Welcome to the Cromwells Auction Privacy Notice.

Cromwells Auction respects your privacy and is committed to protecting your personal information.  We recognise the importance of the correct and lawful treatment of personal information and we will only use personal information as set out in this Privacy Notice.

This Privacy Notice sets out how Cromwells Auction collects and uses any information that you give us.

We have appointed a Privacy Officer, Tracy Large, to oversee compliance with this Privacy Notice. 

If you have any questions about this Privacy Notice or how we handle your personal information, please contact her at:

info@cromwellsauction.com
or by telephone 01279 721941

It is important that the personal information we hold about you is accurate and current.  Please keep us informed if your personal information changes during your relationship with us.

Scope

All data subjects whose personal data is collected, in line with the requirements of the UK General Data Protection Regulation and Data Protection Act 2018.

Responsibilities

Cromwells Auction is responsible for ensuring that this notice is made available to data subjects prior to Cromwells Auction collecting/processing their personal data.

All employees of Cromwells Auction who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and their consent to the processing of their data is secured.

Who are we?

Cromwells Auction is owned by Worth A Bid Limited.

Our head office address is 54, Sun Street, Waltham Abbey, Essex EN9 1EJ

Company Registration number  05034547.

We are registered as Data Controllers with the Information Commissioner’s Office (ICO) No. ZB519594

We are an online marketplace for people wishing to value and potentially sell their valuables.

What personal information may Cromwells Auction hold about you?

Personal data relates to any information about an individual from which that person can be identified.

We will collect, store, and use the following categories of personal information about you:

  • Full name
  • Contact information (i.e home or correspondence address, email address, telephone numbers)
  • Financial details (i.e bank account details)
  • Identification documents i.e copy passport or driving licence
  • Proof of address documents i.e copy utility bills or bank statements

How is your personal information collected?

We collect the personal information directly from you or in some cases from a third party. It is provided using the following methods:

  • Through our website enquiry form
  • Email
  • Social media
  • By telephone

How will Cromwells Auction use personal information held about you?

We will use your personal information to:

  • Return un-purchased items
  • Fulfil your order
  • Respond to any queries
  • Provide you with quotes
  • Provide invoices
  • Make payments to you
  • Keep details of transactions you carry out through us

What are our legal bases for processing your personal data?

Contractual obligations

In order for us to fulfil our contractual obligations to you we will need to use your personal data. 

For example, to provide quotes and to send you invoices and receipts.

Legal or regulatory obligation

We must comply with a number of statutory provisions when providing our services, which necessitate the processing of personal data.

For example, we are required to comply with statutory and regulatory obligations relating to business such as HMRC and fraud/crime prevention.

Legitimate Interests

Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service and the most secure experience. 

For example, we may send you information regarding discount offers or new product ranges.

Consent

We will always request your consent when we collect and process your personal data for certain purposes. 

For example, you may have provided consent to receive marketing updates or our newsletter.

You may withdraw consent at any time by contacting us to update your preferences.

Change of purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Who do we share your data with?

In some circumstances, Cromwells Auction will pass on your personal data to third parties. The following third parties may receive your personal data for the following purposes:

  • Royal Mail or Parcel Force to collect or return goods.
  • Banks or credit card companies
  • HMRC

How long do we keep your data for?

Cromwells Auction will process personal data for as long as is necessary to allow us to fulfil our services. For example all emails are deleted after 6 months.

All our staff are aware of the company’s Retention Policy.

International Transfers of Data

In the course of the provision of our services we may transfer data to countries or international organisations outside of the UK. This may, for example, be to third parties who provide support services to us. We ensure that the personal data that we collect from you will be transferred to, and stored at/processed outside of the UK, under lawful model contracts for the transfer of personal data to third countries (i.e. Standard Contractual Clauses).

Data Security and Confidentiality

Protecting the confidentiality and integrity of your personal data is a responsibility that we take seriously. We use appropriate technical and organisational measures to keep personal data secure against unauthorised or unlawful processing, and against accidental loss, destruction or damage. For example

  • Our employees have received training in data protection and how to handle your personal data  
  • Access to your personal data is restricted to the relevant employees that are required to process your data.  
  • Where hard copies are created, these are securely stored and disposed off when required  
  • Websites and emails are password protected
  • Phone system records calls which are secured by android security and stored in Microsoft Azure Cloud
  • Internal systems and networks are regularly tested  

Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

  • Right of access – you have the right to request a copy of the information that we hold about you.
  • Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
  • Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
  • Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
  • Right of portability – you have the right to have the data we hold about you transferred to another organisation.
  • Right to object – you have the right to object to certain types of processing such as direct marketing.
  • Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

Further information

Complaints

We take any complaints about our collection and use of personal information very seriously.  

If you think that our collection or use of personal information is unfair, misleading, or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance. 

To make a complaint, please contact our Privacy Officer.

Alternatively, you can make a complaint to the Information Commissioner’s Office: 

  • Report a concern online at https://ico.org.uk/concerns/ 
  • Call 0303 123 1113
  • Or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Contact us

If you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please contact our Privacy Officer:

Email – info@cromwellsauction.com

Telephone: 01279 721941