HAMMER SERVICES LTD trading as OLD MOTOR HOUSE

DATA PROTECTION PRIVACY POLICY

WHO ARE WE?

In this document 'we', 'us' and 'OMH' refer to Hammer Services Ltd trading as Old Motor House, registered company number 02134032. We can be contacted at

Old Motor House
Town Foot
Rothbury
Northumberland
NE65 7SN

WHAT PERSONAL DATA DO WE PROCESS?

  1. Contact details of customers and suppliers.
  2. CCTV records of activity on the company premises.
  3. Information on employees sufficient to fulfil our legal obligations.
  4. Accounting information sufficient to fulfil our legal obligations.

WHAT DO WE DO WITH THE DATA?

  1. We use data to enable us to complete contracts, eg storage or repair of vehicles, purchase of parts or services.
  2. We use CCTV data to enhance security for our staff, customers and visitors.
  3. We do not share any data with any other organisation, unless required by law to do so.
  4. We only process data to enable us to fulfil contracts or abide by our legal requirements.

WHO PROCESSES PERSONAL DATA?

  1. Garage service staff have access to enable preparation of invoices for customers.
  2. Company Directors maintain records and fulfil legal obligations eg record keeping for HMRC.

HOW WE STORE DATA AND KEEP IT SECURE

  1. We record some customer information on paper records eg signed storage contracts, copy invoices. These are filed in an office locked when not occupied.
  2. We use a reputable accounting package [Sage] for all accounting and payroll records. Data backups are stored by Sage in accordance with their procedures, and local backups are stored in an office locked when not occupied, and offsite in the home of the Directors.
  3. All computers are protected by appropriate up to date internet security and firewalls are always enabled. We use passwords for access to all IT functions.
  4. We comply with PCI DSS requirements for use of credit/debit cards – we do not keep records of card numbers in any form.

YOUR RIGHTS

You have a right to ask us to stop processing your personal data, and if it’s not necessary for the purpose you provided it to us for we will do so. You have a right to ask for a copy of the information we hold about you. If there are any discrepancies in the information we provide, please let us know and we will correct them. If you want to access your information, send a description of the information you want to see and proof of your identity by post to the Directors at the address above. We do not accept these requests by email so we can ensure that we only provide personal data to the right person. We will respond within one month. You have a right to complain to the Information Commissioner’s Office if you think there is a problem with the way we are handling your data.

UPDATES

We review our privacy policy from time to time and may make changes. The last review was in May 2018.