Pax Lilly Associates Ltd customer privacy notice

This privacy notice tells you what to expect us to do with your personal information.

Our contact details

Email - Enquiries@Pax-Lilly-Associates.com

What information we collect, use, and why

• We collect or use the following information to provide services and goods, including delivery:

• Names and contact details

• Purchase or account history

• Payment details (including card or bank information for transfers and direct debits)

• Website user information (including user journeys and cookie tracking)

• Information relating to compliments or complaints

We collect or use the following information for the operation of customer accounts and guarantees:

• Names and contact details

• Payment details (including card or bank information for transfers and direct debits)

• Purchase history

• Account information, including registration details

• Information used for security purposes

• Marketing preferences

We collect or use the following information to prevent crime, prosecute offenders, or defend against legal action:

• Names and contact information

• Customer or client accounts and records

• Financial transaction information

We collect or use the following information for service updates or marketing purposes:

• Names and contact details

• Marketing preferences

• Purchase or viewing history

• Website and app user journey information

• Records of consent, where appropriate

We collect or use the following information for research or archiving purposes:

• Names and contact details

• Purchase or viewing history

• Website and app user journey information

• Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

Financial transaction information

We collect or use the following information for recruitment purposes:

• Contact details (eg name, address, telephone number or personal email address)

• Date of birth

• Lawful bases

Our lawful bases for collecting or using personal information to provide services and goods are:

• Consent

• Contract

• Legal obligation

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

• Consent

• Contract

• Legal obligation

Our lawful bases for collecting or using personal information to prevent crime, prosecute offenders or defend against legal action are:

• Consent

• Contract

• Legal obligation

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

• Consent

• Contract

• Legal obligation

Our lawful bases for collecting or using personal information for research or archiving purposes are:

Consent

Contract

Legal obligation

Our lawful bases for collecting or using personal information for legal requirements are:

• Consent

• Contract

• Legal obligation

Our lawful bases for collecting or using personal information for recruitment purposes are:

• Consent

• Contract

• Legal obligation

Where we get personal information from

• People directly

• Publicly available sources

• How long we keep information

Retention Schedule

• We are committed to ensuring that your personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, in accordance with UK GDPR laws. Below is a summary of our retention periods for different types of data:

Contact Information (e.g., name, email address)

• Retention Period: Up to 2 years from the date of last interaction.

• Reason: To respond to enquiries and maintain communication records for customer service purposes.

Account Information (e.g., username, login details)

• Retention Period: For the duration of the account's active status plus 1 year after account closure.

• Reason: To manage your account and provide continuous service, as well as for security and fraud prevention purposes.

Transaction Data (e.g., purchase history, payment details)

• Retention Period: 7 years from the date of transaction.

• Reason: For financial reporting, auditing purposes, and compliance with legal obligations.

Marketing Data (e.g., email marketing preferences, tracking data)

• Retention Period: Until you opt-out or withdraw consent, plus 1 year.

• Reason: To manage marketing preferences and ensure compliance with marketing regulations.

Legal and Compliance Data (e.g., records of consent, legal claims)

• Retention Period: As long as necessary to fulfil the purpose, plus 6 years.

• Reason: To comply with legal obligations, resolve disputes, and enforce our agreements.

Data Deletion

• At the end of the applicable retention period, we will securely delete or anonymise your personal data to ensure it can no longer be associated with you.

Your Rights

• You have the right to request access to, correction, or deletion of your personal data at any time. To exercise these rights, please contact us at Enquiries@Pax-Lilly-Associates.com 

Who we share information with

• Other organisations

• Organisations we need to share information with for safeguarding reasons

• Professional or legal advisors

• Financial or fraud investigation authorities

• Relevant regulatory authorities

• Professional consultants

• Organisations we’re legally obliged to share personal information with

• Emergency services (where necessary)

• Publicly on our website, social media or other marketing and information media (where appropriate)

Sharing information outside the UK

• Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal data.

• Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.

• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.

• You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

• To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain

• If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

• If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

17 May 2024