GDPR and Information Page for Thomas Vaughan Ltd

Your Privacy Matters to Us
At Thomas Vaughan Ltd, we are committed to protecting your privacy and handling your personal data with transparency and care. This page outlines our approach to data protection, in compliance with the General Data Protection Regulation (GDPR) and other relevant UK data protection legislation.
Who We Are
Thomas Vaughan Ltd
Unit G, Thomas Vaughan, Upper Boat Business Centre, Treforest, Pontypridd CF37 5BP
* Telephone: 01443 204197
* Company No: 06692582
* VAT Reg No: 938853375
* Registered in: England and Wales
Thomas Vaughan Ltd is a company registered in England and Wales. We act as a data controller for the personal data we process.
What Information We Collect and Why
We may collect various types of personal data from you depending on your interaction with us (f you are a customer, supplier, or website visitor). This information may include:

* Contact Information: Name, address, email address, telephone number.
* Business Information: Company name, job title, industry.
* Financial Information: (for customers/suppliers) Bank details for payment purposes.
* Website Usage Data: IP address, browser type, pages visited, time spent on site (collected via cookies and analytics tools – please see our Cookie Policy below).

We collect this information for the following purposes:
* To provide our products and services to you.
* To fulfill contractual obligations.
* To communicate with you regarding your orders, inquiries, or our services.
* To manage our business operations and internal record keeping.
* To comply with legal and regulatory obligations.
* To improve our website and services.
* For marketing purposes (only with your explicit consent where required).

Lawful Basis for Processing
We will only process your personal data where we have a lawful basis to do so. This may include:
* Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
* Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
* Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
* Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
How We Share Your Information
We will not sell, rent, or lease your personal information to third parties. We may share your personal data with:
* Service Providers: Third-party companies who provide services on our behalf (e.g., IT support, payment processors, delivery services). These providers are obligated to protect your data and only use it for the specific purposes we define.
* Legal and Regulatory Authorities: Where required by law or to protect our legal rights.
International Data Transfers
As a company based in the UK, we primarily store and process your data within the UK and European Economic Area (EEA). If we ever need to transfer your personal data outside the UK/EEA, we will ensure appropriate safeguards are in place to protect your data, such as using standard contractual clauses approved by the European Commission or the UK Information Commissioner's Office (ICO).
How Long We Retain Your Information
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
* Right to Be Informed: To be informed about how your personal data is collected and used.
* Right of Access: To request access to the personal data we hold about you.
* Right to Rectification: To request that inaccurate personal data we hold about you is corrected.
* Right to Erasure ( "Right to Be Forgotten"): To request the deletion of your personal data in certain circumstances.
* Right to Restriction of Processing: To request the restriction of processing of your personal data in certain circumstances.
* Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
* Right to Object: To object to the processing of your personal data in certain circumstances, particularly where we are relying on legitimate interests or direct marketing.
* Rights in Relation to Automated Decision Making and Profiling: To not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details below.

Cookie Policy
Our website uses cookies to improve your Browse experience and collect anonymous statistical data. Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
By continuing to use our website, you agree to our use of cookies. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Changes to This Page
We may update this GDPR and Information Page from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for the latest information on our privacy practices.

Contact Us
If you have any questions about this GDPR and Information Page, our data practices, or if you wish to exercise any of your data protection rights, please contact us:

Thomas Vaughan Ltd
Unit G, Thomas Vaughan, Upper Boat Business Centre, Treforest, Pontypridd CF37 5BP
Telephone: 01443 204197

Complaints
If you are not satisfied with our response to a data protection query or complaint, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for upholding information rights.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk