GDPR

Phoenix County Metals is committed to protecting your privacy. This privacy notice provides information about the personal information we process, in compliance with the General Data Protection Regulation (GDPR).

What we need
Phoenix County Metals will be what is known as the ‘Controller’ of the personal data that you provide to us. We only collect basic personal data about you which does not include any special types of information but does include name, address, email, telephone numbers and bank details where necessary.

Why we need it
We need to know your basic personal data in order to settle accounts or invoice you, or because we have a legal obligation in order to satisfy our licensing requirements. We will not collect any personal data from you that we do not need in order to provide and oversee this service to you.

What we do with it
All the personal data is processed by our staff in the UK. For the purposes of IT hosting and maintenance this information is located on servers within the UK. No third parties have access to your personal data unless the law allows them to do so. A Data Protection regime is in place to oversee the effective and secure processing of your personal data.

How long we keep it
We are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it will be destroyed. Your information that we use for marketing purposes will be kept with us until you notify us that you no longer wish to receive this information.

What are your rights?
If at any point you believe the information we process on you is incorrect, you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us at the address detailed above. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).