Introduction
Bott Limited respects your privacy and is committed to protecting your personal data. We understand that individuals value their privacy and data. This privacy policy will inform you as to how we manage and look after your personal data. This policy will inform you of your privacy rights and how the law protects you.
It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.
We keep our privacy policy under regular review.
This privacy policy will inform you as to how we look after your personal data when you visit our websites:
Please note: This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
Contents
1. Who we are
Bott Limited is the controller and responsible for your personal data (collectively referred to as "Bott", "we", "us" or "our" in this privacy policy). Bott is part of a corporate group of companies ("Group"), including Bott Internationale Holding Gmbh.
Bott Limited,Bude-Stratton Business Park,
Bude, Cornwall, EX23 8LY
If you have any questions or comments about our privacy policy or privacy practices, including any requests to exercise your legal rights detailed in Section 9 ‘Your Legal Rights’, these can be sent to us using any of the contact methods listed in Section 10 ‘Updates and Contact Information’ so our privacy team can deal with them.
2. What personal data do we collect?
We will only ever collect your data when we have a reason to do so and only where that reason is permitted under data protection law.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data: first name, last name, username or similar identifier, title, date of birth.
- Contact Data: home address, email address, telephone number(s).
- Transaction Data: details about payments to and from you and other details of products and services purchased.
- Technical Data: internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: username and password, purchases or orders, interests, preferences, feedback, survey responses.
- Usage Data: information about how you use our website, products, and services.
- Marketing and Communications Data: preferences in receiving marketing from us and our third parties and communication preferences.
- Vehicle Data: registration number(s), VIN number(s), and vehicle info (make, model, variant).
Data we do not collect
- We do not knowingly collect data relating to children.
- We do not collect special categories of personal data (race, ethnicity, beliefs, sexual orientation, health, etc.), or criminal convictions/offenses.
Aggregated Data
We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data, but will not directly or indirectly reveal your identity. If combined with personal data, it is treated as such and will be used accordingly.
If you fail to provide personal data
Where we need to collect data by law, or under the terms of a contract and you fail to provide it, we may not be able to perform the contract (for example, to provide you with goods), and may have to cancel the contract, but will notify you at the time.
3. How do we collect your personal data?
Direct interactions
You may give us Identity, Contact, and Vehicle Data by filling in forms or by corresponding by post, phone, email, social media or otherwise. This includes when you:
- Request a quotation, purchase, or make an enquiry
- Create an account
- Request marketing communication
- Complete a survey
- Enter a competition
- Give us feedback or contact us
Automated technologies or interactions
As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions and patterns via cookies, server logs and other similar technologies. We may also receive Technical Data if you visit other websites employing our cookies.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable cookies some parts of this website may become inaccessible or not function properly. For more about cookies, see our Cookie Policy.
Third parties or publicly available sources
- Technical Data from analytics providers outside the EU
- Technical and Contact Data from lead generation providers
- Identity, Contact, and Transaction Data from social media platforms
- Contact and Transaction Data from providers of technical, payment and logistical services
4. How do we use your personal data?
We will only use your personal data when the law allows us to. The types of lawful basis for processing personal data that we rely on are:
- Performance of Contract: Where necessary to fulfill a contract (e.g., sales contract).
- Comply with a legal or regulatory obligation: Where required by law.
- Consent: Freely given, specific, informed agreement (can be withdrawn at any time).
- Legitimate Interest: Our business interest to provide a secure, optimal, and relevant service; always ensuring no unjust impact on your rights.
Generally, we do not rely on consent as a legal basis for processing your personal data, although we will get your consent before sending third party direct marketing via email or text. You have the right to withdraw consent to marketing at any time.
Purposes for which we will use your personal data
We have set out below a description of all the ways we plan to use your personal data, and the legal bases and interests we rely on. The following applies to Bott Limited and our Group as appropriate.
