1. Introduction
The Source Wholesale Limited (“The Source”, “we”, “us”, “our”) of The Atrium, Curtis Road, Dorking, Surrey RH4 1XA United Kingdom are committed to the protection of the personal data we process in line with the data protection principles set out in the UK General Data Protection Regulation and EU General Data Protection Regulation (2016/679) (together the “GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
This privacy notice explains what personal data The Source collects from individuals who visit The Source website, contact us using our web forms, by email, phone or through one of our social channels; or other marketing communications (“you”, “your”). It also explains what information we collect automatically when you visit our website.
The Source Wholesale is the Controller for the purposes of the GDPR in instances where you make any form of enquiry with us, registered in the UK with the Information Commission under the Gift Universe Limited registration number ZA301456.
Our Data Protection Officer (“DPO”) is Evalian Limited, West Lodge, Leylands Business Park, Colden Common, Hants, SO21 1TH. Email – dpo@evalian.co.uk. Tel – 03330 500 111.
As an information-led business, we place great importance on ensuring the quality, confidentiality, integrity, and availability of the data we hold and in meeting our data protection obligations when processing personal data. The Source are also committed to protecting the security of your personal data. We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, use or disclosure.
We update this privacy notice from time to time in response to changes in applicable laws and regulations, to our processing practices, and to the products and services we offer. When changes are made, we will update the date at the top of this document. Please review this privacy notice periodically to check for updates.
2. What information do we process?
Information you provide to us
We process all information you give to us, either through our website (“our site”) or by corresponding with us by telephone, email or otherwise. This includes information you provide when you use our site, subscribe to a service, search for a product or service, use the social media functions linked to our site, or when you report a problem with our site.
Information processed following an enquiry or purchase
We process the following information:
- Full name
- Email address
- Telephone number
- Delivery address
- Billing address
We may use these details to contact you about your order or enquiry, if necessary.
We may also monitor or record telephone calls for training and quality purposes. Call recordings are retained in accordance with The Source Personal Data Retention Policy.
Cookies and Web Beacons
The Source uses cookies on our website and web beacons in some emails. Cookies are small text files and web beacons are small graphic images. They are downloaded to your device when you visit a website or receive certain emails, unless you have set your browser to reject them. We use cookies to remember your preferences, display content that is more relevant to you and improve your overall experience of our site.
For users who have consented to receiving marketing emails, we use web beacons to monitor the performance of campaigns and send you the most relevant special offers. A web beacon allows us to see when you have opened an email from us, provides information about the type of device you are using and from where you are viewing. This allows us so to better tailor marketing content to our users’ needs.
When you consent to receiving marketing emails from us, we collect the IP address of the device used, as well as the date and time of registration, which allows us to maintain an accurate register of when consent to marketing was provided.
3. Purposes and bases for processing your personal data
We may use your data for the following purposes and on the following lawful bases:
| Purpose | Lawful Bases for Processing |
|---|---|
| Responding to correspondence from you | It is our legitimate interest to respond to enquiries made via our website, by email, through our social channels or any other means |
| Sending you information such as The Source Wholesale news and information which may be of interest | When you agree to be contacted for marketing, we will rely on your consent, which may be withdrawn at any time by emailing sales@thesourcewholesale.co.uk |
| Maintaining and improving consistently high standards of customer care | It is our legitimate interest to monitor and record telephone calls in and out of our customer service centre to ensure compliance with company call-handling procedures and protocols |
| Business management, forecasting and statistical purposes | It is our legitimate interest to identify areas for managing current business relationships, develop new products and services, and for managing our business |
| Improving our website and the overall website visitor and user experience | It is our legitimate interest to allow analytics and search engine providers to help improve and optimise our website |
| Improving our website and the overall website visitor and user experience | We use cookies on our website with your consent |
4. Sharing your information
We will rarely share your personal data outside the United Kingdom (UK) or the European Economic Area (EEA). If it becomes necessary for the purposes of providing our services to you, we will only share it where appropriate safeguards are in place to ensure your personal data is protected to the same standard expected within the UK and EEA.
