The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
GDPR regulates the processing of information relating to you and grants you various rights in relation to your personal data.
Rapid Electronics Limited is committed to ensuring that your privacy is protected and that we comply with the obligations of GDPR.
The information I collect and how I use it
When you register on my website at www.markcparanormal.co.uk or contact me by phone I may collect information about you and your organisation such as company name, address, e-mail address and phone number.
I gather this information to allow me to process your registration and efficiently administer transactions and deliveries, as well as using it to develop and improve my services.
I may use aggregated information for the purposes of tracking the usage of my services and to help me develop and improve the website and such services. I may pass this information to third parties as described within this document. The aggregated information and statistics will not however include details that can be used to identify you.
I will only send marketing material or advertise the products and services of the company by email to subscribers whose contact details the company has obtained either during a transaction or registration. All subscribers will be offered a means of opting out of such communications at the time their details were initially collected and each subsequent communication.
What information is being collected?
- Order related data:- To process your order efficiently I need information about you and your organisation such as company name, address, e-mail address and phone number.
What are cookies?
What do cookies do?
I use a number of different cookies on my website. Cookies can do a number of things: for example, letting you navigate between pages effectively, storing preferences and generally improving the experience of the website.
Cookies are essential for my website because without them I would not be able to process orders. As a customer you would find it extremely frustrating, if not impossible, to use the website. You would appear as a new customer every time you navigated to a different web page. You would also be logged out on every web page.
Examples of essential cookies I use on the site include:
- Saving basket contents as you navigate throughout the website and checkout process
- Remembering your account log in details so you can access your account information easily
- Purchasing preferences such as VAT and currency selection
- Remembering what type of customer you are – eg. new, regular, affilliate
- Recording how my customers use the website, such as web page visits, length of time on site, products purchased. I use this information to help me improve your experience on the website to make your purchasing easier
Are cookies safe?
Yes, cookies are 100% safe. Cookies do not harm your computer, they do not contain any information that could be used by others to identify you personally and they do not contain any confidential information, such as your email address or payment details.
Different types of cookies on Rapidonline
I have categorised the cookies into four different types:
1. Strictly Necessary Cookies
These cookies are essential to enable you to move around my website and use its features, such as adding products to your basket, or logging into your account securely. Without these cookies, my website cannot work properly.
2. Functionality Cookies
These cookies allow me to remember the choices you make and your personalised features such as what currency you choose to view the site in, your VAT preferences, and your login and password if you choose to save them.
3. Performance Cookies
These cookies collect information about how you use my website, for instance, which pages you go to most often and if you get error messages from those pages. I only use these cookies to improve how my website works.
4. Advertising Cookies
Advertising & Tracking advertising cookies are used to work out what advertising might be most relevant to you based on the areas you look at on my website.
Third Party Cookies
Some cookies will be created on the website as a result of the services provided by third party organisations I work with. For example, I use external analytics services and these suppliers may set cookies on my behalf in order to report back to us. I also embed videos or other content from sites such as YouTube and these sites may set their own cookies.
If you do not know what cookies are, or how to control or delete them, then we recommend you visit http://www.aboutcookies.org for detailed guidance
From 26 May 2012 website owners in the UK became required by law to inform their visitors of the cookies they use on their site and what purpose they have. They must also provide users with the necessary information and guidance in order to disable cookies.
Purposes of Data Processing
Data Processing either by markcparanormal.co.uk or defined contracted third parties are limited to the following:
- Using customers name and address to complete business transactions including invoicing, shipment or other order or other related obligations.
- Using cookies for web enhancement, remarketing and refining google adwords.
- Using customers names, phone numbers or e-mail addresses within a defined marketing campaign or sales activity which will be limited by the Legitimate Interest Assessment and in addition individuals consent settings or outcomes from exercising your rights.
- Using customers and supplier’s transactional data for internal performance reporting.
Categories of Personal Data
Processing of personal data is limited to customer, and supplier data.
I do not hold or process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership and comply with the restrictions regarding the processing of genetic data, biometric data for uniquely identifying a natural person and data concerning health or person's sex life or sexual orientation.
I do not hold or process personal data relating to criminal convictions and offences or related security measures.
Lawful Basis for Processing Personal Data
All processing of personal data is lawful and fair. I ensure transparency with customers and suppliers regarding how personal data concerning them is collected, used, or otherwise processed and to what extent the personal data will be processed.
I ensure all information and communication relating to the processing of personal data is easily accessible, easy to understand, and delivered with clear and plain language.
The lawful basis clauses applicable to personal data I hold, or process are limited to
You have given clear consent to process personal data for a specific purpose.
The processing is necessary to comply with the law.
The processing is necessary for my legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests, ie consent is withdrawn.
The following table details data or data processing activities, the group of persons whose data is used and the lawful basis I apply.
Type of Data or Use
Online Order Transaction
E-mail Marketing/News Letter
Customer Delivery Data
I limit personal data collected to what is necessary for the purposes for which they are processed. Personal data is held to ensure contractual obligations are met or to meet legal requirements for the keeping of records.
I apply personal data retention rules and annually review them in a specific GDPR audit process.
Every reasonable step is taken to ensure that personal data that is inaccurate is rectified or deleted. Personal data is processed in a manner that ensures appropriate security and confidentiality of the personal data, including preventing unauthorised access to or use of personal data and the equipment used for the processing.
