Privacy Policy

1. General information

This website (referred to as “site”) is operated by Gibson Shield Limited  (referred to as “GS”).

Our privacy policy provides information to visitors of our site regarding the processing of their personal data by GS.

Our privacy policy sets out the basis on which any personal data GS collect from you or that you provide to GS (referred to as “data”) will be processed by GS.

GS is committed to protecting and respecting your privacy and shall use your data only for the purposes and in the manner set forth below, which describes the steps we take to ensure the processing of your data is in compliance with the regulation (EU) 2016/679 of the European Parliament and of the council, known as the General Data Protection Regulation or GDPR and any subsequent amendments (referred to as “GDPR”).

This privacy policy applies to data that we process about you in connection with your use of our site. The types of data we process depend on how you use our site.

By using our site and by disclosing your data to us, you consent to the collection, storage, processing, use and disclosure of your data by us as described in this privacy policy. If you do not agree on any aspect of this privacy policy, you shall discontinue using our site.

 

2. Controller of your personal data

GS is the controller of your personal information in the meaning stated by article 4 section 7 of GDPR.

The contact details of GS are as follows:

Email address: info@gibson-shield.com

Address: One Spa Wells, Low Dinsdale, Neasham, Darlington, DL2 1PL, United Kingdom

 

3. Data we may collect

When you visit or use our site in any way, GS may collect and process different types of information about you.

Types of data that might be collected from you are set out below and depend on the way you use our site.

We store technical information about your device, such as your internet protocol (IP) address, browser type and version, operating system and device type. This is collected in an anonymous manner and helps us optimize our site for its users.

We may store information about your visit, including the uniform resource locators (URLs) of the pages you visit during your visit, articles you view, length of time on page and referring URL. This is the web page that you came from if you followed a link to our site.

If you choose to message us through the contact form located on our site, we may collect and process your:

• Name
• Email
• Company name
• Phone

If you choose to apply to become a member of our certified partner, we may collect and process your:

• Company name
• Name of your company’s representative
• Email
• Website
• Phone
• Address
• Information about social media accounts (Facebook, Instagram, Twitter)
• Information about your professional experience
• Your clients/projects information, when registered via your Partner Area

Types of data listed above may also be processed by GS if you become a member of our certified detailing network – we may share it on our site to let our clients know about your business.

The data we collect as well as the basis of processing and the purposes of processing it are detailed below. Sometimes these activities might also be carried out by third parties (see “disclosure of your data” section below).

 

4. Where we store your data

The data we collect may be stored and transferred within the European Economic Area (EEA) or transferred to, and stored in, countries outside the EEA, for example, when one of our service providers use employees or equipment based outside the EEA. The EEA comprises those countries that are in the European Union (EU) and some other countries that are considered to have adequate laws to ensure personal data is protected.

When transferring your data outside of the EEA, we will (and will ensure that service providers acting on our behalf agree to) protect it from improper use or disclosure and ensure the same levels of protection are in place as are applied within the EEA. All data transfers will be allowed only when conditions for such a transfer stated by GDPR and applicable law are met.

 

5. How we use your data

We may use your data that we process to:

• Provide you with general information on our site and to provide you with personalised services;
• Keep our internal records,
• Provide marketing information with your consent;
• Provide you with information regarding our events and promotions;
• Analyse your online browsing behaviour on our site;
• Ensure that content of our site is presented in the most effective, responsive and compatible manner for you and for your device;
• Respond to your contact requests you may submit to us;
• Consider your request to become our partner;
• If you become a partner – to let your clients know about your business, by putting information about your business on our site;
• Improve the services that we provide to you;
• Provide you with information or services that you request from us;
• Investigate any improper use of our services or our site.

 

6. Legal basis for data processing

Your personal data is being processed by GS on the following legal basis:

• You have given us your consent to the processing of your data for one or more specific purposes (article 6 section 1 letter a. Of GDPR);
• Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (article 6 section 1 letter b. Of GDPR);
• Processing is necessary for compliance with a legal obligation to which GS is subject (article 6 section 1 letter c. Of GDPR);
• Processing is necessary for the purposes of the legitimate interests pursued by GS or by a third party (article 6 section 1 letter f. Of GDPR).

 

7. Disclosure of your data

We consider your data to be private and confidential. We may access and/or disclose your data if required to do so by law or in good faith and belief that such action is necessary to:

• Conform with the law or comply with legal process served on us,
• Protect and defend our rights or property,
• Act under exigent circumstances to protect vital interests of users of our site.

Disclosure to service providers

We use third-party service providers who work for us in the provision of our services. In providing the services, your data will, where applicable, be processed by the service provider on our behalf.

We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your data. We will have written contracts with them which provide assurances regarding the protections that they will give to your data and their compliance with our data security standards and international transfer restrictions.

Disclosure to third parties

In certain circumstances, we may share or be obliged to share your data with third parties for the purposes described above and in accordance with GDPR.

