Compliance Statement

Mersey Timber Ltd T/A Mersey MDF Plas & Ply

GDPR Compliance Statement May 2018

Mersey Timber Ltd T/A Mersey MDF Plas & Ply are committed to ensuring the security and protection of the personal information that we hold and/or process & to providing a consistent and compliant approach to data protection.

We have a legal basis to hold and process personal data under Article 6 of the GDPR, our business falls primarily under 4 of the sub-sections

Article 6, section 1(a) – consent, customer or supplier has expressly given their consent to their data being processed by us.

Article 6, section 1(b) – contract – we have entered into a contract of sale/purchase with the customer or supplier and need their personal data to be able to fulfil that contract.

Article 6, section 1(c) – compliance – we have a legal responsibility to hold data, e.g. (but not limited to) sales invoices for VAT purposes or employee data to ensure compliance with minimum wage requirements.

Article 6, section 1(f) – legitimate interest – we need to hold and process personal data in order to run our business, this includes but is not limited to; storing account customer information, storing supplier information, holding quotations on file, storing emails for reference.

We have reviewed the information we keep, where it is kept and for how long.

We do not use data for marketing purposes and will not sell or pass it on to third party organisations unless the is a legitimate interest in our doing so.

More detailed information can be found in our Privacy Policy which is available on our website www.merseymdfplasandply.co.uk or upon request.