The legal bits

Customers using a HETAS Registered Installer in England and Wales will be provided with a HETAS Certificate of Compliance (Building Regulation Compliance Certificate) by HETAS a short time after the installer has completed the installation and entered the details on the HETAS website. This is vital importance in demonstrating that the installation was carried out by a competent installer working for a HETAS registered business and complies with the relevant Building Regulations.

The information on the certificate is used to record your installation, and in England & Wales it is used to notify your Local Authority Building Control Department (LABC) of the work that was undertaken. This ‘self certification’ by competent registered installers takes the place of a Local Authority Building Notice which could cost you a significant amount of money, this can vary by region and the cost of the work being carried out. The HETAS installer is charged a small fee by HETAS for this service, but much less than the charges incurred if you seek a Building Notice via the Local Authority.

The information is required to validate household insurance and will be required by Solicitors in any home selling process. Failure to notify the Local Authority, can be an offence resulting in enforcement action being taken against the Householders and/or the installer, this could cost anything up to £5000. Regulations and certification vary by regions, consumers in Scotland, Northern Ireland, Republic of Ireland and Isle of Man should contact their relevant Local Authority prior to commencing any installation work as HETAS installers cannot self-certificate their work in these regions.

Source: HETAS

Cookies.

Cookies are small files added to your computer when you visit certain websites. The only cookies placed on your computer when you visit here are from Google Analytics, which helps us analyse traffic to the site, and Pinterest, which allows you to 'pin' an image to your account. We don't add any of our own cookies to your computer.

Who we are.

(also referred to in this Notice as "we", "us", or "our") means East Kent Stoves Ltd., trading as Whitstable Stove Shop
East Kent Stoves Ltd. is registered in England and Wales (Regn No 8920273), with the registered address at 99 Canterbury Road, Whitstable, Kent, CT5 4HG.

In order for us to provide products and installation services to you, we will need some personal information, such as your name, address, postcode, telephone number and email address. WSS has a legal duty to ensure that we process your personal data in a way that is fair, safe and secure, in accordance with the General Data Protection Regulation 2018. We will not share your personal information with anybody else without your knowledge, unless we are required by law to do so or you ask us to do so, i.e. to a chimney sweep or one of our suppliers to arrange a replacement for a faulty unit. We also need to pass data to our surveyors/installers who of course need to know where to survey and install and to contact you to organise this.

On completion of relevant works, we will submit your data to HETAS, in order for them to certificate our works. HETAS will in turn provide your details to the relevant local authority, i.e. the council Building Control department, to officially register the installation and any relevant changes to your building's structure.

We may also use your data to keep our records up to date in regard to product guarantees along with installation dates, to notify you about changes to our service and products and to issue reminders about chimney sweeping and other related issues. If you do not provide the information required we are unlikely to be able to arrange your installation and may not be able to provide certain services to you. With some of the products used in our installations offering 10-30 years, or a 'lifetime guarantee', this data could be retained for several years.

Transfer of personal data outside the UK
Certain personal information held on our IT systems may be transferred across geographical borders in accordance with applicable law. By providing us with your information, you consent to the collection, international transfer, storage, and processing of your information. These transfers are governed by European Union (EU) standard contractual clauses or equivalent data transfer agreements to protect the security and confidentiality of personal information. In a nutshell, we use 'the cloud' to store information so that it is readily available to the few people who need to access it, i.e. WSS and our surveyors/installers.

How to contact us.
If you wish to opt-out of WSS holding your personal data electronically, or for any questions or concerns relating to this Privacy Policy or our data protection practices, or to make a subject access or any other request regarding the information we hold, please contact us at:
Whitstable Stove Shop
2 Saddleton Road
Whitstable
Kent
CT5 4JB
sales@whitstablestoveshop.co.uk
01227 266209

General Data Protection Regulation 2018

This Privacy Policy sets out how we, East Kent Stoves Ltd, collect, store and use information about you when you use or interact with our website, www.whitstablestoveshop.co.uk (our website) and where we otherwise obtain or collect information about you. This Privacy Policy is effective from 15th May, 2018. Summary This section summarises how we obtain, store and use information about you. It is intended to provide a very general overview only. It is not complete in and of itself and it must be read in conjunction with the corresponding full sections of this Privacy Policy.

Data controller: Mark Smith

• How we collect or obtain information about you:
• when you provide it to us (e.g. by contacting us
• from your use of our website, using cookies,
• and occasionally from third parties.

