SYSPAL Website Privacy Policy

1.0 Our core principles regarding user privacy and data protection

User privacy and data protection are human rights
SYSPAL have a duty of care to the people within our data
Data should only be collected and processed when absolutely necessary
SYSPAL will never sell, rent or otherwise distribute or make public your personal information

2.0 Relevant legislation

Along with our business and internal computer systems, this website is designed to comply with the following national and international legislation with EU General Data Protection Regulation 2018 (GDPR).

SYSPAL's compliance with the above legislation means it is also well aligned with the data protection and user privacy legislation set out by many other countries. If you are unsure about whether this site is compliant with your own country of residences' specific data protection and user privacy legislation you should contact our data protection team (details of which can be found in section 9.0) for clarification.

3.0 Personal information that this website collects and why we collect it

This website collects and uses personal information for the following reasons:

3.1 Site visitation tracking

Like most websites, this website uses Google Analytics (GA) to track user interaction. This data is used to identify how much traffic the website is generating, to understand how our web pages are being found and to identify the journey of visitors through the website.

GA records data such as your geographical location, device, internet browser and operating system, however none of this information personally identifies you to us. GA also records your computer's IP address which could be used to personally identify you but Google do not grant us access to this. We consider Google to be a third party data processor (see section 6.0 below).

GA makes use of cookies, details of which can be found on Google's developer guides. SYSPAL LTD websites use the analytics.js implementation of GA.

Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website but may prevent the website functioning as it was designed and intended.

3.2 List of cookies we collect

We use an industry standard content management system (CMS) to manage our websites. As with most websites and CMS's cookies are used in order to improve user experience and allow the website to function in the way it is intended. The table below lists the cookies we collect and the information they store.

CART - The association with your shopping cart.
CATEGORY_INFO - Stores the category info on the page, which allows the website to display pages more quickly.
COMPARE - The items that you have in the Compare Products list.
EXTERNAL_NO_CACHE - A flag, which indicates whether caching is disabled or not.
FRONTEND - Your session ID on the server.
LAST_CATEGORY - The last category you visited.
LAST_PRODUCT - The most recent product you have viewed.
NO_CACHE - Indicates whether it is allowed to use cache.
STORE - The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE - Indicates whether a customer is allowed to use cookies.
VIEWED_PRODUCT_IDS - The products that you have recently viewed.

3.3 Contact forms and email links

Should you choose to contact us using the contact form on our Contact us page or by clicking on an email link, none of the data that you supply will be stored by this website or passed to / be processed by any of the third party data processors defined in section 6.0. Instead the data will be collated into an email and sent to us securely over the Simple Mail Transfer Protocol (SMTP). Information will then be stored in our secure CRM system and in mailboxes on our secure local servers.

3.4 Website Enquiries

Personal details are mandatory fields in the enquiry system. The data will be collated into an email in exactly the same manner as in section 3.3 the only difference being that the enquiry number, date of enquiry and products enquired about will be stored in the websites database for troubleshooting and analytical purposes. Information will then be added to our secure CRM system and stored in mailboxes on our secure local servers. By submitting an enquiry online you will receive a follow up response via post, telephone or email. You can amend your communication preferences at any point by contacting us via phone on 01952 883188.

3.5 Online purchases

Personal details are mandatory fields in the online buying system. The data will be collated into an email to be reviewed by our sales and accounts departments. Information will then be added to our secure CRM system and stored in mailboxes on our secure local servers. By purchasing online you will receive a confirmation email and we may also need to contact you about your order via post, telephone or email. You can amend your communication preferences at any point by contacting us via phone on 01952 883188. Payments are handled by the Worldpay payment gateway and therefore at no time do we have access to or store your credit card information on our website.

3.6 Email newsletter

If you choose to join our email newsletter, the email address that you submit to us will be used within our email marketing services. The email service provider we use to send our emails is Purepromoter Limited and we consider them to be a third party data processor (see section 6.0). Your First Name, Last Name and Email Address will automatically be uploaded to our email service provider. View Purepromoter Limited privacy policy.

Your details will remain within Purepromoter Limited's database for as long as we continue to use Purepromoter Limited's services for email marketing or until you specifically request removal from the list. You can do this by unsubscribing using the unsubscribe links contained in any email newsletters that we send you or by requesting removal via email. When requesting removal via email, please send your email to unsubscribe@syspal.com using the email account that is subscribed to the mailing list and also include the email address in the body of the email.

If you are under 16 years of age you MUST obtain parental consent before joining our email newsletter.

While your email address remains within the Purepromoters database, you will receive periodic (up to 1 email per week depending on preferences) marketing emails from us.

3.7 Recruitment

Please view our Recruitment Privacy Policy for information on how we handle your information during our recruitment process.

4.0 How we store your personal information

If you submit an enquiry to the website only your order number, date and time of your enquiry and products enquired upon will be recorded to our website database, therefore no data we store online will identify you as an individual.

5.0 About this website's server

This website is hosted by OVH within a secure data centre located in France.

Some of the data centre's security features are as follows:

The facility perimeter is secured with barbed wire fences
The area is also monitored by constant video surveillance and motion detection sensors
Activity both within and outside of the datacentres is monitored and recorded on secure servers, with surveillance teams working on site, 24 hours a day 7 days a week
In order to control and monitor access to the OVH premises, strict security procedures have been put in place
Each staff member receives a RFID name badge required for access and also used to restrict their access

Full details of OVH's data centre security procedures can be found here.

All traffic (transferral of files) between this website and your browser is encrypted and delivered over HTTPS.

6.0 Our third party data processors

We use third parties to process personal data on our behalf. These third parties have been carefully chosen and comply with the legislation set out in section 2.0.

Google (Privacy policy)
Purepromoter (Privacy policy)
Worldpay (Privacy policy)

7.0 Data Breaches

We will report any unlawful data breach of this website's database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

8.0 Data Controller

The data controller of this website is: SYSPAL limited, a UK Private limited Company with company number: 01433220

Whose registered office is:
SYSPAL
Cockshutt Lane,
Broseley,
Shropshire,
TF12 5JA

9.0 Data Protection Team

You can contact our data protection officer by calling +44 (0)1952 883188 or writing to us at the following address:

Data Protection Officer,

SYSPAL
Cockshutt Lane,
Broseley,
Shropshire,
TF12 5JA

10.0 Changes to Our Privacy Policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes. Specific policy changes and updates are mentioned in the change log below.

11.0 Right to withdraw information

Under the data protection act you may request details of personal information which we hold about you. If you want to make a request, please use the address below to write to us.