Our website includes links to our five social media platforms (Facebook, Twitter, Instagram, Pinterest and YouTube). Once you navigate away from our site via one of the links, the next site may collect your IP address and may set a cookie on your device. When you use one of these links, you are sharing information to another website or service and this privacy notice will no longer apply.
Please read the privacy notices provided by the particular service website you are directed to before posting any personal information using these links.
Please see the below list of key external providers with whom we share your data, the purpose of this sharing and where possible a link to their privacy policy or terms of service.
| Provider | Purpose of sharing | Privacy policy |
|---|---|---|
| With your consent, we share marketing and demographic information. This is necessary to optimise our marketing campaigns. | facebook.com/privacy/policy | |
| With your consent, we share marketing and demographic information. This is necessary to optimise our marketing campaigns. | twitter.com/en/privacy | |
| With your consent, we share marketing and demographic information. This is necessary to optimise our marketing campaigns. | privacycenter.instagram.com/policy/ | |
| YouTube | With your consent, we share marketing and demographic information. This is necessary to optimise our marketing campaigns. | youtube.com/static?gl=GB&template=terms |
| With your consent, we share marketing and demographic information. This is necessary to optimise our marketing campaigns. | policy.pinterest.com/en-gb/privacy-policy | |
| NUorder | Portal to process orders. | nuorder.com/privacypolicy/ |
5. Your data protection rights
There are certain fundamental rights that you have in respect of your Personal Data:
| Rights | Description |
|---|---|
| Right to be informed | Individuals have the right to be informed about the collection and use of their Personal Data. |
| Right of access | Individuals have the right to receive a copy of their Personal Data, and other supplementary information. |
| Right to rectification | Individuals have the right to have inaccurate Personal Data rectified or completed if it is incomplete. |
| Right to erasure | Individuals have the right to request their personal information to be erased, in certain circumstances. |
| Right to restrict processing | Individuals have the right to request the restriction or suppression of their Personal Data, in certain circumstances, in particular: if your data is not accurate; if your data has been used unlawfully but you do not want us to delete it; if your data is no longer needed, but you want us to keep it for use in legal claims; or if you have already asked us to stop using your data but you are waiting to receive confirmation from us as to whether we can comply with your request. |
| Right to data portability | Individuals have the right to obtain and reuse their Personal Data, in a machine-readable format, for their own purposes across different services, in certain circumstances. |
| Right to object | Individuals have the right to object to the processing of their Personal Data, in certain circumstances. Where we are using your Personal Data because it is in our legitimate interests to do so, you can object to us using it this way. Where we are using your Personal Data for direct marketing, including profiling for direct marketing purposes, you have an absolute right to ask us to stop doing so. |
| Rights with respect to automated decision-making and profiling | Individuals have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. |
In addition to the above, an individual also has the following rights:
| Rights | Description |
|---|---|
| Right to withdraw consent | Where we are using your Personal Data based on your consent, you can withdraw your consent at any time. |
| Right to register a complaint with the Controller | You have the right to raise a complaint about how we handle your personal information to us directly. |
| Right to lodge a complaint with a supervisory authority | You have the right to raise a complaint about how we handle your personal information with a relevant supervisory authority. |
Exercising your data protection rights
You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Raising a complaint with the relevant data protection supervisory authority
If you believe you have exhausted all possible avenues for resolving your data protection concerns with us, you may lodge a complaint in the UK with the Information Commission by calling their Helpline on 0303 123 1113.
If you are in the EU, a list of local Supervisory Authorities can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-mt
6. Data retention period
We will retain your personal data for as long as is necessary to provide you with our products and ongoing services and for a reasonable period thereafter, to enable us to meet our contractual and legal obligations and to deal with complaints and claims.
At the end of the retention period, your personal data will be securely deleted in accordance with The Source Personal Data Retention Policy.
7. Contact
You can contact The Source Wholesale in relation to data protection and this privacy notice by emailing sales@thesourcewholesale.co.uk