These third parties may include:

• Regulatory authorities;
• Financial institutions;
• Public authorities such as police and public prosecutors;
• Auditors;
• External professional advisors and;
• Others, where it is permitted by law, or where we have your consent.

Above-mentioned parties may also use your data as a “data controller” in the meaning stated by article 4 section 7 of GDPR. What that means is they will have their own privacy notices which you should read, and they have their own responsibilities to comply with applicable data protection legislation such as GDPR.

 

8. Data retention

We keep your data for as long as it is necessary to do so to fulfil the purposes for which it has been collected as described above. The criteria we use to determine data retention periods for your data includes the following:

• Retention in case of queries – we will retain it for a reasonable period after the relationship between us has ceased;
• Retention in case of applications for certified detailer program – we will retain it for a period necessary to consider and decide on your application, and;
• Retention in accordance with legal and regulatory requirements.

If you would like further information about our data retention practices, please contact us (see the “contact us” section below).

 

9. Security

We strive to use appropriate technical and physical security measures to protect your personal data which is transmitted, stored or otherwise processed by GS, from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access. Our service providers are also selected carefully and required to use appropriate protective measures.

As effective as modern security practices are, no physical or electronic security system is entirely secure. The transmission of information via the Internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our site. Any transmission of data is at your own risk. Once we receive your data, we will use appropriate security measures to seek to prevent unauthorised access. We will continue to revise policies and implement additional security features as new technologies become available.

 

10. Your rights

GDPR and other data protection legislation introduce various rights and freedoms of data subjects.

However, in certain circumstances, these rights may be restricted. In particular, your rights may be restricted where this is necessary:

• For the prevention, investigation, detection or prosecution of criminal offenses or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security;
• For the protection of the data subject or the rights and freedoms of others.

All of your rights listed below, excluding the right to lodge a complaint with a supervisory authority, shall be exercised by making the appropriate request to GS by email: info@gibson-shield.com

Subject to the above, your rights under GDPR may include (as relevant):

Right of access

What does it mean?

• Subject to certain conditions, you are entitled to have access to your personal data which GS store;
• If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.

Conditions to exercise

GS must be able to verify your identity. Your request may not affect the rights and freedoms of others, e.g. Privacy and confidentiality rights of other individuals and/or businesses.

Right of data portability

What does it mean?

• Subject to certain conditions, you are entitled to receive the data which you have provided to us and which is processed by us by automated means, in a commonly used machine-readable format;
• If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.

Conditions to exercise

• The GDPR does not establish a general right to data portability. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means (e.g. Not for paper records). It affects only personal data that was “provided” by you. Therefore, it does not, as a rule, apply to personal data that was created by the GS or supplied to the GS by any other individual and/or business.

Right to rectification

What does it mean?

•  You may challenge the accuracy or completeness of personal data which GS process about you. If it is found that data is inaccurate, you are entitled to have the inaccurate data removed, corrected or completed, as appropriate;
• We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details.

Conditions to exercise

• This right only applies to your own personal data. When exercising this right, please be as specific as possible.

Right of restriction

What does it mean? 

• Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.

Conditions to exercise

• This right applies only if the processing of your personal data is necessary for the performance of a task carried out in the public interest. Objections must be based on grounds relating to your particular situation. They must not be generic so that we can demonstrate that there are still lawful grounds for us to process your personal data.

Right of erasure

What does it mean? 

• Subject to certain conditions, you are entitled, on certain grounds, to have your personal data erased (also known as the “right to be forgotten” mentioned in article 17 of GDPR), e.g. Where you think that the information we are processing is inaccurate, or the processing is unlawful.

Conditions to exercise

• There are various lawful reasons why we may not be in a position to erase your personal data. This may apply:
  • Where we have to comply with a legal obligation;
  • In case of bringing legal proceedings or defending legal proceedings, or;
  • Where retention periods apply by law or under GS internal data retention policies.

Right to withdrawal

What does it mean? 

• You have the right to withdraw your consent to any processing for which you have previously given that consent.

Conditions to exercise

• The withdrawal of consent will not affect the lawfulness of data processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority

• In the EEA, you may also make a complaint to an appropriate supervisory body for data protection matters or seek a remedy through local courts if you believe your rights have been breached.

 

11. Changes to our privacy policy

GS reserve the right to change this privacy policy at any time in its sole discretion. If we make changes to this privacy policy they will be posted on the site so that you are always aware of what information we gather, how we might use that information and in what circumstances we may disclose it. By continuing to use our site after we post any such changes, you accept and agree to this privacy policy as modified.

 

12. Contact us

In the event you have any questions, comments, and requests about the information set out in this privacy policy, please contact us by email info@gibson-shield.com and/or by post to Gibson Shield, One Spa Wells, Low Dinsdale, Neasham, Darlington, DL2 1PL, United Kingdom.

 

13. reCAPTCHA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.