Global Coir Products Ltd. - Trading nam GCP Euro.

About this Policy

This privacy policy and general privacy notice applies to Global coir Products Ltd. We at Ltd Global coir Products Ltd your privacy seriously, and this policy and notice has been drafted in accordance with the requirements of the General Data Protection Regulations (“GDPR”), with the support of the legal team at GCP Legal support team. 

This privacy notice explains how we look after your personal data (in all situations where we collect your data), sets out your privacy rights and also explains how the law, and our approach to privacy and personal data, protects you.

This privacy notice supplements any other privacy notices that we may provide to you at the point that we collect data from you and should be read in conjunction with those notices.

Our status and details

For the purpose of the GDPR, we are the data controller and any enquiry regarding the collection or processing of your data should be addressed to our [Data Protection Officer OR Privacy Manager] using the contact details below:

Name or title: Asanka Balasuriya 

Email address: hello@gcpeuro.com

Postal address: Global Coir Products Ltd, 10 Woolwich Road. London. SE10 0JU. UK

By using this Website, you consent to this policy. We are registered with the Information Commissioner’s Office for this purpose.

Information we collect

We will collect, process and store personal data only if it is directly provided to us by you. You may do this in your capacity as the user of this Website, by enquiring in relation to our goods or services, becoming a customer or supplier, or potential supplier.

Personal information covers any information which relates to you as an identifiable person. Below are examples of the type of data that this may include:

(a) Identity Data including forenames, last name, maiden name, date of birth, gender, marital status, and username or similar identifier.

(b) Contact Data may include invoicing; purchase order; home or work address, email address and telephone numbers, personal or job title and position.

(c) Financial Data may include bank account and payment card details.

(d) Special Category Data for example health or medical data, details about your race, religion, sex and political opinions.

(e) Transaction Data may include payments made for products and services you have purchased from us, or in relation to payments that we have made to you.

(f) Technical Data may include internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices used to access this Website.

(g) Profile and Usage Data may include enquiries submitted by you, purchases information, feedback and survey responses, and how you use our website, products and services.

(h) Marketing Data may include details of any preference that you have advised us of in relation to marketing communications from us.

We may also collect non-personal data such as aggregated data, which is data that may be obtained from your personal data, but which does not directly or indirectly identify you. This may include usage data detailing how you use our Website and the features and areas that you have interacted with.

Collection of Personal Data

We employ various methods to collect personal data, which may include:

(a) Direct interactions with individuals, such as in person, by post, telephone, email, or other means. For instance, you may provide us with your Identity, Contact, and Financial Information through these channels.

(b) Automated technologies or interactions with our website, utilizing the web inquiry form or the shopping cart feature. In this manner, you may also furnish us with your Identity, Contact, and Financial Information.

(c) Information obtained from third parties or publicly accessible sources, wherein third parties may assist in the processing of Identity, Contact, and Financial data.

Data Accuracy

It is imperative that the personal data we maintain about you is accurate and current. Should your information change, we kindly request that you notify us to ensure our records are updated accordingly.

Use of Your Information

We may hold and process the personal data you provide in accordance with the General Data Protection Regulation (GDPR).

The information we collect and store regarding you is primarily utilized for the following purposes:

(a) To facilitate the provision of our goods or services to you, to communicate effectively, and to fulfill our contractual obligations. This includes Identity, Contact, Financial, and Transactional data.

(b) To inform you of any changes to our business, such as enhancements to our Website or modifications to services/products that may impact our service or relationship with you. This may encompass Identity and Contact data.

(c) For existing customers, we may reach out with information regarding goods and services similar to those previously purchased. This may include Identity and Contact data.

(d) With your consent, to provide information concerning products or services from other parties that may be of interest to you. This may involve Identity, Contact, and Marketing data.

(e) With your consent, to deliver our e-newsletters. This may include Identity and Contact data.

(f) To comply with legal obligations, which may involve Identity, Contact, and Transactional data.

(g) Where it is necessary for our legitimate interests (or those of a third party) and where your interests and fundamental rights do not outweigh those interests. This may include all categories of data.

When we collect data for marketing purposes, we will always seek your consent at the time of data collection.

We will obtain your consent prior to sharing your personal data with any third party for their marketing purposes. This may enable relevant third parties to inform you about products or services that may be of interest.

Your personal data will only be utilized for purposes other than those for which it was originally obtained if we determine that we possess a legitimate interest in doing so.

Disclosure of Your Information

There are several circumstances under which we may disclose your data to third parties, including:

(a) Regulatory bodies. We may disclose your data to regulatory authorities to comply with legal requirements, assist in fraud prevention, and mitigate credit risk. This may include Identity, Contact, and Transactional data.

(b) Our suppliers. We may disclose your data to third parties involved in the fulfillment of our services to you. This may encompass Identity, Contact, and Transactional data.

(c) Third-party marketing. With your consent, we may share your data with selected third parties who may contact you regarding their products or services of potential interest. This may include Identity, Contact, and Marketing data.

(d) Business transactions. We may disclose your personal data outside our organization in the event of the sale or acquisition of any business or assets, wherein we may disclose your personal data to prospective sellers or buyers. If Global Coir Products Ltd. is acquired by a third party, personal data held about customers will be among the assets transferred, ensuring that confidentiality is upheld and that this privacy policy remains in effect.

Please note that we do not disclose information about identifiable individuals to advertisers; however, we may provide aggregated data about our website visitors and customers.

