1. Our privacy commitments
Salamander Pumped Shower systems Ltd. (referred to in this document as Salamander, we, us, our), take your privacy and the security of your personal data very seriously and want to be as transparent as possible about what we do with it.
- It also explains when we might disclose your data to others, how we keep it secure and also your rights regarding your data.
- To fulfil our responsibilities and demonstrate compliance with The Data Protection Act 2018 (GDPR), we are committed to the seven principles of the regulation:
- Processing your personal data lawfully, fairly and in a transparent manner
- Collecting your personal data for specified, explicit and legitimate purposes
- Ensuring that your personal data is adequate, relevant and limited to what is necessary
- Ensuring that your personal data is accurate and, where necessary, kept up to date
- Retaining your personal data only for as long as is necessary
- Processing your personal data in an appropriate manner to maintain security.
- Our responsibility to demonstrate, compliance with the above principles
2. Information about us
The data controller is Salamander Pumped Shower Systems Ltd., Unit 2c, Colima Avenue, Sunderland, SR5 3XE. We are registered in England and Wales as Salamander Pumped Shower Systems Limited, registered number 02778282
This privacy notice is applicable to all of our brands, websites and apps.
3. When do we collect your personal data?
- When you visit any of our websites to browse products and services
- When you register a product warranty online or with Pumpwise
- When you create an account with us
- When you purchase a product or service by online or by phone
- When you engage with us on social media
- When you download or install our app
- When you join our loyalty programme or create an account in the installer hub
- When you contact us by any means with queries, complaints etc.
- When you ask us to email you information about a product or service
- When you enter prize draws or competitions
- When you book any kind of appointment with us or book to attend an event, e.g. a service engineer visit, training course or sales event
- When you choose to complete any surveys we send you
- When you comment on or review our products or services
- When you’ve given a 3rd party permission to share with us the information they hold about you (for example if your installer registers your pump for warranty on your behalf)
- We collect data from publicly available sources when you have given your consent to share information or where the information is made public as a matter of law.
4. What information do we collect from you?
As part of our business we will process the data of people who fall into the following categories, whether we have has a relationship in the past, have a relationship now or we are about to commence a relationship with you:
- Installers of our products
- 3rd Party Organisations we engage with such as consultants, advisers (legal and regulatory) and public bodies
We will collect and process the following data about you:
Information you give us. By filling in forms on our websites or by corresponding with us by phone, SMS, email or otherwise. The information you give us may include your name, address, email address and phone number, and financial information such as a payment card details and bank account details.
Information we collect from your use of our websites or social media sites. Every time you visit one of our websites or social media sites we will automatically collect technical information, such as the internet protocol (IP) address used to connect your device to the internet, where you connected to our service, your internet service provider (ISP), and what type of device you are using to access our service.
Information we collect throughout our relationship. This is information collected during meetings with our sales managers or engineers, from any purchase or sales transaction you may make with us and any warranty or service contracts we may have with you either directly or through a landlord. The information we hold may include your name, address, email address and phone number, and financial information such as payment card details and bank account details.
Information we collect when you call us. If you telephone us we will automatically collect the phone number used to call us and we may also keep a recording of inbound and outbound calls for training and quality purposes.
Information we receive from other sources. We work closely with other organisations, including the following categories:
Installers of our products
Businesses that sell our products, builder’s merchants and plumbing wholesalers.
The above organisations will provide personal data including, name, address, contact telephone numbers and email address.
For example, if you employ a third- party installer to fit one of our products they may pass us your name and address when they register the product warranty on your behalf.
If you apply for a trade account with us we may pass your details to a credit reference agency, for example, Creditsafe, who may then share your financial data with us.
Providing us with your details online. This is information you may choose to provide us with when using our websites. This includes your name, address, telephone number and preference for receiving communications from us. Please let us know if any of these change so we can keep our records up to date.
5. Why do we collect this information?
We process your personal information for the following reasons:
- Pursuant to contract In order to:
- Process information at your request to take steps to enter into a contract
- Provide you with our products and services
- Process payments
- Make deliveries
- Maintain business and service continuity
- Send service communications so that we can perform our obligations to you, for example to inform you about the end of your warranty
- Record information to facilitate your rights under warranties or guarantees
On the basis of your consent:
- Where we rely on your consent for processing this will be brought to your attention when the information is collected from you
- We will only contact you with direct marketing communications if you consent to us doing so and you have the right to withdraw consent at any time. See the What are your rights? Section below for more information.
