Introduction – from johnpye.co.uk
- What information do we collect?
- Why do we collect this information?
- How long do we keep hold of your information?
- Who might we share your information with?
- International transfers
- How is your information stored and kept secure?
- What are your rights?
- Changes to this policy
- Contact us
What information do we collect?
Personal data, means any information about an individual from which that person can be identified or that relates to an identifiable individual. In the course of our business, we may collect and process the following data about you:
Information you give us
- telephone numbers;
- email addresses;
- financial and payment information;
- details of proof of identity/age;
- job title and employer;
- details of proof of ownership of goods offered for sale including descriptions, provenance, images of goods offered for sale;
- bidding history; and
- details of transactions when you purchase any of our products or services.
Information we collect from your use of our sites and services including:
- technical information, such as the Internet Protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, browser plug-in types and versions, operating system and platform;
- a record of details of your visit to our sites, including:
- your browser click through behaviour including your searches, the products, properties and pages that you looked at;
- the full Uniform Resource Locators (URL) clickstream to, through and from our sites (including date and time);
- page response times and download errors;
- page interaction information (such as length of visits to certain pages, scrolling, clicks and mouse-overs info);
- methods used to browse away from the page; and
- the type of device you used to access our sites.
- delivery information;
- payment information;
- information about the effectiveness of our advertising and your interactions with it;
- analytics information on your use of our services, used to produce statistical information.
We collect this information by using cookies and similar technologies. For further details about cookies and our use of them, please see the Cookies section below.
Information we collect from other sources
- relationship with social networks, such as Facebook, which may provide us with information where you access our sites through your social network account and allow the social network to share information with us to auto-fill forms;
- relationship with search engine providers, such as Google, which may provide us with information about what devices are used to access our sites; and
- credit reference agencies which provide financial information.
Why do we collect this information?
We process your personal data for the following reasons:
Pursuant to a contract in order to:
- provide you with our goods and services or otherwise fulfil our contractual obligations;
- provide you with information you request from us in order to take steps to enter into a contract;
- process payments;
- arrange and carry out collection or delivery of goods;
- enforce the contractual terms;
- maintain business and service continuity; and
- send service communications so that you receive a full and functional service and so we can perform our obligations to you, including notifications about invoicing, payments and changes to our sites and services. These may be sent by email or post.
On the basis of your consent:
- If you have consented to receive marketing from us, for example if you have signed up to our marketing list, then we will provide you with marketing communications, as described in the Marketing section below.
Where we rely on your consent for processing this will be brought to your attention, or will otherwise be apparent from the context, when the information is collected from you.
Where we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time. See the What are your rights? section below for more details.
In our legitimate interests of providing the best service and improving and growing our business we will process information in order to:
- where you are an existing customer or client of ours, make suggestions and recommendations to you about similar goods or services we think may interest you, as described in the Marketing section below;
- improve our products and services;
- use functionality, analytics and marketing cookies on our sites;
- keep our sites and systems safe and secure;
- conduct market research;
- ensure content from our sites will be presented to you in the most effective manner for you and your computer;
- provide you with a personalised service;
- allow auto-fill functions on forms filled out by you when you access our services through Facebook or other third party platforms;
- understand our customer base and purchasing trends;
- understand the effectiveness of our marketing;
- verify your identity and prevent fraud and forgery; and
- defend against or exercise legal claims and investigate and resolve complaints.
To comply with legal requirements relating to:
- the provision of goods and services;
- accounting, including, CGT, Inheritance tax, DACS, VAT and any other applicable tax;
- data protection;
- health and safety;
- anti-money laundering;
- fraud investigations;
- assisting authorities and law enforcement; and
- any other legal obligations placed on us from time to time.
How long do we keep hold of your information?
We will only keep your information for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Usually we will keep information about you for a maximum of  years after the end of our relationship with you unless legal obligations require otherwise or we are required to remove such data for our records.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
At John Pye we strive to provide you with choices around what marketing communications you receive from us.
You will receive marketing communications if either:
- you have signed up to our mailing list. Electronic marketing, such as email, is sent on the basis of your consent which you have the right to withdraw at any time. Postal and telephone marketing is carried out in our legitimate interests of promoting our business; or
- you are an existing customer and you have not objected to receiving marketing. This marketing is sent on the basis of our legitimate interests to promote our services. You have the right to opt-out of marketing at any time.
We work with Facebook to provide advertising on Facebook and Instagram. This may involve us using our list of people who will receive marketing communications from us to instruct Facebook to advertise our services to those individuals or to similar individuals. We carry out this processing in our legitimate interests to promote our business.
Changing your preferences
You can change your marketing preferences at any time by logging in and updating your preferences in the Settings menu on our sites.
Opting out of marketing
To withdraw consent for marketing or otherwise request that we stop processing your information for direct marketing purposes, including profiling, at any time you can opt-out of all communications by clicking ‘unsubscribe’ or ‘manage preferences’ in any of our emails, or by emailing email@example.com, and we shall stop processing your information for those purposes.
See What are your rights? section below for further information about your rights.
Who might we share your information with?