If you prefer that we refrain from sharing your data with third parties, you will have the opportunity to withhold your consent upon providing your details in the data collection form, or you may contact us at the address provided above, or via email at hello@gcpeuro.com at any time.

Controlling the Use of Your Data

Where we rely on consent as the legal basis for processing your data, you may revoke or modify that consent at any time.

If you wish to prevent us from using your data or wish to alter the consent previously provided, please contact us at the address provided above or via email at hello@gcpeuro.com at any time.

Data Storage and Transfer

As part of the services we offer, including through our website, the information you provide may be transferred to and stored in countries outside the European Economic Area (EEA), as we utilize remote website server hosts located outside the EEA. Additionally, your data may be processed by personnel operating outside the EEA who are employed by one of our suppliers, such as our website server host or payment processing provider.

A transfer of your personal data may occur if any of our servers are situated in a country outside the EEA or if one of our service providers is located outside the EEA.

If you use our services while outside the EEA, your personal data may be transferred outside the EEA to provide these services.

In cases where we transfer or store your personal data outside the EEA, we will take measures to ensure that your privacy rights are upheld as outlined in this privacy policy. If we engage suppliers based in the US, we may transfer data to them if they are part of the Privacy Shield framework, which mandates a level of protection for personal data shared between the EEA and the US.

Security

The transmission of information via the Internet or email is not entirely secure. While we endeavor to protect your personal data, we cannot guarantee the security of data transmitted to our site; such transmission is at your own risk.

We have implemented security measures to safeguard your data against accidental loss or disclosure. Upon receiving your personal data, we will employ stringent procedures and security features to mitigate unauthorized access.

If you have been provided with (or have chosen) a password to access certain sections of our site, you are responsible for maintaining the confidentiality of this password. We recommend selecting a password that is not easily guessed.

In the event of a data breach, we will notify the Information Commissioner’s Office (ICO) and you if the breach poses a likelihood of loss or damage to you.

Data Retention

The duration for which we retain and store data depends on the purpose for which it was collected. We will retain data only as long as necessary to fulfill that purpose or to satisfy legal requirements.

It is a legal obligation to retain certain data about our customers and suppliers for a minimum of six years, including Contact, Identity, Financial, and Transactional data.

For those who have requested marketing materials, we will retain your data until such time as consent is withdrawn by you.

Use of Cookies

Our website utilizes cookies. We employ cookies to collect information about your computer for our services and to provide statistical data regarding the use of our website. Such information will not personally identify you; it constitutes statistical data about our visitors and their utilization of our site. This statistical data does not reveal any personal details about you.

We may also collect information about your general Internet usage through the use of cookie files. Where applicable, these cookies are automatically downloaded to your computer. The cookie file is stored on your computer’s hard drive, as cookies contain data that is transferred to your computer’s hard drive. Cookies assist us in enhancing our website and the services we provide.

All computers possess the capability to decline cookies. This can be achieved by activating the setting on your browser that allows you to decline cookies. Please be aware that declining cookies may prevent you from accessing certain parts of our website. Our advertisers may also employ cookies, over which we have no control, which would be downloaded upon clicking advertisements on our site.

Your Rights

The GDPR grants you various rights concerning the personal data we collect. You have the right to:

(a) Access your personal data. This right, known as the ‘data subject access request,’ enables you to obtain a copy of the personal data we hold about you. There is no fee for accessing your personal data unless we can substantiate that the request is repetitive or excessive. We will respond to all legitimate data access requests within one month, although we may need to obtain additional information from you to confirm your identity and the legitimacy of the request.

(b) Request updates to your personal data. This allows you to correct any incomplete or inaccurate data.

(c) Request the erasure of your personal data. This grants you the right to ask us to delete personal data where there is no valid reason for us to continue retaining and processing it. However, we may not always be able to delete the data, such as in instances of an ongoing contractual relationship or legal obligations to retain the data.

(d) Object to the processing of your personal data where we rely on consent or our legitimate interests (or those of a third party) as the justification for processing the data.

(e) Request a restriction on the processing of your personal data. This enables you to ask us to modify how we process your personal data. For instance, you may wish to adjust the basis on which we contact you.

(f) Request the transfer of your personal data to you or to a third party. We will provide your personal data in a structured, machine-readable format to you or to a designated third party.

(g) Withdraw consent. If we are relying on your consent to process your personal data, you may withdraw that consent at any time. If you withdraw your consent, we may be unable to provide certain products or services. We will inform you of this possibility at the time you withdraw your consent.

You may exercise these rights at any time by contacting us at the address provided above or via email at hello@gcpeuro.com.

Third-Party Links

Our website may contain links to third-party websites. If you click on a link to a third-party site and visit that site, you may allow that site to collect and share certain data about you. These websites should have their own privacy policies, which you are encouraged to review. We do not accept any responsibility or liability for their policies, as we have no control over their content.

Complaints

If you wish to lodge a complaint regarding our use of your personal data, you may contact the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

We welcome the opportunity to discuss your concerns before you contact the ICO, to explore potential resolutions to the issue.

Changes to This Policy

We may update this policy to reflect changes to our website and customer feedback. We encourage you to regularly review this policy to remain informed about how we are protecting your personal data.

We welcome any inquiries, comments, or requests you may have regarding this Privacy Policy. Please feel free to contact us.

Version: December 2024