Privacy Policy
Effective as of 17th June 2024
Overview
This privacy notice explains what you can expect STEMBricks.co.uk to do with your personal information. STEMBricks.co.uk is a trading name of Getech Limited, which is registered under the Data Protection Act with the Information Commissioner’s Office (ICO) under registration reference Z7161654.
Contact Details
- Name: Ian Sharman
- Address: Solutions Centre, Knightsdale Road,
- Ipswich, Suffolk, IP1 4JQ.
- Phone Number: 01473 243 470
- Email: DPO@getech.co.uk
Scope
STEMBricks.co.uk retains certain information about its employees, customers and other users to allow it to meet its contractual and legal obligations, manage customer accounts, provide goods and services, and to update its services and marketing. To be compliant with UK GDPR, information is collected lawfully and used fairly, stored securely and not disclosed to any other person unlawfully. To achieve this, STEMBricks.co.uk complies fully with the Data Protection Act 2018 and adheres to the data protection principles outlined therein; these principles require that all data is:
- Fairly and lawfully processed;
- Processed for a lawful purpose;
- Adequate, relevant and not excessive;
- Accurate and up to date;
- Held for no longer than is absolutely essential;
- Processed in accordance with the rights of the data subject;
- Protected in an appropriate and secure manner; and
- Not transferred to any other country or territory without adequate protection and explicit consent.
STEMBricks.co.uk collects or uses the following information to provide goods and services, including delivery:
- Name(s) and contact details;
- Address(es);
- Purchase or account history;
- Payment details (including bank or card information for transfers and direct debits);
- Credit reference information;
- Health and safety information;
- Account information;
- Website user information (including user journeys and cookie tracking); and/or
- Information relating to compliments or complaints.
STEMBricks.co.uk collects or uses the following information for the operation of customer accounts and guarantees:
- Name(s) and contact details;
- Address(es);
- Purchase or account history;
- Payment details (including bank or card information for transfers and direct debits);
- Account information (including registration details);
- Information used for security purposes; and/or
- Marketing preferences.
STEMBricks.co.uk collects or uses the following information for service updates or marketing purposes:
- Name(s) and contact details;
- Address(es);
- Marketing preferences;
- Location data;
- Purchase or viewing history;
- Website and app user journey information; and/or
- Records of consent (where appropriate).
STEMBricks.co.uk collects or uses the following information to comply with legal requirements:
- Name(s);
- Contact information;
- Financial transaction information; and/or
- Health and safety information.
Lawful Bases
STEMBricks.co.uk uses the following lawful bases for collecting or using personal information to provide goods and services:
- Consent;
- Contract;
- Legitimate interest(s);
- Order fulfilment: Processing customer data to deliver products and services; and
- Customer support: Addressing inquiries and resolving issues.
STEMBricks.co.uk uses the following lawful bases for collecting or using personal information for the operation of customer accounts and guarantees:
- Consent;
- Contract;
- Legal obligation;
- Legitimate interest(s);
- Fraud prevention: Protecting STEMBricks.co.uk customers and business from fraudulent activity; and
- Customer support: Addressing inquiries and resolving issues.
STEMBricks.co.uk uses the following lawful bases for collecting or using personal information for service updates or marketing purposes:
- Consent;
- Contract;
- Legitimate interest(s);
- Marketing: Sending promotional materials to interested parties (with option to opt-out freely); and
- Website improvement: Analysing website usage to enhance user experience.
STEMBricks.co.uk uses the following lawful bases for collecting or using personal information for complying with legal requirements:
- Consent;
- Contract;
- Legal obligation;
- Legitimate interest(s);
- Customer support: Addressing inquiries and resolving issues; and
- Fraud prevention: Protecting STEMBricks.co.uk customers and business from fraudulent activity.
Sources of Personal Information
STEMBricks.co.uk collects personal information from the following sources:
- People directly;
- Schools, colleges, universities or other education organisations;
- Councils and other public sector organisations; and
- Publicly available sources of information.
Information Retention
Your information is securely stored. STEMBricks.co.uk retains basic personal information for 92 days after the point of sale. All personal data relating to financial information may be retained for an extended period to allow STEMBricks.co.uk to folly comply with the legal requirements of government agencies such as HMRC.
Sharing Personal Information
STEMBricks.co.uk does not share personal information with any third party without lawful and justifiable cause. Information may be shared with select data processors for the purposes outlined in this privacy notice:
- Couriers;
- Insurance companies;
- Organisations we need to share information with for safeguarding reasons;
- Financial or fraud investigation authorities;
- Relevant regulatory authorities;
- External auditors or inspectors;
- Warranty and guarantee providers;
- Organisations we’re legally obliged to share personal information with;
- Publicly on our website, social media or other marketing and information media (where appropriate); and/or
- Debt collection agencies.
STEMBricks.co.uk does not share personal information outside of the UK; however, where necessary STEMBricks.co.uk and data processors may be required to share personal information outside of the UK in order to comply with legal and contractual obligations when providing goods and/or services to customers and end users. When doing so, STEMBricks.co.uk and data processors will fully comply with the requirements of the UK GDPR at all times, ensuring that appropriate safeguards are in place.
Your data protection rights
Further below, we describe the privacy rights that may be available to you based on where you are located. We will respond to requests we receive from individuals wishing to exercise their privacy rights in accordance with applicable privacy laws. We may deny certain requests, or fulfil a request only in part, based on our legal rights and obligations.
You will not be discriminated against for exercising your privacy rights. STEMBricks.co.uk will not deny you access to any product(s) or service(s), nor alter prices, in response to you exercising your privacy rights.
You can request to exercise your privacy rights by any of the following methods:
- Sending an email to DPO@getech.co.uk; and/or
- Calling 01473 240 470.
We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
Under data protection law, you have rights including:
- Your right of access: You have the right to ask STEMBricks.co.uk for copies of your personal information.
- Your right to rectification: You have the right to ask STEMBricks.co.uk to rectify personal information you think is inaccurate. You also have the right to ask STEMBricks.co.uk to complete information you think is incomplete.
- Your right to erasure: You have the right to ask STEMBricks.co.uk to erase your personal information in certain circumstances.
- Your right to restriction of processing: You have the right to ask STEMBricks.co.uk to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability: You have the right to ask that STEMBricks.co.uk transfers the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not usually required to pay any charge for exercising your rights. If you make a request, STEMBricks.co.uk has one (1) month to respond to you.
How to complain
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF.
Helpline number: 0303 123 1113
ICO website: www.ICO.org.uk/make-a-complaint
