Privacy Policy

SECURITY AND PRIVACY NOTICE – CONCEPT INCENTIVES LIMITED - 2023

1. Introduction

This Privacy and Security Notice explains how we handle the collection, processing, use, and disclosure of your (personal) data. In this notice you and your refer to the person that personal data relates to, being our customer or any representative of our customer, or being a visitor to our website.

Personal data means any information relating to an identified or identifiable natural person.

At Concept Incentives Limited, the fundamental principles related to personal data are followed are:

• We are thoughtful about the (personal) information we ask you to provide and the (personal) information that we collect about you;
• We store (personal) information for only as long as we have a legal basis to keep it;
• We aim to make it as simple as possible for you to control the (personal) information we collect, process and disclose of you; and
• We aim to be fully transparent on how we collect, use, and share your personal information.

2. Who are we?

Concept Incentives Limited is a UK based Company whose registered office is Barons Court, Manchester Road, Wilmslow, Cheshire, SK9 1DQ, Company Number 02462964.  Concept Incentives Limited is a data controller with regard to the processing of personal data as defined in the General Data Protection Regulations. This Office controls your personal data that it holds.

3. The information we collect

Concept Incentives Limited collects (personal) information when you register with us or place an order. We also collect (personal) information e.g. when you voluntarily complete customer surveys, provide feedback, participate in competitions from our site(s) and when you may be requested to provide some or all of the following information:

• Your name;
• Your E-mail address;
• Your mailing/postal address;
• Your delivery address;
• Your telephone number; and
• Your contact details.

We may also collect certain non-personal information including:

• The type of browser you are using;
• The type of operating system; and
• The domain name of your Internet service provider.

4. Our legal basis for processing your personal information

Whenever we process your personal information we have a legal basis for what we do. The different legal bases we rely on are:

• Consent: You have told us you are happy for us to process your personal information for a specific purpose;
• Legitimate interests: The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights.
• Performance of a contract: We must process your personal information in order to be able to provide you with one of our products or services;
• Prevention of fraud: Where we are required to process your data in order to protect us and our customers from fraud or money laundering;
• Public information: Where we process personal information which you have already made public;
• Legal claims: The processing of your personal information is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity; and
• Legal obligation: We are required to process your personal information by law.

5. How we use the information

The (personal) data collected about you will be processed, used and stored and used only for the indicated purpose(s), including to:

• Manage your account;
• Process and execute your order;
• Payment process;
• Personalisation of the website;
• Deliver products based on your interests;
• Improve the quality of our products and develop new ones;
• Analyse trends; and
• Improve of site design and security.

6. Our service providers

Concept Incentives Limited may engage subcontractors, partners and suppliers to provide the product and services. These third parties process your (personal) information on our behalf and are required to meet our security and privacy standards. These third parties include:

• Logistics and delivery providers;
• Payment service providers;
• Partners that provide insights and analytics services;
• Credit Reference Agencies who may share your data with other organisations to make credit decisions (CRAIN)
• Security and fraud prevention companies to ensure the safety and security of our customers, suppliers and employees; and

Concept Incentives Limited will not share any of your information with companies outside our group unlawfully.

7. How we protect your (personal) data

We are dedicated to protect your (personal) data and the systems it is held in. We have defined and implemented adequate technical and organisational measures against any unauthorised access, unlawful use, accidental loss, corruption or destruction. This way, we are confident that your (personal) data will be processed on a strictly ‘need to know basis’, when and where appropriate and necessary. As we are fully aware threats evolve and diversify and we wish to sustain your trust throughout the years, we regularly review and update our security measures and infrastructure, with a view to mitigate operational risks and maintain our security programs up to the latest industry-accepted standards and best practices.

8. International transfers of your (personal) data

Please be informed that we might transfer and process any (personal) data you provide to us to countries other than your country of residence. The laws of these countries may not afford the same level of protection to your (personal) data. We will therefore seek to ensure that all adequate safeguards are in place and that all applicable laws and regulations are complied with in connection with such transfer.

9. Security

We will take reasonable steps to ensure that your (personal) data are properly secured using appropriate technical, physical, and organisational measures, so that they are protected against unauthorised or unlawful use, alteration, unauthorised access or disclosure, accidental or wrongful destruction, and loss.

Your (personal) data will be retained for as long as required for the above purposes or in so far as such is necessary for compliance with statutory obligations and for solving any disputes.

10. Data retention

We retain your (personal) data for as long as required to perform the purpose for which they were collected and used (for example, for the time necessary for us to send you the newsletters you subscribed to, to provide you with customer service, answer queries, etc.), unless a longer period is necessary for our legal obligations or to defend a legal or financial claim.

11. Your rights

You have a number of rights under data protection legislation which, in certain circumstances, you may be able to exercise in relation to the personal information we process about you; These include:

• the right to access a copy of the personal information we hold about you;
• the right to correction of inaccurate personal information we hold about you;
• the right to restrict our use of your personal information;
• the right to be forgotten;
• the right of data portability; and
• the right to object to our use of your personal information.

Where we rely on consent as the legal basis on which we process your personal information, you may also withdraw that consent at any time. Please note that we will need to verify your identity before we can fulfil any of your rights under data protection law. This helps us to protect the personal information belonging to our customer against fraudulent requests.

12. Cookies and similar technologies

What are Cookies? A cookie is a piece of data, a text file with anonymous information that includes a unique user identification and website name. Tracking technologies such as cookies, beacons, tags and scripts may be used for analysing trends.

Concept Incentives Limited uses a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do collect personal data through our website, we’ll be upfront about this. We’ll make it clear when we collect personal information and we’ll explain what we intend to do with it. To opt out of being tracked by Google Analytics across all websites PLEASE NOTIFY US IN WRITING AND SEND THIS TO OUR REGISTERED ADDRESS.

13. Other websites

 This Security and Privacy Notice only applies to this website. Our website may contain links to other websites. Please note that Concept Incentives Limited is not responsible and assumes no liability for the content of external websites even if links refer to them.

14. How to Opt out of receiving a newsletter

When registering for the newsletter, your e-mail address and, if applicable, your name will be used for CONCEPT INCENTIVES LTD own advertising purposes until you unsubscribe from the newsletter. To opt-out scroll to the bottom of the email newsletter and click on ‘unsubscribe from this list’ clicking the unsubscribe link. If you wish to be removed from our mailing at any time please contact our Customer Service Department by phone, email or the chat function.

15. Complaints

If Data Subjects have a concern or intend to complain to Office Depot about how their Personal Data has been processed or appeal against any decision, they can reach out to the Data Protection Office by using the email address Jo@concept-incentives.co.uk or lodge a complaint with a supervisory authority.

THIS DOCUMENT IS AMENDED FROM TIME TO TIME