Company privacy policy (GDPR compliant)

John McGavigan Limited (the “Company”) is aware of its obligations under the General Data Protection Regulation (GDPR) and is committed to protecting any data that we collect concerning you. We respect and value the privacy of everyone who visits our website (the “Site”) – www.mcgavigan.com and we will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.

About Us 

The Site is owned and operated by us.  

• Our VAT number is GB974801300.
• Our Data Controller is Frank Duffin who can be contacted by telephone on 0141 302 0000, by email on dataprotection@mcgavigan.com, or by post to John McGavigan Limited, 111 Westerhill Road, Bishopbriggs, Glasgow, G64 2QR.

Your rights

As a data subject, if you are a resident of the European Union, you have the following rights under the GDPR, which this Privacy Policy and our use of personal data have been designed to uphold:

• The right to be informed about our collection and use of personal data;
• The right of access to the personal data we hold about you;
• The right to rectification if any personal data we hold about you is inaccurate or incomplete;
• The right to be forgotten – i.e. the right to ask us to delete any personal data we hold about you (we only hold your personal data for a limited time, as explained below but if you would like us to delete it sooner, please contact us using the details within this Policy);
• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact Marketing@mcgavigan.com
• The right to request restriction of the processing of your personal data;
• The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
• The right to object to us using your personal data for particular purposes; and
• Rights with respect to automated decision making and profiling.

 If you have any cause for complaint about our use of your personal data, please contact us using the details provided in this Policy and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

 For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

What do we collect? 

We may collect some or all of the following personal and non-personal data from you:

• Name
• Company name
• Job title
• Contact information such as address, business email address and telephone numbers Details of the contents of meetings held between you and members of JML of a commercial or technical nature
• Feedback to any surveys conducted with you as a customer, supplier or other business contacts. You can opt out of receiving such communications at any time by contacting the Data Compliance Manager (see below) or by clicking the “Unsubscribe” link in any such e-mail that you receive
• IP address
• Web browser type and version, operating system and referring sites when using mcgavigan.com

 How we use your information? 

All personal data is processed and stored securely, for no longer than is necessary in line with the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under the GDPR at all times.

Our use of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract with you, or because it is in our legitimate interests. Specifically, we may use your data for the following purposes:

• Providing and managing your access to the Site;
• Personalising and tailoring your experience on the Site;
• Supplying our products and/or services to you;
• Personalising and tailoring our products and/or services for you;
• Replying to emails from you;
• Market research;
• Analysing your use of our Site and gathering feedback to enable us to continually improve the Site and your user experience;
• To better understand how people interact with our website, email marketing and employees.

We may also use your data for marketing purposes which may include contacting you by business email, telephone, or post with information, news, events and important updates on our products and services. We will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

Whenever we process data for our legitimate interest we always keep your personal data rights in high regard and take account of these rights. 

We do not keep your personal data for any longer than is necessary in line with the reason(s) for which it was first collected. When personal data is no longer required, all reasonable steps will be taken to erase or otherwise dispose of it without delay;

Cookies 

McGavigan currently uses cookies by Google Analytics. By using our website, you agree that we can place these types of cookies on your device. Google Analytics generates detailed statistics about visitors to a website for marketing purposes. Google Analytics can track users across search engines, email campaigns and display advertising giving advertisers the opportunity to optimise campaigns on multiple platforms. 

Data Collected: Anonymous (ad serving domains, browser type, demographics, language settings, page views, time/date); Pseudonymous (IP address);

Data sharing: Google stores the information collected by these cookies on servers in the United States and may transfer anonymous data to third parties.

How and where do we store your data?  

We only keep your personal data for as long as we need to in order to use it as described above, and/or for as long as we have your permission to keep it.

Will John McGavigan Limited share my personal data with anyone else? 

We may pass your personal data on to third-party service providers contracted to John McGavigan Limited in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only to fulfil the service they provide you on our behalf. When they no longer need your data to fulfil this service, they will dispose of the details in line with John McGavigan Limited’s procedures. We will never pass your sensitive personal data on to a third party unless we are legally required to do otherwise.

Can I find out the personal data that the organisation holds about me? 

John McGavigan Limited at your request can confirm what information we hold about you and how it is processed. If John McGavigan Limited does hold personal data about you, you can request the following information:

• Identity and the contact details of the person or organisation that has determined how and why to process your data;
• Contact details of the GDPR owner, where applicable;
• The purpose of the processing as well as the legal basis for processing;
• If the processing is based on the legitimate interests of John McGavigan Limited or a third party, information about those interests;
• The categories of personal data collected, stored and processed;
• Recipient(s) or categories of recipients that the data is/will be disclosed to;
• How long the data will be stored;
• Details of your rights to correct, erase, restrict or object to such processing;
• Information about your right to withdraw consent at any time;
• How to lodge a complaint with the supervisory authority;
• Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data;
• The source of personal data if it wasn’t collected directly from you;
• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.