Dynamic Modular Staging is committed to protecting personal information and complying with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Dynamic Modular Staging is a trading style of Unistage Ltd, registered in England and Wales under company number 03870784.
This GDPR Policy explains how we handle personal information and the principles we follow when collecting, using, storing and protecting personal data.
Who is Responsible for your Personal Data?
For the purposes of UK data protection law, Unistage Ltd is the data controller responsible for personal information processed by Dynamic Modular Staging.
As the data controller, we are responsible for deciding how and why personal information is processed and for ensuring that it is handled appropriately.
What Personal Data do we Collect?
The personal information we collect will depend on how you interact with us.
We may collect:
Your name
Company, school or organisation name
Job title
Email address
Telephone number
Billing or delivery address
Site or project location
Details of your staging requirements
Enquiry and quotation information
Order and transaction information
Records of correspondence
Information required to provide our products or services
Technical information relating to your use of our website
We only collect personal information that is reasonably necessary for our business activities or where we have another lawful reason to process it.
How do we Collect Personal Data?
We may collect personal information when you:
Submit an enquiry through our website
Contact us by telephone or email
Request information about modular staging
Request a quotation
Place an order
Arrange a delivery or installation
Communicate with us regarding an existing order
Become a customer, supplier or business contact
Certain technical information may also be collected automatically when you use our website through cookies and similar technologies.
We may occasionally receive information from third parties, such as suppliers, contractors, referral partners or publicly available sources.
How do we Use Personal Data?
We may process personal information to:
Respond to enquiries
Provide information about our staging systems
Understand your requirements
Prepare quotations
Process and manage orders
Arrange deliveries
Arrange installation where applicable
Provide customer support
Communicate about existing or potential projects
Process payments
Maintain accounting and business records
Manage relationships with customers and suppliers
Improve our products, services and website
Protect our website and business systems
Comply with legal and regulatory requirements
Establish, exercise or defend legal claims
We will not use personal information for purposes that are incompatible with the reason it was originally collected unless permitted by law.
What are our Lawful Bases for Processing Personal Data?
Under UK GDPR, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract
Processing may be necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests
We may process information where it is necessary for our legitimate business interests and those interests do not override your rights and freedoms.
This may include responding to business enquiries, managing customer relationships, improving our services and protecting our business.
Legal Obligation
We may process information where necessary to comply with a legal, regulatory, accounting or taxation requirement.
Consent
Where required, we may ask for your consent before processing information for a particular purpose.
Where we rely on consent, you can withdraw it at any time.
What are the UK GDPR Data Protection Principles?
We aim to process personal information in accordance with the principles established by UK GDPR.
Personal data should be:
Processed lawfully, fairly and transparently
Collected for specified, explicit and legitimate purposes
Adequate, relevant and limited to what is necessary
Accurate and kept up to date where necessary
Retained for no longer than necessary
Processed securely and protected against unauthorised or unlawful processing, loss, destruction or damage
We are responsible for demonstrating compliance with these principles where required.
Do we Use Personal Data for Marketing?
We may contact existing or prospective customers about relevant products and services where we have a lawful basis to do so.
Where consent is legally required, we will obtain consent before sending marketing communications.
You can ask us to stop sending direct marketing communications at any time.
We will respect objections to direct marketing and update our records accordingly.
Who do we Share Personal Data With?
We do not sell personal information.
We may share information with third parties where this is necessary to operate our business, fulfil an order or comply with legal requirements.
These may include:
Manufacturers and suppliers
Contractors and subcontractors
Delivery and logistics providers
IT and website service providers
Email and communication providers
Payment providers
Accountants and financial service providers
Professional advisers
Analytics providers
Government bodies and regulators
Law enforcement agencies where legally required
Where third parties process personal information on our behalf, we take appropriate steps to ensure that the information is handled securely and lawfully.
Do we Transfer Personal Data Outside the UK?
Some technology or service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with UK data protection legislation.
Where required, appropriate safeguards will be used to protect personal information.
How Long do we Keep Personal Data?
We only retain personal information for as long as reasonably necessary for the purposes for which it was collected.
The appropriate retention period will depend on factors including:
The type of information
The reason it was collected
Whether you are a customer
Contractual requirements
Accounting and taxation requirements
Legal and regulatory obligations
Whether information may be required in connection with a legal claim
Once personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of where appropriate.
How do we Keep Personal Data Secure?
We take reasonable technical and organisational measures to protect personal information from:
Unauthorised access
Unlawful processing
Accidental loss
Alteration
Disclosure
Destruction
Misuse
Access to personal information is restricted to individuals who reasonably require access for legitimate business purposes.
While we take appropriate precautions, no electronic system or method of transmitting information over the internet can be guaranteed to be completely secure.
What Happens if There is a Personal Data Breach?
If we become aware of a personal data breach, we will assess the nature and potential impact of the incident.
Where required by data protection legislation, we will report qualifying personal data breaches to the Information Commissioner's Office within the applicable timeframe.
Where a breach is likely to result in a high risk to an individual's rights and freedoms, we will also notify affected individuals where required.
What are your Rights Under UK GDPR?
Depending on the circumstances, you may have the right to:
Access personal information we hold about you
Request correction of inaccurate information
Request completion of incomplete information
Request deletion of your personal information in certain circumstances
Request restriction of processing
Object to certain types of processing
Object to direct marketing
Request data portability where applicable
Withdraw consent where processing is based on consent
Raise concerns about how your personal information is being processed
These rights are subject to certain legal conditions and exemptions.
How can you Request Access to your Personal Data?
You can contact us if you would like to know what personal information we hold about you.
We may need to verify your identity before providing personal information to help prevent unauthorised disclosure.
We will respond to valid requests within the timeframe required by applicable data protection legislation.
Can you Ask us to Delete your Personal Data?
You may have the right to request deletion of personal information in certain circumstances.
This right is not absolute. We may need to retain certain information where we have a legal obligation or another lawful reason to do so.
Where we cannot comply fully with a deletion request, we will explain the reason where required.
Automated Decision-Making
We do not intend to make decisions that have significant legal or similar effects on individuals solely through automated processing unless this is permitted by law and appropriate safeguards are in place.
Cookies and Website Data
Our website may use cookies and similar technologies to operate correctly, measure website performance and understand how visitors interact with the website.
Where consent is required for non-essential cookies, these cookies should not be used until the appropriate consent has been obtained.
Further information can be found in our Cookie Policy.
How to Contact Us About your Personal Data
If you have questions about this GDPR Policy, want to exercise your data protection rights or have concerns about how your personal information is being processed, please contact:
Dynamic Modular Staging
A trading style of Unistage Ltd
Company Number: 03870784
How to Make a Complaint
If you have concerns about how we process your personal information, please contact us so that we have an opportunity to investigate the issue.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), which is the UK's independent data protection regulator.
Changes to this GDPR Policy
We may update this GDPR Policy from time to time to reflect changes to our business practices, website, services or legal obligations.