As you may be aware the new GDPR regulations come into effect on 25th May 2018 and the purpose of this policy is to explain how LionShields uses personal information in relation to these regulations. This aim of the policy is to confirm what personal data is held, how the information will be used, how long it will be kept, and the circumstances where by it may be disclosed to third parties.

Controller

LionShields is the controller and is responsible for your personal data and may be referred to as “we” “us” ,“our” or the “company” within this policy.

We have appointed a data privacy manager who is responsible for overseeing any queries in relation to this privacy policy and the contact details are as follows :-

• LionShields Automotive Paint Protection Limited

• Contact : Callum Macleod

• Email Address : info@lionshields.co.uk

• Registered Address : 2 Pavillion Court, 200 Pavillion Drive, Northampton, NN4 7SL

• T elephone Number : 07891 499961

  Please do not hesitate to contact us as above should you have any queries regarding this policy.

  Changes to the Privacy Policy

  The policy may be updated from time to time and where possible we will notify you of these changes. A copy of the Policy can be obtained by contacting us as above. Please keep us informed if your personal data changes as it is important that the personal data we hold is current and accurate.

  The data we hold:

  Customer information : By submitting your details through our Contact Us page of the website or by contacting us directly by email you have agreed to supply us with your name, email address, telephone number, make and model of your vehicle in order for us to provide you with a quote. Following confirmation and acceptance of the quotation from us, the contact details provided will be used to arrange commencement of the works and for the processing of invoices and credit control. Access to this information is restricted to a small number of employees who have password protected IT systems. Copy invoices will be held by the Companies Accountants. The lawful basis for processing this information is to enter into a contract with you and our legitimate interest to recover debts due to us.

  Supplier provided information : following receipt of a quotation the information provided by the supplier to us will be retained electronically. If a purchase / re-order is not made within a period of 24 months then the personal data will be deleted. Invoices received by the company will be filed for accounting purposes and kept in a secure cabinet. This information may contain personal data if provided by the Supplier and will be held by the Company’s

Accountants. The lawful basis for processing this information is to enter into a contract with you and our legitimate interest to recover debts due to us.

Data retention

Customer contracts will be kept electronically for 7 years in line with HMRC requirements. The personal data held within the system will be reviewed monthly with effect from 25th May 2021, and will not therefore be stored for longer than three years unless they are a returning customer within this period.

Email communication will take place with customers and suppliers regarding current or future work. Any personal details which refer to an individual will be reviewed monthly from 25th May 2021, and will be deleted if not required or if our services have not been provided within this period. Email addresses may be used for future marketing purposes and to update customers on the services we provide if you have been a customer within this period.

Disclosure of personal data

Personal data will only be disclosed if requested by the police or other statutory law enforcement agencies. It may also be disclosed to our accountants and auditors if included / supplied on our customer or supplier invoices.

Your legal rights

You have the right to request confirmation of the personal data we hold for you and if necessary amend any incomplete and inaccurate data we hold for you. You may also request that personal data be deleted if it is outside the scope of this policy. In order to do this we may request specific information from you to help us confirm your identity and to ensure your right to this information. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Time limit to respond

We aim to respond to all legitimate requests within one month. If we do not resolve your queries to your satisfaction, you have the right to lodge a complaint with the Information Commissioners office at www.ico.org.uk, however we would appreciate the opportunity to address any concerns and kindly request that you contact us using the above details in the first instance.