| Purpose/Activity | Type of Data | Lawful basis incl. legitimate interest |
|---|---|---|
| To register you as a new customer | (a) Identity (b) Contact (c) Vehicle |
(a) Performance of contract (b) Legitimate interest (to recover debts) |
| To respond to and record enquiries, incl. quotations | (a) Identity (b) Contact (c) Transaction (d) Vehicle |
(a) Legitimate interest (b) Performance of contract (incl. steps before contract) |
| To process and deliver your orders | (a) Identity (b) Contact (c) Transaction (d) Marketing and Communications (e) Vehicle |
(a) Performance of contract (b) Legitimate interest |
| To manage our relationship, including: - Notifying about changes to our terms/policy - Asking for review/survey - Recording our interactions |
(a) Identity (b) Contact (c) Profile (d) Marketing and Communications (e) Transaction (f) Vehicle |
(a) Performance of contract (b) Legal obligation (c) Legitimate interest (customer relationship & service improvement) |
| To enable you to take part in a prize draw/competition/survey | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Vehicle |
(a) Performance of contract (b) Legitimate interest (to study, develop and grow business) |
| To administer and protect our business and this website (including troubleshooting, data analysis, testing, maintenance, support, reporting, hosting) | (a) Identity (b) Contact (c) Technical |
(a) Legitimate interest (business operation, fraud prevention, reorganisation) (b) Legal obligation |
| To deliver relevant website content & adverts and measure effectiveness | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical |
Legitimate interest (to develop service and inform marketing strategy) |
| To monitor security of our sites via CCTV recording | (a) Identity (b) Vehicle |
Legitimate interest (site security) |
| To use data analytics to improve our website, products/services, marketing, customer relationships and experiences | (a) Technical (b) Usage |
Legitimate interest (business development, market insight) |
| To make suggestions/recommendations on goods/services | (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing & Communications (g) Vehicle |
Legitimate interest (to develop and grow our business) |
Marketing and promotional offers
We may use Identity, Contact, Vehicle, Technical, Usage and Profile Data to form a view on what may interest you. We strive to provide you with choice about personal data use, especially around marketing/advertising. We process your data for marketing only if you have requested information or purchased from us and have not opted out. The basis is legitimate interest to develop/market our services, or your explicit consent.
We will always get your express opt-in consent before sharing your personal data with any third party for marketing purposes.
We use Mailchimp for email marketing and analytics. You can opt out of marketing at any time by contacting us or using unsubscribe links.
6. Data security
We have implemented appropriate security to prevent your data from being lost, accessed, used, altered or disclosed without authorisation.
Access to your data is limited to employees, agents, contractors or third parties with a business need, who process data on our instructions and under confidentiality duties.
We have put in place procedures to deal with suspected personal data breaches and will notify you and regulators where legally required.
7. How long do we keep your personal data?
We retain your personal data only as long as necessary to fulfill the purposes collected, and to satisfy any legal, regulatory, tax, accounting or reporting requirements.
Sometimes, we may retain for longer if there's a complaint or potential for litigation.
Decisions on retention period consider the amount, nature and sensitivity of personal data, potential risk of harm from unauthorised disclosure, purposes for processing, and legal requirements.
Generally, customers' data will be kept for 7 years after a contract has ended, or longer if required for warranty. If we hold your data solely for marketing and you opt out, it will be deleted unless another lawful basis applies. If personal data is anonymised for research/statistics, it may be used indefinitely.
In some cases, you can request deletion (see Section 9 below for details).
8. International transfers
We may share your personal data within our Group, which may require transferring your data outside the UK. Some external third parties may process your data outside the UK.
Wherever transferred, your data is protected by:
- Transferring only to countries deemed to provide adequate protection by the Information Commissioner’s Office
- Using contracts approved in the UK to ensure data receives the same protection
Contact us if you want more information about data transfer mechanisms.
9. Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
- Request access to your personal data (data subject access request)
- Request correction of your data
- Request erasure of your data
- Object to processing where we rely on legitimate interests or for direct marketing
- Request restriction of processing
- Request data portability (transfer to you or a third party)
- Withdraw consent at any time (where applicable)
How to exercise your rights
- Contact us using details in Section 10.
- There is no fee unless your request is unfounded, repetitive or excessive.
- We may need to verify your identity and may request additional information.
- We aim to respond to all legitimate requests within one month; if it takes longer, we will inform you.
10. Updates and contact information
Changes to our privacy policy
We keep our privacy policy under regular review. Any future changes will be posted on this page and, where appropriate, notified by email.
Contact us
- Full name of legal entity: Bott Limited
- Email: privacy@bottltd.co.uk
- Telephone: 01288 355666
- Postal address:Bott Limited,
Bude-Stratton Business Park,
Bude, Cornwall, EX23 8LY
Information Commissioner
If, after contacting us, you are not happy with our handling of your data or want more information about your rights, you can contact the Information Commissioner’s Office, the UK's independent authority on data privacy at www.ico.org.uk.
Last update: 14/01/22