Who we are
This is the privacy statement of United Box Ltd group of companies.
Purpose
United Box Ltd will abide by the GDPR, and in doing so, we will acknowledge and undertake our responsibility
to adhere to data protection law.
As ‘data holders’, we will exercise judgement in making decisions and endeavour to justify any decisions we
make.
Types of personal information we collect
We may collect, use and store different types of personal information about you, which we have grouped together
as follows
| Types of personal information | Description |
| Financial | Your financial position, status and history. |
| Social-demographic | Details about your work or profession, nationality, education and where you fit in to various social or income groupings. |
| Contractual | Details about the products and services we provide or obtain from you |
| Special types of personal data |
Some types of personal data are defined as special. We will only
|
How we use your personal information
In general terms, we collect and use personal information to:
- deliver our products/services and meet our legal responsibilities
- verify your identity where this is required
- contact you by post, email or telephone
- understand your needs and how they may be met
- maintain our records
- process financial transactions
- prevent and detect crime, fraud or corruption
More specifically, the table below explains how we use your personal information and the reasons that we rely
on in doing so. Where these reasons include legitimate interests, we explain what these legitimate interests
are.
| What we use your information for | Our reasons | Our legitimate interests |
|
|
|
|
|
|
|
|
Where we collect your personal information from
We may collect personal information about you (or your business) from the following sources:
Data you give to us: e.g. When you talk to us over the phone / email us
Data we collect when you use our services/products: e.g. Payment and transaction data
Who we share your information with
We may share personal data with external contractors and out sourcing service providers, a list of which is
available from the data controller.
If you choose not to give your personal information
It may delay or prohibit us from meeting our obligations / lead to us cancelling the service/products with us
How long we keep your personal information
We will retain contractional information for 7 years, or longer if required by law
Your rights
Access to your information – You have the right to request a copy of the personal information about you
that we hold.
Correcting your information – We want to make sure that your personal information is accurate, complete
and up to date and you may ask us to correct any personal information about you that you believe does not
meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you
where:
- You consider that we no longer require the information for the purposes for which it was obtained
- We are using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below
- You have validly objected to our use of your personal information – see Objecting to how we may
use your information below - Our use of your personal information is contrary to law or our other legal obligations.
Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest or pursuant to the legitimate interests of us or a third party then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.
Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don't want us to delete the data. Where this right to validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Portability – if we process personal information that you provide to us on the basis of consent or because it is necessary for the performance of a contract to which you are party, and in either case that processing is carried out by automated means, then you have the right to have that personal information transmitted to you in a machine-readable format. Where technically feasible, you also have the right to have that personal
information transmitted directly to another controller.
Automated processing – if we use your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.
Please contact us in any of the ways set out in the Contact information and further advice section if you wish to exercise any of these rights
Changes to our privacy statement
We keep this privacy statement under regular review and will place any updates on this website. Paper copies of the privacy statement may also be obtained by contacting the Data Controller.
This privacy statement was last updated on 05/06/2023
Contact information and further advice
You can contact us using the following email addresses: - data.controller@jamesjones.co.uk and davidholmes@scottgroupltd.com or by writing to us at:
The Data Controller
James Jones & Sons Ltd
Broomage Ave
Larbert
FK5 4NQ
Unit 7
Halbeath Interchange Business Park
Kingseat Road
Halbeath
Fife
KY11 8RY
Complaints
We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office.
