This policy applies where we are acting either the data controller or the data processor with respect to the personal data of service users.
Complete Care Shop is a trading name of Nottingham Rehab Limited. Nottingham Rehab Limited is registered as a data controller, meaning that it determines the processes to be used when using your personal data. Our registration details with the information commissioner’s office (ICO) are:
Registration number: Z9286493
Date registered: 23 November 2005
Payment tier: Tier 3
Data controller: Nottingham Rehab Limited
Sherwood House, Cartwright Way
Forest Business Park
Data protection officer:
Sherwood House, Cartwright Way
Forest Business Park
In relation to your personal data, we will:
Complete Care Shop and Nottingham Rehab will only collect and process the necessary information required to perform the services above. Typically, that includes the information below:
Your data will be shared within Complete Care Shop and Nottingham Rehab Limited where it is necessary to fulfill the services requested. It will also be necessary to share your information with other services that are involved in the delivery of products and services that you have requested. These include:
In addition to the above, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
We are aware of the requirement to ensure your data is protected against accidental loss or disclosure, destruction and abuse. We have implemented an Information Security Management System in order to provide assurances to our customers and employees alike.
Where we share your data with third parties, we provide clear instructions to them to ensure that your data are held securely and in line with GDPR requirements. Third parties must implement appropriate technical and organisational measures to ensure the security of your data.
The law on data protection gives you certain rights in relation to the data we hold on you. These are:
Typically, consent is not the lawful basis under which we will be processing your data but where it has been necessary for you to provide consent (usually marketing and some cookies), you have the unrestricted right to withdraw that consent at any time. Withdrawing your consent means that we will stop processing the data that you had previously given us consent to use. There will be no consequences for withdrawing your consent.
We might use your information where there’s a legitimate reason to do so, such as where it would help to facilitate a benefit to you or achieve our business objective.
If we use legitimate interests to process any data a legitimate interest balancing test (using the ICO’s template) will be documented.
We rely on legitimate interests to:
Personalise your experience and provide you with support
We sometimes make assumptions about your preferences based on the way you interact with our products and services and the information we hold about you. Knowing these allows us to understand the products, content and services our customers like, letting us focus our efforts on developing those areas. We may also use this information to make decisions about what direct marketing to show you. We may also provide you with help and support where we believe it is required. For example, if you have provided your contact information, we may contact you when a checkout journey is not completed.
To send product related and services communications
For certain types of marketing communications, we do not require your consent and we instead rely on our legitimate interest. This is the case for example where we send you communications about products or services that we provide to you. You can opt out of these communications either by visiting your preference centre if you have an account or in the communication itself.
Conduct market research
We may use the information we hold on you about your engagement with our products and services, to understand how our products are used and make improvements or develop other products and services our audiences may like. We may to contact you about your experience of a product or service we provide you
We may send you service-related messages, which are about the service we provide. We do not require your consent for these, and you are not able to opt out.
If you wish to exercise any of the rights explained above or have questions on the basis of lawful processing, please contact Will Edgell (details at the end of the document).
When you visit any website, it may store or retrieve information on your browser, which is mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information doesn’t usually identify you directly, but it can give you a more personalised web experience.
The supervisory authority in the UK for data protection matters is the Information Commissioner (ICO). If you think your data protection rights have been breached in any way by us, you should contact the Data Protection Officer. Should you be unsatisfied with the response you are able to make a complaint to the ICO.
The Company’s Data Protection Officer is Will Edgell. His contact details are as follows:
Email: [email protected]
Telephone: 01530 232255