This policy describe how Middleton Aggregates Ltd processes your personal data in accordance with the General Data Protection Regulation (GDPR). The registered office of Middleton Aggregates Ltd is at Mill Drove, Blackborough End, King’s Lynn, Norfolk, PE32 1SW.Types of personal data processed
The types of personal data processed may include name, billing address, delivery address, email address, telephone number, financial information, CCTV & dash-cam images, vehicle particulars and technical computer information (e.g. browser, email client, IP address, MAC address). The personal data will not include any GDPR “special category data”.Reasons for precessing personal data
We need your personal data in order to provide goods and services to you. We will only use your personal data where it is necessary:
·   to enter into, or perform, a contract with you
·   to comply with a legal duty
·   to protect your vital interests
·   to further our legitimate interests provided this has minimal impact on your privacy
These legitimate interests may include some or all of the following:
·   to improve our service to our customers
·   to identify and prevent fraud
·   to obtain a credit reference
·   to provide communications which we think may be of interest to you
·   to maintain the security of our property and network
We will not sell your personal data to a third party. We will obtain a non-disclosure agreement before sharing data with a third party to further our legitimate interests if there is a risk that sharing will impact your privacy. We will keep your personal data rights in high regard and take account of these rights at all times.
We are based in the UK and we store our data securely within the UK. Our security measures include firewall, anti-virus software, backup software, data encryption and password protection.Data retention
We review the data we hold annually and delete data that is no longer required. This review takes into account minimum retention periods required by UK Law.Your rights
Your rights in respect of your personal data include:
·   the right to obtain a copy of your personal data
·   the right to have inaccurate personal data rectified
·   the right to have your personal data erased (except when we are required to retain your data by UK law)
·   the right to object to your personal data being used for marketing, profiling and automated decision making
Note that there are exceptions to the above rights. If you wish to complain about how we handle your personal data you can contact us via email email@example.com and we will attempt to rectify the matter if we are able to do so.
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you have the right to complain to the Information Commissioner’s Office.
Information Commissioner’s Office