Privacy Policy
This Privacy Notice sets out how we, Hugh Crane (Cleaning Equipment) Ltd, collect, store and use (in other words, “process”) personal data or information about you when you interact with us and where we obtain or collect personal information about you. This Privacy Notice is effective from 25/05/2018 and also covers activities carried out by the company under the “Commando” and “Cask Force” brands.

Summary
This section summarises how we obtain, store, keep secure, and use personal information about you. It is intended to provide a very general overview only. It is not complete in itself and must be read in conjunction with the corresponding full sections of this Privacy Notice.

Data controller:
Hugh Crane (Cleaning Equipment) Ltd, of South Walsham Rd, Acle, Norwich, NR13 3ES and of 148, Station Rd, Whittlesey, PE7 1UF.
How we collect or obtain information about you:
when you provide it to us by contacting us, placing an order on our website, completing our online enquiry form.
from your use of our website, using cookies and tracking beacons.
from publicly available sources
Information we collect includes:
name, contact details, payment details including last 4 digits of card, IP address, information from cookies, information about your computer (device, browser type), information from cookies, information about how you use the website (which pages have been viewed), the time when you view them and what you clicked on, the geographical location from which you accessed our website (based on your IP address), the company name or business name (if applicable.
How we use your information:
for administrative and business purposes (particularly to contact you and process orders on our website), electronic and postal marketing, to improve our business and website functionality and processes, to fulfil our contractual and legal obligations, to advertise our goods and services, to analyse your use on our website and in connection with our legal rights and obligations.
Our legal basis for the processing of personal data: 
is assessed and determined in all cases
Disclosure of your information to third parties:
only to the extent necessary to run our business, to our service providers, to fulfil any contracts we enter into with you, where required by law, or to enforce our legal rights.
Do we sell your information to third parties (other than in the course of a business sale or purchase or similar event)? :
No.
How long we retain your information:
for no longer than necessary, taking into account any legal obligations we have (e.g. to maintain records for tax purposes), any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business).
How we secure your data:
Security of your data is recognised by us as being of paramount importance. We achieve this by using appropriate technical and organisational measures such as
storing your information on secure servers, encrypting transfers of data to or from our servers using Secure Socket Layer (SSL) technology, encrypting payments you make on or via our website using Secure Socket Layer (SSL) technology, only granting access to your information where necessary.
Use of cookies:
we use cookies and similar information gathering technologies on our website including essential, functional, analytical and targeting cookies. For more information, please visit cookies policy.
Transfers of your information outside the European Economic Area (EEA):
We do not sell your personal data. Personal data we collect from you may be transferred to and stored at a destination outside the EEA, as may be data handled by one of our service providers who have appropriate protection measures in place to make sure data remains adequately protected.
Use of automated decision making and profiling:
we may use automated decision making via web analytics, cookies and targeting cookies to display advertisements to people who visit our website on other websites and around the internet
Your rights in relation to your information: 
Sensitive personal information:
we do not knowingly or intentionally collect what is commonly referred to as ‘sensitive personal information’. Please do not submit sensitive personal information about you to us.
This notice is available :
via our website and by specific written request to the company

Legal basis for processing personal data
In each situation where we collect, control and process personal data, we have considered and assessed the legal basis for doing so which will generally be one or more of the following:

Consent:
(Article 6(1)(a) of the General Data Protection Regulations) – where clear consent has been given in respect of processing personal data for a specific purpose
Contract:
(Article 6(1)(b) of the General Data Protection Regulations) – where the data processing is necessary for a contract we hold or to fulfil specific steps prior to entering in to a contract.
Legal obligation:
(Article 6(1)(c) of the General Data Protection Regulations) – where the data processing is necessary for purposes of legal compliance
Legitimate interests:
(Article 6(1)(f) of the General Data Protection Regulation) – where the processing is necessary for your or our legitimate interests or the legitimate interests of a third party, unless there is good reason to protect the individual’s personal data which overrides those legitimate interests.
Soft opt-in:
, (under the Privacy and Electronic Communications Regulations) where we have obtained personal details directly from yourself during the course of a sale, or negotiations for a sale of a product or service; only in relation to our marketing of our own similar products and services; where you have been given a simple opportunity to refuse or opt-out both when collecting details and in all of our marketing communications after that; where all of our future communications give you the simple opportunity to opt-out of receiving further communications.
Personal information we collect when you visit our website
Web server log information:
We use a third party server, located in the EU, to host our website
Use of website server log information for IT security purposes:
We and our third party hosting provider collect(s) and store(s) server logs to ensure network and IT security and so that the server and website remain uncompromised. This includes analysing log files to help identify and prevent unauthorised access to our network, the distribution of malicious code, denial of services attacks and other cyber attacks, by detecting unusual or suspicious activity. Unless we are investigating suspicious or potential criminal activity, we do not make, nor do we allow our hosting provider to make any attempt to identify you from the information collected via server logs.
Cookies and similar technologies:
Cookies are small data files which are sent from a website to a browser to record information about users for various purposes. We use cookies and similar technologies on our website, including essential, functional, analytical, targeting cookies and web beacons. For further information on how we use cookies, please see our cookies policy. You can reject some or all of the cookies we use on or via our website by changing your browser settings or non-essential cookies by using our cookie control tool, but doing so can impair your ability to use our website or some or all of its features. For further information about cookies, including how to change your browser settings, please visit www.allaboutcookies.org.

Personal information we collect when you contact us:
We collect and use information from individuals who contact us in accordance with this section and the later section entitled “Disclosure and additional uses of your personal information”.

Email:
When you send an email to the email address displayed on our website we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email). We use a third party email provider to store the emails, which takes place within the EEA.
Contact form:
When you contact us using our contact form, we collect name, email address and telephone number, IP address, plus your comments. We also collect any other information you provide to us when you complete the contact form. If you choose not to provide the mandatory information required by our contact form, you will not be able to submit the contact form and we will not receive your enquiry. If you choose not to supply the optional information required by our contact form we will not be able to respond to your enquiry by telephone or email. Messages you send us via our contact form will be stored on our third-party email and hosting provider’s servers within the EEA.
Phone:
When you contact us by phone, we collect your phone number and any information provided to us during our conversation. We may record phone calls to help enhance our service to you. Data is held by a third party provider on servers within the UK. Their privacy policy can be viewed here https://www.admeter.co.uk/privacy/
Post:
If you contact us by post, we will collect any information you provide to us in any postal communications you send us.