Expertise
March has been trusted by key UK industries for decades. We understand the challenges that business faces in terms of productivity, competition, cost control, safety, security and compliance.
MARCH® Ltd (Company Registration Number SC507737) registered at 4 Kilmartin Place, Tannochside Business Park, Uddingston, G71 5PH, is the leading provider of critical engineering services.
This document (our “privacy notice”) sets out information relating to how we use personal information relating to individuals we have dealings with, including customers, website users, service partners and suppliers. It also sets out information about what rights individuals have in relation to their personal information and various other matters required under data protection law.
In particular, this privacy notice provides information to individuals about how they can object to our use of their personal information, how they can withdraw any permissions they have given to us to enable us to process their personal information, and how they can make a complaint.
This privacy notice contains the following sections:
WHO DOES THIS PRIVACY NOTICE APPLY TO?
WHAT’S OUR APPROACH TO PRIVACY?
HOW WILL WE USE YOUR PERSONAL INFORMATION?
WHEN WILL WE USE YOUR PERSONAL INFORMATION FOR DIRECT MARKETING?
WHEN WILL WE SHARE YOUR PERSONAL INFORMATION WITH OTHERS?
HOW DO WE KEEP YOUR PERSONAL INFORMATION SECURE?
WHAT RIGHTS DO YOU HAVE UNDER DATA PROTECTION LAW?
WHEN AND HOW CAN YOU WITHDRAW YOUR CONSENT?
HOW CAN YOU GET IN TOUCH WITH US AND WHO IS OUR [DATA PROTECTION OFFICER]/[DATA PRIVACY MANAGER]?
HOW CAN YOU COMPLAIN ABOUT OUR USE OF YOUR PERSONAL INFORMATION?
HOW WILL WE NOTIFY YOU OF ANY CHANGES TO OUR PRIVACY NOTICE?
WHO DOES THIS PRIVACY NOTICE APPLY TO?
This privacy notice applies to:
• our customers and potential customers;
• individuals who use our website;
• individuals who subscribe to our newsletters or updates;
In the sections below, when referring to the individuals listed above, we use the terms “you” or “your”.
WHAT’S OUR APPROACH TO PRIVACY?
We take your privacy extremely seriously and want you to feel confident that your personal information is safe in our hands.
We will only use your personal information in accordance with data protection law applicable to England and Wales from time to time.
Under data protection law, when we use your personal information, we will be acting as a data controller. Essentially, this means that we will be making decisions about how we want to use your personal information and why.
Below, we summarise the main rules that apply to us under data protection law when we use your personal information:
HOW WILL WE USE YOUR PERSONAL INFORMATION?
How we will use your personal information, the legal bases we will rely upon, how long we will keep your personal information and other details will depend upon who you are and why we need your personal information in the first place.
In this section, we provide specific privacy information relating to the different categories of individuals that this privacy notice applies to.
OUR CUSTOMERS
What personal information we will use:
How we will obtain the personal information:
What purposes we will use the personal information for:
The legal bases for processing we rely upon:
How long we retain the personal information and why:
Consequences of not providing/permitting us to obtain personal information:
INDIVIDUALS WHO CONTACT US WITH ENQUIRIES
What personal information we will use:
How we will obtain the personal information:
What purposes we will use the personal information for:
The legal bases we rely upon:
How long we retain the personal information and why:
INDIVIDUALS WHO USE OUR WEBSITE
What personal information we will use:
How we will obtain the personal information:
Some of the information is obtained by us automatically whenever you use our website through our use of Google Analytics, cookies or similar technologies. Further information about the cookies we use and the purposes for which we use them can be found in our Cookies Policy
What purposes we will use the personal information for:
The above information is used by us to:
• track usage of our website;
• help us to continually improve our website by personalising our website and services for you and other customers.
Information collected through our use of cookies is used in the ways described in our Cookies Policy.
The legal grounds we rely upon
Our collection and use of the above information is based on our legitimate interests in ensuring that our website is user-friendly and appeals to our customers.
How long we retain the personal information and why:
We will not retain your personal information for longer than is necessary for the purpose we have identified above.
Consequences of not providing/permitting us to obtain personal information:
If you disable our Cookies, you will be unable to use certain parts of/functions on our website. Further information about this can be found in our Cookies Policy.
INDIVIDUALS WHO SUBSCRIBE TO OUR NEWSLETTERS OR UPDATES
What personal information we will use:
How we will obtain the personal information:
Provided by you when you subscribe to our newsletters or updates.
What purposes we will use the personal information for:
The legal grounds we rely upon:
How long we retain the personal information and why:
We will retain the personal information outlined above for as long as you remain subscribed to receive our newsletters and updates.
Consequences of not providing/permitting us to obtain personal information:
WHEN WILL WE USE YOUR PERSONAL INFORMATION FOR DIRECT MARKETING?
In addition to data protection law, if we use your personal information for direct marketing purposes, we may also be subject to additional rules that regulate direct marketing. The term “direct marketing” essentially means directing marketing material or advertising at a particular individual.
