OBAS UK gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
OBAS UK Ltd’s registered office 1 Chapel Hill Industrial Estate, Chapel Hill, Longridge, Preston. PR3 3BU which is a company registered in England and Wales under company number 04105807. We are registered on the Information Commissioner's Office Register; registration number ZA108035, and act as the data controller and data processor when processing your data. Our designated Data Protection Officer can be contacted at firstname.lastname@example.org or Data Protection, OBAS UK Ltd, 1 Chapel Hill Industrial Estate, Chapel Hill, Longridge, Preston, PR3 3BU.
Information That We Collect
OBAS UK processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.
The types of personal data that we collect could collect (but not limited to): Name, Business Address, Home Address (only when relevant as a trading address or for delivery of goods at your request), Personal Email, Business Email, Business Telephone Number, Home Telephone Number, Mobile Telephone Number, Proof of Delivery paperwork, CCTV, audio recordings, Photo IDs.
We collect information through providing our services and products, e.g. our website, online services, telephone sales and customer services, orders and application forms.
How We Use Your Personal Data (Legal Basis for Processing)
OBAS UK take your privacy very seriously and will never disclose, share or sell your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time. The purposes and reasons for processing your personal data are detailed below:
- We collect your personal data in the performance of a contract or to provide a service or product. We use the data in assisting to completing transactions and orders of our products or services, administering your account, processing payments, arranging shipments and deliveries and facilitating supply of goods, replacements, repairs and returns.
- We collect and store your personal data as part of our legal obligation for business accounting and tax purposes, business operations and manage warranty obligations.
- For compliance with applicable laws, regulations, court orders, government and law enforcement requests, to operate our services and products properly and to protect ourselves, our users and our customers and to solve any customer disputes.
- Communicating with you about our products. This could be responding to your enquiries or requests, service completion or warranty-related communications, communications required by law or applicable corporate updates related to mergers, acquisitions or divestitures.
- We will occasionally send you marketing information where we have assessed that it is beneficial to you as a customer and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests.
- Maintaining the security of our websites, products, features and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your information. When you interact with us, we will also take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your personal data. We may also maintain additional security measures, such as CCTV, to safeguard our physical locations.
You have the right to access any personal information that OBAS UK processes about you and to request information about:
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data for
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us. Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
In the event that we have deleted your information from our systems, there may be an occasion where we have been contacted by either yourselves or a third party to make contact with you. We will obviously seek your authority to setup a new account but will unfortunately not have access to any other historical information which may affect our ability to maintain preferential buying discounts as a result of historical loyalty and trading relationship.
Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. OBAS UK use third parties to provide selected services and business functions; however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures. We will only share your personal data as follows and, when applicable, only with the appropriate contractual obligations in place.
Sharing With Our Staff
All employment contracts since 2008 have included specific conditions with regards to data confidentiality, more recently with effect from the 25th May 2018 all employment contracts have been modified to ensure that all staff understand that they have an obligation to protect your personal data in accordance with OBAS UK GDPR policy and that they cannot access, store or share data on any device that is not under the direct control of OBAS UK, they cannot also disclose any personal data or confidential data to any third party without both a Director of OBAS UK or your authority. All employees understand that they are employed by the company and that all activities conducted by them are on behalf of the company and it is the employee’s responsibility to ensure they meet the integrity and policies of OBAS UK.
Sharing With Service Providers And Partners
We engage service providers or Partners to manage or support certain aspects of our business operations on our behalf. These service providers or partners may provide services such as credit card processing and fraud management services, human resources consultancy, product delivery, advertising and marketing activities (including digital and personalized advertising), IT services, debt collection and management or support of OBAS UK resources to include telecoms and websites. Our service providers and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by OBAS UK. We also take steps to provide adequate protection for any transfers of your personal data in accordance with applicable law such as signing EU Standard Contractual Clauses with the service provider or partner, relying on their Privacy Shield certification, other approved codes of conduct or certification mechanisms or binding and enforceable commitments of the service provider.
Sharing With Third Parties
Circumstances may arise where, whether for strategic or other business reasons, OBAS UK decides to sell, buy, merge or otherwise reorganise businesses. In such transactions, we may disclose or transfer your personal data to prospective or actual purchasers or receive personal data from sellers. Our practice is to seek appropriate protection for your personal data in these types of transactions.
Compliance with Law
We may also share your personal data when we believe, in good faith, that we have an obligation to: (i) respond to duly authorized information requests of law enforcement agencies, regulators, courts and other public authorities, including to meet national security or other law enforcement requirements; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and help prevent security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of OBAS UK or its subsidiaries; or (v) protect the rights or personal safety of OBAS UK, our employees, and third parties on or using OBAS UK property when allowed and in line with the requirements of applicable law.
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. OBAS UK use third-party/third-parties to provide the below services and business functions; however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.
Personal information provided on the website and online credit card transactions are transmitted through a secure server. OBAS UK are committed to handling your personal information with high standards of information security. OBAS UK take appropriate physical, electronic, and administrative steps to maintain the security and accuracy of personally identifiable information we collect, including limiting the number of people who have physical access to our database servers, as well as employing electronic security systems and password protections that guard against unauthorized access
Processing of credit card payments are processed through a third party highly secure web portal which is integrated within our online website or directly through their website if payment is taken over the phone. None of your personal credit card information is retained within OBAS UK.