Legitimate Interest Assessment
markcparaormal.co.uk consider that business customers with past or ongoing contracts with specific criteria achieved can be defined as legitimate interests.
I ensure legitimate interests are the most appropriate basis though a Purpose Test. I check that the processing is necessary through a Necessity Test and complete a Balancing Test to be confident that an individual’s potential interests do not override those legitimate interests.
I apply additional restriction measures to reduce a potential risk of the application of legitimate interest assessment by adding requirements for consent regarding potential consumer customers or sole traders through identifying typical email service providers.
Data processing by third parties
This section will explain who I share your data with and why it is being processed.
- I will share your data with our relevant partners to ensure your transaction can be completed effectively. The table below details the type of partner and reason for processing.
Nature of the data use
We use third party couriers to deliver your order.
I partner with a limited number of payment providers to provide you with a range of ways to pay.
I sell via a limited number of platforms that will share your data with us to complete an order you have made.
My Email provider will process all emails that come to markcparanormal.co.uk or leave.
.Emails are passed through a filter by a service provider for protection against malware and for PCI compliance.
Web Hosting, Payment providers, Review, Survey will need cookies and customer data to work.
Cookies data usage
This section explains how cookies are being used by markcparanormal.co.uk and my chosen third-party service providers. Cookie data will only be used by the organisation collecting it and will not be shared.
- markcparanormal.co.uk use several cookies without which my site wouldn’t be able to function and that enable you to navigate around the website and use major features.
I use a third-party:
- to increase the performance of the website, cookies will track visits and conversions on the website.
- to send my abandoned basket emails, cookies are used to deliver the basket data to ensure that the emails are relevant and delivered.
- for affiliate tracking services, cookies let me know when a visitor is referred from a third-party website and makes a purchase.
- to assist with targeted advertising, cookies are used to deliver adverts that are relevant to you and your interests once you have left my site and are displayed on a third-party advertising network.
- to assist with targeted advertising on external websites, cookies will track visits & conversions on the website from online advertising.
- cookie to allow my analytics supplier to provide statistics and information on how my website is used, e.g. which pages are visited, so that I can understand what interests my users, measure effectiveness of campaigns and try to improve how the website works
Right to be informed
This Privacy Statement sets out clear principles of when, how and why I collect data. At the point of personal data collection, I explicitly detail the personal data required and how it will be used. If I change how data is being processed or unrestricted the use of personal data, I will communicate this change.
The right to object will be clearly communicated separately to the privacy statement on all electronic customer communications.
Right of access
You have the right to request personal information held and details regarding how it is being processed and who by.
On request either by phone or in writing I provide free information regarding personal data held within 28 days of the request if successful verification of identity has been complete.
The information I provide will be in electronic format, contain the personal data I hold, when and how it was obtained, names of third parties who have processed the data and our statement of intent.
Right to rectification and data quality
On request either by phone or in writing I will update or improve the data I hold within 28 days of the request if successful verification of identity has been complete.
Personal data is reviewed periodically to check the quality of information improve the quality through planned activities.
Right to erasure including retention and disposal
Individuals have the right to be forgotten and can request the erasure of personal data if:
- it is no longer necessary for the purpose originally collected.
- if the individual withdraws consent for processing the data.
- when I am relying on legitimate interests as the basis for processing.
- if the individual objects to the processing of their data, and there is no overriding legitimate interest to continue this processing.
- when processing personal data for direct marketing purposes and the individual objects to the processing.
- if personal data must be erased to comply with a legal obligation.
On request in writing I will review the request and respond within 28 days of the request if successful verification of identity has been complete.
Personal data is stored as per the personal data retention and deletion policy.
Right to restrict processing
Individuals have a right to block or restrict the processing of their personal data.
On request in writing I will block or restrict the processing of personal data within 28 days of the request if successful verification of identity has been complete.
If necessary, I will continue to hold the personal data but restrict further processing.
Right to data portability
Individuals have the right to request their personal data to move it to another provider.
On request in writing I provide free information regarding personal data held within 28 days of the request if successful verification of identity has been complete.
Right to object
Individuals have a right to object to the processing of their personal data. All policies and procedures will be reviewed to resolve the objection and act.
On request in writing I will reply to an objection regarding the processing of personal data within 28 days of the request if successful verification of identity has been complete.
Individuals have an absolute right to object to any processing undertaken for the purposes of direct marketing and all processing for this purpose will stop immediately.
Rights related to automated decision making including profiling
I understand an individual’s rights and do not make decisions regarding individuals through automated decision making.
Links to other websites
Unsubscribing from promotional emails
Customers who wish to stop receiving marketing email communications can do so quickly and easily. All marketing emails include an 'Unsubscribe' link. Alternatively, an email with the subject line of 'Unsubscribe' can be sent to firstname.lastname@example.org. Your email address will be removed from my mailing lists used for marketing purposes. Please note that emails relating to the status of orders, transactions and updates will still be sent.
Payment card information
markcparanormal.co.uk conforms to PCI (Payment Card Industry) Legislation regarding the protection of cardholder’s data and personal information. All transactions take place within a secure area of the website. Personal payment card information is not published in any form on the website and is not accessible.
How to contact me
3 Kane Close
You have the right to appeal to the regulatory authority, the Information Commissioner’s Office.
The UK’s independent authority set up to uphold information rights in the public interest, The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.