• Information we collect:
• name, contact details, IP address, information from cookies, information about your computer or device (e.g. device and browser type), information about how you use our website (e.g. which pages you have viewed, the time when you view them and what you clicked on, the geographical location from which you accessed our website (based on your IP address), company name or business name (if applicable) and VAT number (if applicable).
• We do not take payment information e.g. your credit or debit card details, from the website, as we do not sell online

• How we use your information:
• for administrative and business purposes (particularly to contact you and process requests for, for example, information, surveys or technical assistance which you request via our website or other platforms such as the various social media presences we run.)
• to improve our business, products and website
• to fulfil our contractual obligations
• to advertise our goods and services
• to analyse your use of our website
• in connection with our legal rights and obligations.

• Disclosure of your information to third parties:
  • only to the extent necessary to run our business and with your permission, i.e. to our suppliers in the event of a faulty product
  • to our surveyors/installers so that they can carry out their works
  • to fulfil any contracts we enter into with you
  • where required by law or to enforce our legal rights.

• Do we sell your information to third parties (other than in the course of a business sale or purchase or similar event):
• No, your data is never sold by us.

• How long we retain your information:
• We'll retain your data for no longer than necessary, taking into account any legal obligations we have (e.g. to maintain records for tax purposes), any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business), to service a roduct guarantee etc.
• Some products offer a 'lifetime guarantee', so data may in some instances be retained for several years.

• How we secure your information:
• using appropriate technical and organisational measures such as storing your information on password protected computers with appropriate protection against attack from Malware, virus infection etc. and with no access by those outside the business
• only granting access to your information where strictly necessary.

• Transfers of your information outside the European Economic Area:
• in certain circumstances we transfer your information outside of the European Economic Area, including to the following countries: United States of America. Where we do so, we will ensure appropriate safeguards are in place, the third parties we use who transfer your information outside the European Economic Area have self-certified themselves as compliant with the EUU.S. Privacy Shield. In a nutshell, we use 'the cloud' to store limited information such as your name, address, telephone number and email address.

• Use of automated decision making and profiling:
• we do not use automated decision making and/or profiling in-house. However we do use, for example, Facebook Advertising, which can target certain groups of individuals with relevant advertisments.

• Your rights in relation to your information
• to access your information and to receive information about its use o to have your information corrected and/or completed
• to have your information deleted
• to restrict the use of your information
• to receive your information in a portable format
• to object to the use of your information
• to withdraw your consent to the use of your information
• to complain to a supervisory authority

• Sensitive personal information:
• we do not knowingly or intentionally collect what is commonly referred to as ‘sensitive personal information’ via the website or other electronic means. Please do not submit sensitive personal information about you to us. We do of course, use a 'PDQ' machine to take payments in the shop. This is secured by the relevant merchant services provider.

• Our details
• The data controller in respect of our website and business is East Kent Stoves Ltd. (company registration number: 08920273 of Registered Address 99 Canterbury Road, Whitstable, Kent, CT5 4HG. You can contact the data controller by writing to East Kent Stoves Ltd, c/o Whitstable Stove Shop, 2 Saddleton Road, Whitstable, Kent, CT5 4JB or sending an email to sales@whitstablestoveshop.co.uk. If you have any questions about this Privacy Policy, please contact the data controller.

• Information we collect when you visit our website
• We collect and use information from website visitors in accordance with this section and the section entitled Disclosure and additional uses of your information.
• Web server log information
• We use a third party, Nimbus Hosting Ltd., to host our website and email server. Our website server automatically logs the IP address you use to access our website as well as other information about your visit such as the pages accessed, the date and time of the request, the source of your access to our website (e.g. the website or URL (link) which referred you to our website), and your browser version and operating system.
• Our server is located in the United Kingdom.

• Use of website server log information for IT security purposes.
• Nimbus Hosting Ltd. collect(s) and store(s) server logs to ensure network and IT security and so that the server and website remain uncompromised. This includes analysing log files to help identify and prevent unauthorised access to their network, the distribution of malicious code, denial of services attacks and other cyber attacks, by detecting unusual or suspicious activity.
  Legal basis for processing: compliance with a legal obligation to which Nimbus Hosting Ltd. are subject (Article 6(1)(c) of the General Data Protection Regulation).
• Legal obligation: Nimbus Hosting Ltd. have a legal obligation to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing of information about individuals. Recording access to our website using server log files is such a measure. Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation). Legitimate interests: we have a legitimate interest in using your information for the purposes of ensuring network and information security.
  
• Use of website server log information to analyse website use and improve our website. We use the information collected by our website server logs to analyse how our website users interact with our website and its features. For example, we analyse the number of visits and unique visitors we receive, the time and date of the visit, the location of the visit and the operating system and browser used. We use the information gathered from the analysis of this information to improve our website. For example, we use the information gathered to change the information, content and structure of our website and individual pages based according to what users are engaging most with and the duration of time spent on particular pages on our website. Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation). Legitimate interest: improving our website for our website users and getting to know our website users’ preferences so our website can better meet their needs and desires.