To ensure compliance with both data protection laws and the specific rules relating to direct marketing, we will only use your personal information to tell you about our latest offers or to inform you of products and services which we think may be of interest to you in the circumstances outlined below:
Direct marketing by telephone or post
We will only contact you in this way if you have given us your express consent to do so.
Direct marketing by email, text or other forms of electronic communication
We will only contact you in this way if:
• you have given us your express consent to do so; or
• you are an existing customer and we want to tell you about similar products or services that may be of interest to you and you have not opted out of receiving such communications.
Our legal bases for such processing under data protection law will either be your consent or reliance upon our legitimate interests in developing our business.
We will retain your personal information unless and until you inform us that you no longer wish to receive direct marketing information from us. You can ask us to stop sending direct marketing to you at any time by contacting us using the details set out here – email: communication@march-engineering.com
INFORMATION ABOUT HOW AND WHEN WE USE AUTOMATED DECISION MAKING
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We do not use automated decision-making and/or profiling.
WHEN WILL WE SHARE YOUR PERSONAL INFORMATION WITH OTHERS?
Sometimes, we will need to share your personal information with others. This section sets out details of who we will share your personal information with and why. It also tells you about our legal basis for doing so under data protection law and steps we will take to protect your personal information.
We will never sell your personal information on to third parties.
OUR SERVICE PARTNERS
Who are our service partners? Our service partners include:
• insurers, suppliers, affiliates, business partners and independent contractors.
• couriers and other suppliers of delivery services.
We haven’t included the names of our service partners in this privacy notice because their identities will change from time to time. However, if you would like further information about any of our current service providers, please contact us at info@march-engineering.com
Why we need to share your personal information with them:
We will share your information with these partners where is it necessary to run and manage our business and where it is necessary to enable us to perform our contracts with you.
The legal bases we rely upon when sharing your personal information:
The sharing of your personal information with suppliers and sub-contractors is necessary for the performance of our contract with you.
What precautions do we take?
We enter into contracts with our service providers which require them to put appropriate security measures in place and which restrict their use of your personal information.
MEMBERS OF OUR GROUP
Information about our Group
Why we need to share your personal information with our Group:
As part of our regular Group reporting activities;
In the context of a business reorganisation or group restructuring exercise; In connection with the maintenance and support of shared Group systems (for example, our data storage arrangements).
The legal bases we rely upon when sharing your personal information:
Sharing of personal data within our Group will either be based on our legitimate interests in ensuring that the Group functions efficiently or in connection with our legal obligations.
What precautions do we take?
Group members are required to take appropriate security measures to protect your personal information in line with our policies.
PROVIDERS OF INFORMATION TECHNOLOGY SERVICES
Who will we be sharing your personal information with?
Suppliers of information technology products and services such as email providers, IT providers and web developers
We haven’t included the names of our IT providers in this privacy notice because their identities will change from time to time.
Why we need to share your personal information with such providers:
We use suppliers of information technology products and services in connection with the supply, maintenance and/or improvement of our IT network and the creation, development hosting and maintenance of our website;
We use analytics and search engine providers to assist us to improve our website.
The legal bases we rely upon when sharing your personal information:
We rely upon our legitimate interests in ensuring that our business can function properly and efficiently and that our IT network is secure;
The sharing of your personal data with analytics and search engine providers is based on our legitimate interests in having an efficient and user-friendly website.
What precautions do we take?
We enter into contracts with our IT providers which require them to put appropriate security measures in place and which restrict their use of your personal information.
OTHER THIRD PARTIES
We may also need to share your personal information with others in the following circumstances:
If we sell, transfer or merge parts of our business or our assets
As we continue to develop our business we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. During any such process, we may need to disclose your personal information to other parties (such as potential purchasers or investors). Where we do so, we will be relying upon our legitimate business interests.
However, we will only share your personal information in this way if the third parties in question agree to keep your personal information safe and private.
Also, if, for example, a merger happens, the purchaser will only be able to use your personal information in the ways set out in this privacy notice.
Legal or regulatory requirements:
On occasion, we may be required to disclose your personal information to organisations such as the courts or the police to comply with legal obligations we are subject to and/or to prevent fraud or crime.
Protecting our business:
From time to time we may need to disclose your personal information in connection with steps we need to take to protect our business interests or property. For example, if you default with payment, we may disclose your personal information to credit reference agencies or debt collection or tracing agents.
Professional advice and legal action:
We may need to disclose your personal information to our professional advisers (for example, our lawyers and accountants) in connection with the provision by them of professional advice and/or the establishment or defence of legal claims.
CIRCUMSTANCES IN WHICH WE WILL SEND YOUR PERSONAL INFORMATION OUTSIDE THE UK
We will only send your personal data outside the UK in the following situations:
• To comply with a legal obligation;
• Or it is necessary for the performance of a contract with you.
If we do transfer your personal data outside the UK, we will use one of these safeguards to make sure it is protected:
• We will only transfer it to a UK country which the Information Commission has decided has an adequate level of protection for personal data. You can find more about such countries here https://ec.europa.eu/info/law/law-topic/data-protection_en]; or
• We will put a written contract in place between us and the recipient that incorporates model clauses relating to the transfer of personal data outside the UK.
HOW DO WE KEEP YOUR PERSONAL INFORMATION SECURE?
We take various steps to protect your personal information while it is in our possession, including:
• Implementation of appropriate security measures to protect our IT infrastructure;
• Using secure servers;
• Encryption of personal information;
• Pseudonymisation of personal information;
• Implementation of internal data security policies and training for members of staff in relation to such policies;
• Regular reviews of data security measures implemented by service providers who may handle your personal data;
WHAT RIGHTS DO YOU HAVE UNDER DATA PROTECTION LAW?
Under data protection law, you have a number of different rights relating to the use of your personal information. The table below contains a summary of those rights and our obligations. More information about your rights and our obligations can be found on the ICO website https://ico.org.uk/
Your rights / What this involves / What our obligations are:
A right of access
This is a right to obtain access to your personal data and various supplementary information. We must provide you with a copy of your personal information and the other supplementary information without undue delay and in any event within 1 month of receipt of your request;
We cannot charge you for doing so save in specific circumstances (such as where you request further copies of your personal information).
A right to have personal data rectified:
This is a right to have your personal information rectified if it is inaccurate or incomplete.
We must rectify any inaccurate or incomplete information without undue delay and in any event within 1 month of receipt of your request;
If we have disclosed your personal information to others, we must (subject to certain exceptions) contact the recipients to inform them, that your personal information requires rectification.
A right to erasure:
This is a right to have your personal information deleted or removed.
This right only applies in certain circumstances (such as where we no longer need the personal information for the purposes for which it was collected).
We have the right to refuse to delete or remove your personal data in certain circumstances.
If this right applies, we must delete or remove your personal information without undue delay and in any event within 1 month of receipt of your request;
If we have disclosed your personal information to others, we must (subject to certain exceptions) contact then recipients to inform them that your personal information must be erased.
A right to data portability:
This is a right to obtain and re-use your personal information for your own purposes; It includes a right to ask that your personal information is transferred to another organisation (where technically feasible). This right only applies in certain limited circumstances. If this right applies we must provide your personal information to you in a structured, commonly used and machine-reasonable form. Again, we must act without undue delay and in any event within 1 month of receipt of your request; We cannot charge you for this service.
A right to object
This is a right to object to the use of your personal information. The right applies in certain specific circumstances only. You can use this right to challenge our use of your personal information based on our legitimate interests; You can also use this right to object to the use of your personal information for direct marketing If you object to us using your personal information for direct marketing, we must stop using your personal information in this way as soon as we receive your request. If you object to other uses of your personal information, whether we have to stop using your personal information will depend on the particular circumstances.
A right to object to automated decision making
This is a right not to be subject to a decision which is made solely on the basis of automated processing of your personal information where the decision in question will have a legal impact on you or a similarly significant effect.
Where such a decision is made, you must be informed of that fact as soon as reasonably practicable. You then have 21 days from receipt of the notification to request that the decision is reconsidered or that a decision is made that is not based solely on automated processing. Your request must be complied with within 21 days.
A right to restrict processing
This is a right to ‘block’ or suppress the processing of your personal information. This right applies in various circumstances, including where you contest the accuracy of your information). If we are required to restrict our processing of your personal information, we will be able to store it but not otherwise use it.
We may only retain enough information about you to ensure that the restriction is respected in future. If we have disclosed your personal information to others, we must (subject to certain exceptions) contact them to tell them about the restriction on use.
If you wish to exercise any of your rights, you can make a request by contacting us using info@march-engineering.com
If you request the exercise of any of your rights we are entitled to ask you to provide us with any information that may be necessary to confirm your identity.
YOUR RIGHT TO WITHDRAW CONSENT
If you have given us your consent to use any of your personal information, you can withdraw your consent at any time. To do so, please contact us using info@edwinjamesgroup.co.uk
HOW CAN YOU GET IN TOUCH WITH US
You can get in touch with us in the following ways:
Postal address MARCH Ltd, Tannochside Business Park, 4 Kilmartin Place, Glasgow, Uddingston, G71 5PH
Email address info@march-engineering.com
Phone number 01698 381224
If you have any questions about this privacy notice, how we handle your personal information or if you wish to make a complaint, please contact our information officer at info@march-engineering.com
RIGHT TO COMPLAIN TO THE INFORMATION COMMISSIONER’S OFFICER
If we are unable to deal with a complaint to your satisfaction or if you are unhappy with the way we are using your personal data, you also have the right to make a complaint at any time to the UK’s supervisory authority for data protection issues, the Information Commissioner’s Office.
CHANGES TO OUR PRIVACY NOTICE
We may update this privacy notice from time to time. If we make any substantial updates, we will provide you with a new privacy notice. We may also notify you in other ways from time to time about the processing of your personal information.