The OBAS UK website uses encryption technology, like Secure Sockets Layer (SSL), to protect your personal information during data transport. SSL encrypts ordering information such as your name, address, and credit card number. Our Sales, Administration and Warehouse also operate over a private, secure network. Please note that email is not encrypted and is not considered to be a secure means of transmitting credit card information.
Transfers Outside the EU (if applicable)
OBAS UK do not presently knowingly utilise products or services (or parts of them) that may be hosted/stored in non EU countries. In the event this changes or we are made aware of this we will ensure that your personal data is protected and treated to the same high standard within the EU.
Where this is the case, we will take steps to ensure that those providers use the necessary level of protection for your information and abide by strict agreements and measures set out by OBAS UK to protect your data and comply with the relevant data protection laws.
Consequences of Not Providing Your Data [if relying on statutory/contractual requirement basis]
You are not obligated to provide your personal information to OBAS UK, however, as this information is required for us to provide you with our services, deliver your products and for business continuity. Therefore, we will not be able to offer some/all our services without it.
How Long We Keep Your Data
OBAS UK only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. We are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it may be destroyed.
Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.
Occasionally, OBAS UK would like to contact you with the updates on our services and products that we provide. If you consent to us using your contact details for this purpose, you have the right to modify or withdraw your consent at any time by using the opt-out/unsubscribe options or by contacting OBAS UK directly on email@example.com
Lodging A Complaint
OBAS UK only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the supervisory authority.
OBAS UK Ltd
1 Chapel Hill Industrial Estate, Chapel Hill, Longridge, Preston, Lancashire, PR3 3BU.
ICO – Information Commissioner’s Office
Head office: Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF.
Tel: 0303 123 1113
Cookies, Web Beacons, and How We Use Them
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
A "web beacon" or "pixel tag" or "clear gif" is typically a one-pixel image, used to pass information from your computer or mobile device to a website.
List Of Cookies We Collect
The table below lists the cookies we collect and the information they store.
|COOKIE name||COOKIE Description|
|CART||The association with your shopping cart.|
|CATEGORY_INFO||Allows pages to be displayed more quickly.|
|COMPARE||The items that you have in the Compare Products list.|
|CUSTOMER||An encrypted version of your customer id.|
|CUSTOMER_AUTH||An indicator if you are signed into the store.|
|CUSTOMER_INFO||An encrypted version of the customer group you belong to.|
|CUSTOMER_SEGMENT_IDS||Stores your Customer Segment ID|
|EXTERNAL_NO_CACHE||A flag that, indicates whether caching is on or off.|
|FRONTEND||Your session ID on the server.|
|GUEST-VIEW||Allows guests to edit their orders.|
|LAST_CATEGORY||The last category you visited.|
|LAST_PRODUCT||The last product you looked at.|
|NEWMESSAGE||Indicates whether a new message has been received.|
|NO_CACHE||Indicates whether it is allowed to use cache.|
|PERSISTENT_SHOPPING_CART||A link to information about your cart and viewing history if you have asked the site.|
|RECENTLYCOMPARED||The items you recently compared.|
|STF||Information on products you emailed to friends.|
|STORE||The store view or language you have selected.|
|USER_ALLOWED_SAVE_COOKIE||Indicates whether a customer authorized cookies.|
|VIEWED_PRODUCT_IDS||The products that you recently looked at.|
|WISHLIST||An encrypted list of products added to your wish list.|
|WISHLIST_CNT||The number of items in your wish list.|
Most browsers allow you to refuse to accept cookies. For example (at the time the policy was drafted):
• In Internet Explorer you can refuse all cookies by clicking “Tools”, “Internet Options”, “Privacy”, and selecting “Block all cookies” using the sliding selector. For more information, please click here.
• In Mozilla Firefox you can block all cookies by clicking “Tools”, “Options”, and un-checking “Accept cookies from sites” in the “Privacy” box. For more information, please click here.
You can also delete cookies already stored on your computer:
In Internet Explorer, you must manually delete cookie files (you can find instructions for doing so at http://support.microsoft.com/kb/27883
In Mozilla Firefox, you can delete cookies by, first ensuring that cookies are to be deleted when you “clear private data” (this setting can be changed by clicking “Tools”, “Options” and “Settings” in the “Private Data” box) and then clicking “Clear private data” in the “Tools” menu.
Online Account Registration
To make online shopping faster and easier, you may register on the OBAS website. As a registered customer, you only have to enter your shipping addresses and billing information once; they will be securely stored with us for your future use. Using your name and a password of your choice, you may access your account online at any time to add, delete, or change information. If you are using a public computer, we strongly encourage you to Sign Out when you finish shopping. Your information will still be stored with us but it will not be accessible to anyone else from that computer.
You will receive promotional emails from us only if you have asked to receive them. If you do not want to receive email from OBAS or its affiliates you can click on the "Unsubscribe" link at the bottom of any email communication sent by us. Please allow us 3 business days from when the request was received to complete the removal, as some of our promotions may already have been in process before you submitted your request.