Privacy + Cookies

We want you to know that when you use our organisation you can trust us with your information. We are determined to do nothing that would infringe your rights or undermine your trust. This Privacy Notice describes the information we collect about you, how it is used and shared, and your rights regarding it. 

Data Controller

We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that we hold and process. Our registered addresses and registration numbers are:
Acheson Holdings Ltd (ZA353259) – 127 Crievehill Road, Fivemiletown, Tyrone, BT75 0SY.
Acheson & Glover Ltd (Z6086480) – 127 Crievehill Road, Fivemiletown, County Tyrone, BT75 0SY.
Our Data Protection Lead (DPL) is Ethan Allen. Our Data Protection Lead can be contacted on 028 8952 1275.

Data Collection

All or the vast majority of the information that we hold about you is provided to us by yourself when you seek to use our services. We will tell you why we need the information and how we will use it.

Our Lawful Basis for processing your information

The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a Lawful Basis for doing so. The Lawful Bases identified in the GDPR are:

• Consent of the data subject
• Performance of a contract with the data subject or to take steps to enter into a contract
• Compliance with a legal obligation
• To protect the vital interests of a data subject or another person
• Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.

Examples of legitimate interests include:

• Where the data subject is a client or in the service of the controller;
• Transmission within a group of undertakings for internal administrative purposes;
• Processing necessary to ensure network and information security, including preventing unauthorised access;
• Processing for direct marketing purposes, or to prevent fraud; and
• Reporting possible criminal acts or threats to public security.

Our Lawful Basis is Consent, Legitimate interests and Public Interest. It may be necessary to process relevant Covid-19 Test and Trace information for the public interests in the combat of Covid-19.

Our Legitimate interests are :

• To maintain employment records
• To enable processing of payroll
• To capture appropriate information for Fair Employment monitoring
• To enable recruitment of employees
• To handle customer enquiries.

If we are processing special categories of data such as medical records, we are entitled by law to do so where it is necessary for the purposes of employment law and to support individuals with a particular disability or medical condition. We may also obtain your consent to process this type of data.”

We use your information to:

• Provide goods, services, deliveries, quotations, and information, for example, catalogues and newsletters;
• Process or support payments for goods and services;
• Conduct data analysis, testing, and research (including for product development), and to monitor and analyse usage and activity trends;
• Maintain the safety, security and integrity of our services;
• Direct your enquiries to the appropriate customer support staff;
• Investigate and address your concerns;
• Communicate with you about products, services, promotions, studies, surveys, news, updates and events;
• Process promotions/competitions, including prizes, and send you information about our services and those of our business partners;
• Investigate or address legal proceedings relating to your use of our services/products, or as otherwise allowed by applicable law;
• Make statutory returns as required.
• To comply with COVID-19 Test and Trace regulations.
• Maintain a safe and secure environment for vehicles & individuals.

We do not use automated decision-making in the processing of your personal data.

We use automated profiling on data subjects for marketing purposes only.  In doing so we ensure that the safeguards prescribed by the GDPR are fully in existence.

We collect and process both personal data and special categories of personal data as defined in the GDPR. This includes:

Customer/client data

• Name;
• Email;
• Phone number;
• Address;
• Payment or bank details;
• IP Addresses;
• Device Operating Systems.
• Vehicle Number Plate

Employee\Candidate Data

• Name;
• Email;
• Phone number;
• Address;
• Payment or bank details;
• Date of birth;
• Family & next-of-kin details;
• Employment History;
• Qualifications;
• Religion;
• Trade Union Membership;
• Biometrics;
• Health Details.
• Vehicle Number Plate

We may share your personal data with: