This privacy notice must meet its contractual, statutory and administrative obligations. We are committed to ensuring that the personal data is handled in accordance with the principles set out in the General Data Protection Regulation 2018.

This privacy notice explains why we collect and process your personal information. This Notice applies to all cTech suppliers and customers where these may apply. The information we will process about you will vary depending on your specific role and personal circumstances. The cTech is the controller for this information unless this notice specifically states otherwise.

Lorna Westwood (Finance Director) fulfils the role of Data Protection Director (DPD) for the company and has overall responsibility for the day-to-day implementation of this Notice.

This notice should be read in conjunction with our Data Protection Policy.

This notice contains the following information;

1. How do we get your information
2. What personal data we process and why
3. Lawful basis for processing your personal data
4. How long we keep your personal data
5. Data sharing
6. Do we use any data processors
7. Your rights in relation to this processing
8. Transfers of personal data

1. How do we get your information

We may obtain information about you directly from you, but also potentially from other sources which may include;

• Quote enquiries
• Sales orders
• Order confirmations
• Invoices

2. What personal data we process and why

We process the following categories of personal information in order to carry out the contract we have with you, provide you access to internal services (e.g. IT) required for your role and manage our human resources processes.

• Business email address
• Mobile phone number if applicable

3. Reasons for Processing Your Personal Data

We need to process this information to enable the payment of quote enquiries, sales or purchases of products

4. Lawful basis for processing your personal data

Depending on the processing activity, we rely on the following lawful basis for processing your personal data under the GDPR:

• Article 6(1)(f) for the purposes of our legitimate interest.

5. Retention of personal data

Personal data is only held for so long as the company has a legitimate reason to do so, and this will generally end at termination of a contract with supplier or customer.

cTech maintain a Personal Data Inventory that includes data retention periods.

6. Data Sharing

Sharing of your personal data will not be carried out beyond the remit of our legitimate bases as outlined in this Privacy Notice without recourse to yourself in the first instance.

7. Use of external data processors

No further data processing of your personal data is carried out external to cTech.

Right to complain about the use of your data:

In the first instance please contact, Lorna Westwood, Data Protection Director/Finance Director, cTech Ltd.

Email: lorna@ctech.co.uk

You also have the right to complain to the ICO if you are not satisfied with the response .www.ico.org.uk