Last update 15 December 2020
This document outlines our approach to Data Privacy in order to fulfil our obligations under the General Data Protection Regulation (2016/679) (EU
Who we are:
We are Yellow Pearl Agencies Ltd with an address at 17A Mullaghboy Ind Est, Athboy Rd, Navan, Co. Meath, C15 DX8A.
Shop Bodyshop Direct was established in 2002 and is a supplier and distributor of bodyshop paint, consumables and equipment.
This notice sets out the basis on which any personal data we collect from you, or from others, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Acts and the General Data Protection Regulation (GDPR) (the Acts), the Data Controller is Yellow Pearl Agencies Ltd (‘Shop Bodyshop Direct’).
What personal information do we collect from you?
You may give us personal data by:
Filling in forms on www.shopbodyshopdirect.com (our website) such as the “Sign Up to Our Newsletter” form.
Please note that sensitive personal and financial information is not requested and should never be submitted through these channels.
Opting to receive news and updates in relation to our organisation or our services by signing up either through our site, through a representative or elsewhere online, for example social media.
Corresponding with us by phone, SMS, email, website, social media or otherwise. We ask you to disclose only as much information as is necessary to provide you with our products or services or to submit a question/suggestion /comment in relation to our site or our services or products.
Applying to work with us. The type of information you may provide includes your CV, a cover letter, your name, address, email address and phone number. CVs should include information relevant to your employment history and education (degrees obtained, places worked, positions held, relevant awards, and so forth). We ask that you do not disclose sensitive personal information (e.g. gender, height, weight, medical information, religion, philosophical or political beliefs and financial data) in your application.
Supplying us with goods or services. Suppliers provide us with information which may include a contact name; phone number; email address; business address; and billing payment details.
What information about you do we collect from others?
When you use our services, we may obtain the following categories of personal data from others:
Products previously purchased
Products being sought
Primary business type
Sensitive information relating to accounts/purchasing
Where do we get this information?
Directly from you
From someone employed within the same organisation as you
Others who you have engaged to interact with us on your behalf
Other websites (eg social media) with your consent
Why do we collect this information?
We collect the information in order to provide you with our services, to promote our services, to improve our site and to recruit staff.
We will use this information:
To carry out our obligations arising from any agreements entered into between you and us e.g. to provide you with our product sales services
To create a contact record for you at enquiry stage so that we can support you in procurement
To set you/your company up as a supplier/customer on our systems
To liaise with you about projects that we are undertaking with you
To create a candidate profile for you if you are a prospective employee
To administer and improve our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
As part of our efforts to keep our site safe and secure
To deliver information about our products and services, where you have subscribed to receive same
To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you
To make suggestions and recommendations to you and other users of our website about services that may interest you or them
CCTV – To monitor access to our office
The legal bases for the processing of your data are:
Processing necessary for the performance of legitimate business interest.
Processing necessary for the performance of a contract which you have entered into with us or to take steps at your request prior to entering into a contract
Processing necessary for compliance with a legal obligation to which we are subject
That you have provided consent for the processing for one or more specified purposes such as marketing, for example, when you subscribe to receive promotions and updates about our organisation.
Who do we share this information with?
We may share your personal data with selected third parties including suppliers and contractors in order to provide you with our services. For example, these s
How long do we keep hold of your information?
The time periods for which we retain your information depends on the type of information and the specific purpose for which we use it. We will keep your information for no longer than is required or permitted.
Do we transfer your information outside the European Union or European Economic Area?
We currently host your personal information within the European Economic Area.
However, it is possible that at some point your personal information may, for example, be maintained, processed and stored by us and our service providers in countries outside of the European Economic Area (EEA). These countries may have different data protection rules and standards to those in Ireland. We will handle your personal information in the manner described in this privacy statement, even in countries whose laws provide less protection for your information. You agree to the transfer and hosting of your personal information outside of the EEA by using or accessing the website and/or by submitting information to us.
What are your rights with respect to your personal data?
You have the following rights:
The right to access the personal data we hold about you.
The right to require us to rectify any inaccurate personal data about you without undue delay.
The right to have us erase any personal data we hold about you in circumstances such as where it is no longer necessary for us to hold the personal data or, in some circumstances, if you have withdrawn your consent to the processing
The right to object to us processing personal data about you such as processing for profiling or direct marketing.
The right to ask us to provide your personal data to you in a portable format or, where technically feasible, for us to port that personal data to another provider provided it does not result in a disclosure of personal data relating to other people.
The right to request a restriction of the processing of your personal data.
Where our processing of your personal data is based on your consent to that processing, you have the right to withdraw that consent at any time but any processing that we have carried out before you withdrew remains lawful.
You may lodge a complaint with your local supervisory authority with respect to our processing of your personal data. The local Supervisory Authority in Ireland is the Data Protection Commissioner. The website is www.dataprotection.ie
Changes to this policy
Our business changes constantly and our privacy statement will also change, so please review it frequently. Updated versions of the privacy statement will always be posted on our website. The date the privacy statement was last updated is set out at the top of this Privacy Statement.
If we make a material change in how we treat your personal information, we will take reasonable steps to notify you in advance of the planned change.
How you can contact us
Our Data Protection Contact is Kimberly Carroll who can be reached as follows:
Phone: (086) 414 7576
Post to: 17A
Ind Est, Athboy Rd, Navan, Co.
Meath, C15 DX8A