- In our legitimate interests of providing the best service and improving and growing our business we will process information in order to:
- Provide you with a personalised service
- Improve our products and services
- Keep our sire and systems safe and secure
- Understand our customer base and purchasing trends
- Defend against or exercise legal claims and investigation complaints
- Understand the effectiveness of our marketing
- Carry out analytics to improve our products and services as set out above
You have the right to object to processing carried out for our legitimate interests. See the ‘What are your rights?’ section below for more information.
To comply with legal requirements relating to:
- The provision of products and services
- Data protection
- Health and safety
- Anti-bribery and corruption
- Fraud investigations
- Assisting law enforcement
- Any other legal obligations placed in us from time to time
6. Websites and Cookies
7. How long do we keep your information?
As a general principle we will hold your personal data only for as long as necessary in order to fulfil the purposes for which it was collected. Once these purposed have been achieved we will erase the data or anonymize it in such a way as to make it impossible to identify you, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
- If your data relates to a financial transaction we will keep information about you for a maximum of 6 years after the end of our relationship with you (unless obligations to our regulators require otherwise or we are required to remove such data from our records). This is to enable us to comply with our legal obligations regarding record- keeping for tax and accounting purposes.
- If you have one of our products installed at your address its location will be kept for the expected life span of the product so that we may continue to support it throughout its lifetime.
For more details on record retention please contact us.
8. Who might we share your information with?
For the purposes set out in the, ‘why do we collect this information?’ section above, we will share your personal information with:
- The following categories of third parties, some of who we appoint to provide services, including:
- Business partners, subsidiaries, suppliers and sub-contractors for the performance of any contract we enter into with you
- Analytics and search engine providers that assist us in the improvement and optimisation of our site
- Regulatory bodies
- Customer survey providers in order to receive feedback and improve our services
- Any member of our group, which means our parent company and any subsidiaries of our parent company.
When disclosing your data to third parties we have an obligation to ensure that we have appropriate measures in place to ensure your data is protected. We will therefore do the following:
- Take steps to ensure the reliability of the third parties with whom we share your personal data
- Take measures to ensure that the third parties who we authorise to process your data observe confidentiality, process data only based on documented instructions from us, take appropriate security measures and delete or return all personal data at the end of the service.
- Take steps to ensure only the data which is absolutely necessary for them to perform their processing is disclosed to third parties.
- Take steps to ensure that your data is not made accessible to an indefinite number of persons.
- Minimise the amount of personal data we disclose
- Ensure pseudonymisation of your personal data, where possible (Psyeudonymisation means disguising or masking your data so that it cannot be read without additional information which we keep separately in a secure environment)
9. Confidentiality and security of your personal data
We are committed to protecting your personal and financial information. All information kept by us is stored on secure servers.
Where we have given you (or where you have chosen) a password that enable you to access certain parts of our service, you are responsible for the keeping this password confidential. We ask you not to share a password with anyone.
We are committed to regularly testing, assessing and evaluating the effectiveness of our technical and organisational measures to manage the security of your personal data. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We secure access to all transactional areas of our websites and apps using https technology. Access to your personal data is password-protected, and sensitive data (such as payment card information is secured by SSL encryption.
10. What are your rights?
Where processing of your personal data is based on consent, you can withdraw that consent at any time.
You can exercise your rights at any time by contacting us. Our contact details are given below.
You have the right:
- To ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes
- To ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing.
- To ask not to process your data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest
- To request from us access to personal information held about you
- To ask for the information we hold about you to be rectified if it is inaccurate and incomplete
- To ask for data to be erased provided that the personal data is longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set our below, and the are no overriding legitimate grounds for processing, the data is unlawfully processed.
The data needs to be erased to comply with a legal obligation or the data is children’s data and was collected in relation to an offer of information society services
- To ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing)
- To ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract
Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details below.
In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time.
The ICOs contact details are available here: https://ico.org.uk/concerns/. You can also call them on 0303 123 1113.
11. Contact details
Unit 2c Colima Avenue
Enterprise Park West
Tel: 0191 516 2002
This Policy was last updated on 13th March 2023.