Customer Privacy Notice

This Privacy Notice is provided by Base Materials ('Base Materials', 'we' or 'us'). We are a 'controller' for the purposes of the UK General Data Protection Regulation incorporated by the UK's Data Protection Act 2018 (collectively referred to as the "Data Protection Laws").

This Privacy Notice applies when you visit our website at https://base-materials.com. We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights. Base Materials fully support the requirements of the Data Protection Laws and is committed to the protection of personal data belonging to our customers, suppliers and colleagues.

We may change this Privacy Notice from time to time. You should check this Privacy Notice occasionally to ensure you are aware of the most recent version that will apply each time you access this website.

How to contact us

If you have any questions about this Privacy Notice, how we handle your personal data, or would like to exercise any of your rights, please contact:

Data Protection Officer
Base Materials
Unit 18 -20
Ashville Way
Whetstone
Leicestershire
LE8 6NU

Email:  dataprotectionofficer@base-materials.com

What personal data we collect and how we use your information

Information you submit

Direct Interactions: You may provide us with your personal data (including name, job title, email address, phone number) by filling in forms on the website, using our chat function or by corresponding with us by phone, email or otherwise. This includes personal data you provide when you send us an enquiry, give us feedback or contact us.

Visitors only

Information automatically collected when you use our website: As you interact with our website, we will automatically collect information about your device, browsing actions and patterns, IP address and time zone ("Device Information"). We collect this personal data by using cookies, server logs, web beacons, tags, pixels and other similar technologies. Please see our cookies policy for further details.

Newsletter and marketing

If you sign up to receive our newsletter or our subscriptions/ marketing emails, we will use your name and email address to send you the material you have requested.

You can unsubscribe at any time by contacting us at the details set out above or clicking the unsubscribe link in the emails that you receive.

How is processing your personal data lawful?

We are allowed to process your personal data on the basis that it is in our legitimate interests to:

monitor how our website is used in order to improve it. We use aggregated data to do this so it does not impact on your privacy;

respond to enquiries, complaints and requests in order to serve our customers. We will only use your personal data for this purpose. If you are an existing customer, we may add information about the enquiry, complaint or request to other records we hold about you so we can provide a better customer service; and

send you material you have requested, using the data you have provided.

Please be aware that you have the right to object to the processing of your data for any of the legitimate interests identified.

Who will have access to your personal data?

Like any business, we use service providers to operate our website, such as website hosting, enquiry functionality, WordPress plugin, website agents and chat functions. Some of these service providers will process your data as part of the services they offer to us. We take steps to ensure that our service providers treat your data in accordance with the law, only use it in accordance with our contract with them and keep it secure.

How do we keep your data secure?

We strive to implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. We follow recognised industry practices for protecting our IT environment and physical facilities.

How long will you keep my data?

We will keep your personal data for no longer than reasonably necessary as set out in the table below.

Type of Record	Retention Period
Complaints	For a period of up to six years after resolutuon of the complaint.
Cookies/Analytics Data	A maximum of 730 days.
Information From Enquiry Forms	Until the enquiry has been completed and no further responses are received for a reasonable period. If you are an existing customer, the enquiry may be added to other information that we hold about you as a customer.
Newsletter/Marketing Requests	Until you tell us that you no longer wish to receive the subscription or marketing material.

Your Rights

Your Data Protection Rights	What Does This Mean?
Right of Access	You have the right to obtain access to your personal data we process and certain other information (similar to that provided in this Privacy Notice). This is so you are aware and can check that we are using your information in accordance with Data Protection Laws. You may ask for: A copy of your information; Details of the purpose for which it is being processed; Details of the recipients or classes of recipients to whom it is or could be disclosed, including if they are overseas and what protections they have in place; The period for which it is held (or the criteria which determines this); Any information available about the source of the data; and Whether we carry out any automated decision-making or profiling, and where we do information about the logic involved and the outcome or consequences of that decision or profiling. To help us find the information, please give us as much information as possible about the type of personal data you would like to see.
Right to Rectification	You are entitled to have your information corrected if it is inaccurate or incomplete. If you would like us to do this, please contact us (see section "How to Contact Us").
Right to Erasure	This is also known as the 'right to be forgotten' and, in simple terms, enables you to request the deletion or removal of your information where: You do not believe that we need your data in order to process it for the purposes set out in this Privacy Notice; If you had given us consent to process your data, you withdraw that consent and we cannot otherwise legally process your data; You object to our processing and we do not have any legitimate interests that mean we can continue to process your data; or Your data has been processed unlawfully or have not been erased when it should have been.
Right to Restrict Processing	You have rights to 'block' or suppress further use of your information. When processing is restricted we can still store your information, but may not use it further. You may request that we stop processing your personal data temporarily if: You do not think your data is accurate. We will start processing again once we have checked whether or not the data is accurate; The processing is unlawful but you do not want to erase your data; We no longer need the personal data for our processing, but you need the data to establish, exercise or defend legal claims; or You have objected to the processing because you believe that your interests should override [the companies] legitimate interests.
Right to Object To Processing	You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing.
Right to Withdraw Consent	If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, that does not mean anything we have done with your personal data with your consent up to that point is unlawful.) Please contact us (see "How to contact us" section) if you want to withdraw your consent.

If you would like to exercise your rights, please contact us at the details set out above.

We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.

Please note that exceptions apply to some of these rights which we will apply in accordance with the law.

Complaints to the regulator

If you do not think that we have processed your data in accordance with this Privacy Notice, you should let us know as soon as possible. You also have the right to complain to the Information Commissioner's Office. Information about how to do this is available on his website at www.ico.org.uk.