Privacy and cookie policy

This Privacy Policy sets out the data processing practices of RNB Group Limited.  Please note that all data thus captured will be used and held in accordance with the requirements of the Data Protection Act 2018.

The scope of business covers digital printing, packing and postal fulfilment, direct marketing, data and document management, web to print and associated storage and distribution services.

RNB Group are the controllers and our Data Protection Officer is Paul Horvath. If you have any requests concerning your personal data or any queries with regard to how we handle your data you can contact the DPO by phone on 0113 2100 055, email [email protected]  or write to us at RNB Group Limited Unit 2, Silver Royd Business Park, Silver Royd Hill, Leeds, LS12 4QQ.

 

Purpose of processing your personal data 

Activity

Purpose of processing

Lawful basis

Making an enquiry

Dealing with your enquiries or requests

 

Providing you with information about our products and services

 

Contract

 

 

Consent/Legitimate interests

 

  

 

  1. Marketing

We may periodically use your personal data to send you details of products or services that we offer that we have identified as likely to be of interest to you.  We will only send you information in line with the preferences you indicated when you provided the personal data.

If at any point you would like to opt-out of receiving communications from us, or would like to change the channels (such as email or post) that we use to contact you, please contact Paul Horvath at email address [email protected]  or write to us at Unit 3 Silver Royd Business Park, Silver Royd Hill, Leeds, LS12 4QQ.   

 

Third party marketing

RNB Group will not pass any personal data provided by you to any third party for marketing purposes.

 

  1. Recipients/categories of recipients

 

In carrying out our business including our obligations to you, we may use sub-contractors. These will be print finishers based in the U.K. who will carry out tasks that RNB Group cannot complete in house.

No data will be transferred electronically but personal data may be printed on materials sent to sub-contractors for print finishing.

We will ensure that they respect your privacy and abide by all data protection laws. We will always ensure we have a written data processing agreement with these processors.

  1. Transfers to third countries

RNB Group will not transfer any data to third countries.

  1. Retention periods

We will keep your personal data in connection with the services/products you have bought for 7 years after the last purchase. We need to retain this data for our own accounting purposes and for legal and tax purposes.

In terms of personal data we use for marketing, we will keep this data for as long as we are able to market to you and if you withdraw your consent or opt-out of marketing communications, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.

  1. Data subject’s rights

You have rights in respect of your personal data. We will need to confirm your identity before we can consider your request so, if you wish to exercise any of these rights, we will need copies of any 2   of the following 4 forms of identity. A valid passport, driving licence or European Union I.D card or a utility bill dated within 1 month of the date of request.

The right to be informed – you have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, who we will share your data with. If you have any questions on how and why we process your data please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office  has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-be-informed/

Right of access – you have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/

Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request.  If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-rectification/

Right to erasure – this right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request.  If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/

Right to restrict processing – you have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request.  If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/

Right to data portability – you have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/

Right to object – you have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling); and (iii) for purposes of scientific/historical research and statistics.

  • Legitimate interests/legal task – your objection should be based on your particular situation. We can continue to process the data if we can demonstrate compelling legitimate grounds which override your interests.
  • Direct marketing – you have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as possible.
  • Scientific/historical research and statistics – your objection should be based on your particular situation. If we are conducting research where the processing is necessary for the performance of a public task, we can refuse to comply with your objection.

If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-object/

Rights relating to automated decision making including profiling – you have the right in respect of automated decision making, including profiling. Where we carry out solely automated decision making, including profiling, which has legal or similarly significant effects on you, we can only do this if it is in connection with a contract with you, we have a right under law or you have provided your explicit consent. We will tell you if this happens and tell you how you can request human intervention or challenge the decision. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/rights-related-to-automated-decision-making-including-profiling/

  1. Processing based on consent

Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe/opt-out in any marketing we send you and you can contact the Data Protection Officer using the contact details provided in this policy.

  1. The right to lodge a complaint to the supervisory authority

If you are unhappy with any aspect of our handling of your data you can make a complaint to the Information Commissioner’s Office – https://ico.org.uk/concerns/

  1. Statutory/contractual requirement to provide personal data.

The personal data that you provide to us is necessary for us to carry out any contract you have entered into with us or for us to perform our obligations under Statute.  This includes your name, the address you provided, your contact details and the text of any enquiry you made. 

  1. Automated decision making including profiling

RNB Group will not carry out any automated decision making or automated profiling.

  1. Cookies

A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser.  Find out more about cookies on http://www.allaboutcookies.org/  

We use cookies to identify you when you visit this website and to keep track of your browsing patterns and build up a demographic profile.

Our use of cookies also allows registered users to be presented with a personalised version of the site, carry out transactions and have access to information about their account.

Most browsers will allow you to turn off cookies.  If you want to know how to do this please look at the menu on your browser, or look at the instruction on http://www.allaboutcookies.org/  Please note however that turning off cookies will restrict your use of our website.

Cookies we use

Cookie

What it does

How to disable and consequences

_ga

Provider: rnbgroup.co.uk

Category: Statistics

Expiry: 2 years

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

Disable through browser. Statistics not collected.

_gat

Provider: rnbgroup.co.uk

Category: Statistics

Expiry: Session

Used by google analytics to throttle request rate.

Disable through browser. Disable consequences not known.

_gid

Provider: rnbgroup.co.uk

Category: Statistics

Expiry: Session

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

Disable through browser. Statistics not collected.

fr

Provider: Facebook.com

Category: Marketing

Expiry: 3 months

 

Used by Facebook to deliver a series of advertising products such as real time bidding from third party advertisers.

Disable through browser. Facebook third party advertising disabled.

r/collect

Provider: doubleclick.net

Category: Marketing

Expiry: Session

 

Used to send data to Google Analytics about the visitor’s device and behaviour.

Disable through browser. Analytic data not collected.

tr

Provider: Facebook.com

Category: Marketing

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

apbct_cookies_test

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

apbct_page_hits

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

apbct_site_landing_ts

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

apbct_timestamp

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

apbct_visible_fields

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

apbct_visible_fields_count

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_checkjs

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_cookies_test

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_fkp_timestamp

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_pointer_data

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_ps_timestamp

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_sfw_pass_key

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_timestamp

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Ct_timezone

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

loglevel

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Session

 

Unclassified.

Disable through browser. Disable consequences not known.

Wistia

Provider: rnbgroup.co.uk

Category: Unclassified

Expiry: Persistant

 

Unclassified.

Disable through browser. Disable consequences not known.

  1. Third party websites.

Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy.  If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.

  1. Changes to the privacy policy.

This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy we will communicate these to you.