TN United Kingdom Ltd – Privacy Notice (GDPR Updated)

Who We Are

TN United Kingdom, Ltd
Unit K, Downland Business Park
Lyons Way, Worthing
West Sussex, BN14 9LA
United Kingdom
https://tn-uk.com

We recognise the importance of personal information and consider it our social responsibility to protect it appropriately. We comply with the UK GDPR and the Data Protection Act 2018.

Data Protection Officer

Named Data Protection Officer:
Mark Hiscott – Plant Manager
TN United Kingdom, Ltd
Telephone: 01903 891 200

Purpose of Processing

We process personal data for:

• Product sales, installation, repairs, inspections, servicing, and maintenance
• Product support notifications
• Marketing communications (where consent is given)
• Surveys and service improvement
• Responding to enquiries

Categories of Data Collected

• Personal information such as name, address, phone numbers, job title
• Bank account details
• Email addresses
• Vehicle information (if visiting our premises)
• Building access records
• IP Addresses
• Next of kin information (where applicable)
• Demographic information such as postcode and preferences
• Details of your previous orders with Spheric Trafalgar or TN United Kingdom, Ltd.
• Product specification information, only where willingly provided by the customer

How We Collect Your Data

You provide several pieces of data to us directly during the contract negotiation period and subsequently upon the start of your engagement, for example, your bank details. We collect data and process data when you:

• Submit your details on our website or place an order/enquiry for any of our products or services
• Use or view our website
• Voluntarily complete a customer survey or provide feedback to us

How We Use Your Data

Our company collects data so that we can:

• Process your orders & manage your account
• Email you with special offers on products and services we think you might like
• Carry out relevant market research

We may share anonymised customer information, such as sanitised engineering drawings and product specifications with third parties to perform on your behalf. The sharing of such information is strictly controlled, and is necessary to ensure the quality of our products and services. Consent will be obtained, for such sharing, where legally required.

Employees within our company who have responsibility for procurement, project management, IT, sales, administration of payment and receipts, and carrying out of performance related procedures will have access to your data. All employees with such responsibility have been trained in ensuring data is processed in line with Data Protection Act 2018.

Our company may share your data with our parent/sister companies so that they may offer you their products and services which we think you would like. We do also share your data with countries outside the European Economic Area, for internal reporting processes. We have put the following measures in place to ensure your data is transferred securely.

• Data is encrypted
• UK standard data protection and processing agreement has been adopted

In some cases, we will collect data about you from third parties, such as intermediaries and/or credit reference agencies. This data will be processed in line with the law.

Website Tracking

We use Google Analytics to understand website usage. This may include anonymised IP addresses, browser type, pages visited, and time spent on the site. Data may be transferred outside the UK with appropriate safeguards in place.

Payment Processing – Stripe

Payments are processed securely by Stripe. We do not store card details. Stripe may process billing details, payment method information, IP address, and transaction data in accordance with their privacy policy and PCI-DSS requirements. The link to their privacy policy can be found below:

https://stripe.com/gb/privacy

Cookie Policy

Full details about the cookies we use are displayed in our cookie consent banner when you first visit our website. You can manage your cookie preferences at any time by clicking the "Manage Consent" button located at the bottom left of the screen.

Lawful Basis for Processing

We process data under:

• Contractual necessity
• Legal obligation
• Legitimate interests
• Consent (where required)

How We Store Your Data

Our company securely stores your data at TN United Kingdom, Ltd. Personal data is either kept in secure files or within the company's IT system. Documents within the IT system are password protected, and supported fully by up-to-date firewalls and anti-virus software. Our company will keep your data for a minimum of seven years.

Special Categories of Data

Generally, we will process special categories of data when the following applies:

• You have given explicit consent
• We must process it in order to comply with a legal obligation
• We must process data for reasons of substantial public interest
• You have already made the data public

We do not need your consent if we use special categories of personal data to carry out our legal obligations. However, we may ask your consent to allow us to process certain particularly sensitive data. If this occurs, you will be made fully aware.

Provision of Personal Information to Third Parties

In the following cases, our company may provide personal information we obtained to third parties:

• Cases when we are required by law and regulations or in which such disclosure is legally required by the court and other government agencies that have legitimate authority
• When we have our client's permission
• If the whole or part of our company are succeeded by another company
• Cases where it is required to protect a person's life or property but difficult to gain the client's permission
• When outsourcing the handing of personal information - In cases where the handling of personal information is outsourced to a third party, our company will select appropriate agents on the condition that they have the management structure to ensure appropriate data protection handling with these agents. Furthermore, our group will supervise them with appropriate attention

Marketing Communications

Customers may opt in to receive marketing communications and can unsubscribe at any time using email links or by contacting us directly.

International Data Transfers

Personal data may be shared with our parent company in Japan for internal reporting and business operations. Appropriate safeguards such as Standard Contractual Clauses are in place.

Data Retention

Customer and transaction data is retained for a maximum of 7 years, after which it is securely deleted or anonymised.

Updates to This Statement

The Company reserves the right to update this Notice and any other relevant policies or procedures at any time. Any substantial changes that we make to this Notice in the future will be provided to you by post or email depending on your preferred method of contact and posted on our website. The Company may also notify you in other ways from time to time about the processing of your data.

Your Rights

You have rights of access, correction, deletion, restriction, objection, data portability, and withdrawal of consent. Requests are handled within one month.

Complaints

If you believe your data rights have been breached, contact us first. You may also contact the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.