For the purposes set out in the Why do we collect this information? section above, we will share your personal information with the following categories of third parties:
- suppliers and sub-contractors who we appoint to provide services such as our auction platforms, CRM and other software providers, delivery contractors, online payment providers, email providers, marketing automation platforms and providers of marketing services;
- professional advisers including lawyers, bankers, consultants, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services;
- estate agents;
- analytics and search engine providers that assist us in the improvement and optimisation of our site;
- customer survey providers in order to receive feedback and improve our services;
- social media companies that assist us to ensure that you receive relevant advertising ;
- HM Revenue & Customs, regulators and other authorities;
Additionally, we will disclose your personal information to the relevant third party:
- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
- If we are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
Links to other websites
We may transfer your data outside the European Economic Area (“EEA”). We will only do so if adequate protection measures are in place in compliance with data protection legislation. We use the following protection measures:
- transferring to Commission approved countries;
- using Commission approved model contractual clauses; and
- requiring companies we transfer data to in the USA to be signed up to Privacy Shield certification.
For example, we use Mailchimp to send out emails to our mailing lists. They are based in the USA and are certified under Privacy Shield. More information on international transfers, including a copy of the safeguards, is available by contacting us.
How is your information stored and kept secure?
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. All information that you provide to us will be stored on secure servers. The computers that store the information are kept in a secure facility with restricted access and we use secure firewalls. All staff computers are password protected.
What are your rights?
Where processing of your personal data is based on consent, you can withdraw that consent at any time.
You have the following rights. You can exercise these rights at any time by contacting us at John Pye & Sons Ltd, James Shipstone House, Radford Road, Nottingham, Nottinghamshire, NG7 7EA or firstname.lastname@example.org. You have the right:
- to withdraw your consent at any time, where processing is based on consent (see Why do we collect this information? above);
- to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes;
- to ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing;
- to ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest;
- to request from us access to personal information held about you;
- to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
- to ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children’s data and was collected in relation to an offer of information society services;
- to ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing); and
- to ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract.
A cookie is a small data text file sent by a web server (a device where one or more websites are stored) to a web browser, they are then stored by the browser. The cookie is then sent back to the web server each time the web browser requests a page from the web server. This enables the web server to identify and track the web browser and provide richer user experiences for visitors to a web site.
We use the following cookies for the following purposes:
- Strictly necessary cookies: these are cookies that are required for the operation of our sites. They include, for example, cookies that enable you to log into secure areas of our sites.
- Analytical/performance cookies: they allow us to recognise and count the number of visitors and to see how visitors move around our sites when they are using them. This helps us to improve the way our sites work, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies: these are used to recognise you when you return to our sites. This enables us to personalise our content for you and remember your preferences.
- Targeting cookies: these cookies record your visit to our sites, the pages you have visited and the links you have followed. We will use this information to make our sites more relevant to your interests.
You can find more information about the individual cookies we use across our sites and the purposes for which we use them in the tables below:
First Party Cookies
|cfduid||Cloudflare||Necessary for Cloudflare’s security features providing secure access to our sites||End of session|
|__ga||Google Analytics||Used to distinguish users||2 years|
|__gat||Google Analytics||Used to throttle request rate||1 minute|
|_get_gtag_ua_28294265_1||Google Analytics||Used to distinguish users||24 hours|
|__gid||Google Analytics||Used to distinguish users||24 hours|
|PHPSESSID||PHP Session Storage||To maintain continuity in site use. For example, if an enquiry form is completed incorrectly, a message will be stored and presented to the user to indicate the errors in the submission||End of visit|
|ASPSESSIONIDAARBSBAQ||ASP Session Storage||To maintain continuity in site use||End of visit|
|switch-SitePref||Site prefs cooke||Remembers site settings such as view settings||2 years|
Third Party Cookies:
|Third Party||Cookie Name||Purpose||Expires|
|__fbp||Cookie relating to Facebook Pixels. Used by Facebook to deliver advertising products.
How do I change my cookie settings?
Cookies can be controlled by your web browser settings. Whether our cookies are used will depend on your browser settings, so you are in control. For example, in Internet Explorer you can refuse all cookies by clicking: “Tools” > “Internet Options” > “Privacy”, and selecting “Block all cookies” using the sliding selector. This choice will, however, have a negative impact upon the usability of many websites, including this one.
Most browsers provide tools so you can see what cookies have been set and manage and delete them. Please use the following links for more information on popular browsers:
Changes to this policy
Should you have any issues, concerns or problems in relation to our processing of your personal data, or should you wish to notify us of data which is inaccurate, please let us know by contacting us at email@example.com, or by writing to: Data Protection Officer, John Pye & Sons Ltd, James Shipstone House, Radford Road, Nottingham, Nottinghamshire, NG7 7EA.
For the purpose of data protection legislation, the data controller in relation to any personal data we hold about you is John Pye & Sons Ltd, James Shipstone House, Radford Road, Nottingham, Nottinghamshire, NG7 7EA. We are registered with the Information Commissioner’s Office (registration number ZA159238).
In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time. The ICO’s contact details are available here: https://ico.org.uk/concerns/. We ask that you contact us to allow us to address your concerns in the first instance.