997. We design, manufacture and supply specialist customised presentation products, delivered with maximum reliability and minimum fuss.
You can find out more about us on our ‘About Us’ page on our website.
We have developed this policy because we want you to feel confident about the privacy and security of your personal information. It describes how we collect, use and process your personal data, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
What is our legal reasoning for collecting your personal information, how do we collect it, and when do we collect it?
Under Article 6 (1) (b) of GDPR we will be processing your information to perform the contract that we will have with you. We also have a legitimate interest to process your data for management and statistical purposes. If we wish to do anything else with your personal information we will always ask you and gain your explicit consent.
The personal information we will ask you for is your name, address, contact details such as phone number and email. We will usually collect this information at the point you are entering into the contract for our goods. This information can be collected by telephone, written correspondence or via our website.
Unless we have your explicit consent to do so, we will not:
- sell this information to third parties;
- contact you about further work we are doing;
- analyse or track any other website you may visit.
Do we share your personal information with anyone else?
If you are making a payment via our website, your details may be shared with a third party organisation who will process that information in order to complete your order.
We will never share your personal information with a third party, except to process your order, unless we have gained your explicit consent.
For how long do we keep your personal information?
We will only ever keep your personal information for as long as it is necessary for us to process your donation and keep appropriate records. We will usually not keep any personal information for longer than 6 years. After this time, we will securely dispose of it.
Your rights in respect of your personal information
Even if we already hold your personal data, you still have various rights in relation to it. To get in touch about these rights, please contact us. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
- Right to object: If we are using your data because we deem it necessary for our legitimate interests to do so, and you do not agree, you have the right to object. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases). Generally, we will only disagree with you if certain limited conditions apply.
- Right to rectification: The right to rectify any personal information we hold about you which may not be correct. If you have any queries regarding this, please contact us.
- Right to restrict processing: You have the right to restrict us processing your personal data if it is inaccurate, we have no lawful ground for processing the data or we no longer need the data.
- Right to withdraw consent: You may withdraw your consent at any time.
Data Subject Access Requests (DSAR): Just so it's clear, you have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or delete such information. At this point we may comply with your request or, additionally, do one of the following:
- we may ask you to verify your identity, or ask for more information about your request; and
- where we are legally permitted to do so, we may decline your request, but we will explain why if we do so.
- Right to erasure: In certain situations, (for example, where we have processed your data unlawfully), you have the right to request us to "erase" your personal data. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases) and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will generally assume that you would prefer us to keep a note of your name on our register of individuals who would prefer not to be contacted. That way, we will minimise the chances of you being contacted in the future where your data is collected in unconnected circumstances. If you would prefer us not to do this, you are free to say so.
- Right of data portability: If you wish, you have the right to transfer your data from us to another data controller. We will help with this – either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format.
- Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority. Details can be found below.
You can change your preferences by emailing us.
If you want to make a complaint?
If you are unhappy for any reason in respect of how we process your information, you should contact us in the first instance. We will then try to work with you to resolve any issues that you may have.
If you are still unsatisfied, you have the right to lodge a complaint with the Information Commissioners Office. Please see their details below: