The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
GDPR regulates the processing of information relating to you and grants you various rights in relation to your personal data.
Replenishh Limited is committed to ensuring that your privacy is protected and that we comply with the obligations of GDPR.
This Privacy Policy explains how we will treat any personal information that you provide us, details your rights and how you can access them and provides assurances on things we will not do.
The Cookie Policy is available here and highlights how we utilise cookies.
When you register on our website at www.replenishh.com or contact us by phone we may collect information about you and your organisation such as company name, address, job title, e-mail address and phone number.
We gather this information to allow us to process your registration and efficiently administer transactions and deliveries, as well as using it to develop and improve our services.
We may use aggregated information for the purposes of tracking the usage of our services and to help us develop and improve the website and such services. We may pass this information to third parties as described within this document. The aggregated information and statistics will not however include details that can be used to identify you.
We will only send marketing material or advertise the products and services of the company by email to subscribers whose contact details the company has obtained either during a transaction or registration. All subscribers will be offered a means of opting out of such communications at the time their details were initially collected and each subsequent communication.
A cookie is a small text file that tracks our users' navigation of the site and stores that information on the hard drives of their PC, mobile phone or other web-connected device. There is nothing malicious about the use of cookies - in fact they are essential for websites to operate efficiently and to the best expectations of their users. The information collected by cookies cannot be used to identify you personally.
Cookies allow us to understand our visitors' habits and preferences, enabling Replenishh to customise its web services and provide an enhanced user experience. The use of cookies is standard in many industries and you will find them in use on most major websites. We may, for example, use cookies to store registration information so that you do not have to provide it to use on subsequent visits.
We use a number of different cookies on our website. Cookies can do a number of things: for example, letting you navigate between pages effectively, storing preferences and generally improving the experience of the website.
Cookies are essential for our website because without them we would not be able to process orders. As a customer you would find it extremely frustrating, if not impossible, to use the website. You would appear as a new customer every time you navigated to a different web page. You would also be logged out on every web page.
Yes, cookies are 100% safe. Cookies do not harm your computer, they do not contain any information that could be used by others to identify you personally and they do not contain any confidential information, such as your email address or payment details.
These cookies are essential to enable you to move around our website and use its features, such as adding products to your basket, or logging into your account securely. Without these cookies, our website cannot work properly.
View all our Strictly Necessary Cookies
These cookies allow us to remember the choices you make and your personalised features such as what currency you choose to view the site in, your VAT preferences, and your login and password if you choose to save them.
View all our Functionality Cookies
These cookies collect information about how you use our website, for instance, which pages you go to most often and if you get error messages from those pages. We only use these cookies to improve how our website work.
View all our Performance Cookies
Advertising & Tracking advertising cookies are used to work out what advertising might be most relevant to you based on the areas you look at on our website.
View all our Advertising & Tracking Cookies
Some cookies will be created on the website as a result of the services provided by third party organisations we work with. For example, we use external analytics services and these suppliers may set cookies on our behalf in order to report back to us. We also embed videos or other content from sites such as YouTube and these sites may set their own cookies. Details of third party cookies are included on our cookie examples page and you can check the relevant third party's website for more information about their cookie policy.
If you do not know what cookies are, or how to control or delete them, then we recommend you visit http://www.aboutcookies.org for detailed guidance
From 26 May 2012 website owners in the UK became required by law to inform their visitors of the cookies they use on their site and what purpose they have. They must also provide users with the necessary information and guidance in order to disable cookies.
Data Processing either by Replenishh or defined contracted third parties are limited to the following:
Processing of personal data is limited to customer, supplier data and employee personal data.
We do not hold or process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership and comply with the restrictions regarding the processing of genetic data, biometric data for uniquely identifying a natural person and data concerning health or person's sex life or sexual orientation.
We do not hold or process personal data relating to criminal convictions and offences or related security measures.
All processing of personal data is lawful and fair. We ensure transparency with customers, suppliers and employees regarding how personal data concerning them is collected, used, or otherwise processed and to what extent the personal data will be processed.
We ensure all information and communication relating to the processing of personal data is easily accessible, easy to understand, and delivered with clear and plain language.
The lawful basis clauses applicable to personal data we hold, or process are limited to
You have given clear consent to process personal data for a specific purpose.
The processing is necessary for a contract with you or because you have asked us to take specific steps before entering into a contract.
The processing is necessary to comply with the law.
The processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests, ie consent is withdrawn.
The following table details data or data processing activities, the group of persons whose data is used and the lawful basis we apply.
|
Type of Data or Use |
Customer Group |
Lawful Basis |
|
Newsletter |
Qualified Business Customers |
Legitimate Interest |
|
Newsletter |
Consumers & Education Establishments |
Consent |
|
E-mail Marketing |
Qualified Business Customers |
Legitimate Interest |
|
Email Marketing |
Consumers & Education Establishments |
Consent |
|
Remarketing |
All Customers |
Consent |
|
Order Transaction |
Online Order Transaction |
Consent |
|
Order Transaction |
Telephone Order Transaction |
Consent |
|
Order Transaction |
E-mail, Fax Customers |
Contract |
|
Transaction Records |
All Customers |
Legal Obligation |
|
Credit Check |
All Customers |
Contract |
|
Web functionality |
All Customers |
Consent |
|
Customer Delivery Data |
All Customers |
Contract |
|
Supplier Data |
All Customers |
Contract |
We limit personal data collected to what is necessary for the purposes for which they are processed. Personal data is held to ensure contractual obligations are met or to meet legal requirements for the keeping of records.
We apply personal data retention rules and annually review them in a specific GDPR audit process.
Every reasonable step is taken to ensure that personal data that is inaccurate is rectified or deleted. Personal data is processed in a manner that ensures appropriate security and confidentiality of the personal data, including preventing unauthorised access to or use of personal data and the equipment used for the processing.
Replenishh consider that business customers with past or ongoing contracts with specific criteria achieved can be defined as legitimate interests.
We ensure legitimate interests are the most appropriate basis though a Purpose Test. We check that the processing is necessary through a Necessity Test and complete a Balancing Test to be confident that an individual’s potential interests do not override those legitimate interests.
We apply additional restriction measures to reduce a potential risk of the application of legitimate interest assessment by adding requirements for consent regarding potential consumer customers or sole traders through identifying typical email service providers.
All marketing information has a clearly visible unsubscribe and customers can understand how we utilise their data through this Privacy Policy.
This section will explain who we share your data with and why it is being processed.
|
Activity |
Nature of the data use |
|
Couriers |
We use third party couriers to deliver your order. |
|
Direct Shipment |
We may order products to be sent directly from a manufacturer to you; this requires delivery information to be sent to the manufacturer to complete the transaction. |
|
Payment Providers |
We partner with a limited number of payment providers to provide you with a range of ways to pay. |
|
Credit Reference Service |
We may use a credit reference agency to determine your suitability for credit terms if you apply and give consent. |
|
Credit Recovery Services |
Failure to pay in an agreed period may result in your details being passed to a credit recovery agent. |
|
Market Places |
We sell via a limited number of online platforms that will share your data with us to complete an order you have made. |
|
Online Marketing |
We provide select third party service providers with your data to deliver our relevant online marketing campaigns. |
|
Offline Marketing |
We use third party service providers to deliver our relevant offline marketing campaigns. |
|
e-Fax |
Inbound faxes are processed by a web-based service provider. |
|
Email processing |
Our email server provider will process all emails that come to or leave Replenishh Business or employees. |
|
Mail Filtering |
Internal and external emails are passed through a filter by a service provider for protection against malware and for PCI compliance. |
|
Phone Answering Service |
In the unlikely event of a phone system failure, calls may be routed to a third party answering service. |
|
Web Services |
Web Hosting, Live chat services, Payment providers, reviews, survey, postcode lookup and SMS services will all need cookies and customer data to work. |
This section explains how cookies are being used by Replenishh and our chosen third-party service providers. Cookie data will only be used by the organisation collecting it and will not be shared.
We use a third-party:
This Privacy Statement sets out clear principles of when, how and why we collect data. At the point of personal data collection, we explicitly detail the personal data required and how it will be used. If we change how data is being processed or unrestricted the use of personal data, we will communicate this change.
The right to object will be clearly communicated separately to the privacy statement on all electronic customer communications.
We do not hold or process children’s personal data.
You have the right to request personal information held and details regarding how it is being processed and who by.
On request either by phone or in writing we provide free information regarding personal data held within 28 days of the request if successful verification of identity has been complete.
The information we provide will be in electronic format, contain the personal data we hold, when and how it was obtained, names of third parties who have processed the data and our statement of intent.
On request either by phone or in writing we will update or improve the data we hold within 28 days of the request if successful verification of identity has been complete.
Personal data is reviewed periodically to check the quality of information improve the quality through planned activities.
Individuals have the right to be forgotten and can request the erasure of personal data if:
On request either by phone or in writing we will review the request and respond within 28 days of the request if successful verification of identity has been complete.
Personal data is stored as per the personal data retention and deletion policy.
Individuals have a right to block or restrict the processing of their personal data.
On request either by phone or in writing we will block or restrict the processing of personal data within 28 days of the request if successful verification of identity has been complete.
If necessary, we will continue to hold the personal data but restrict further processing.
Individuals have the right to request their personal data to move it to another provider.
On request either by phone or in writing we provide free information regarding personal data held within 28 days of the request if successful verification of identity has been complete.
Individuals have a right to object to the processing of their personal data. All policies and procedures will be reviewed to resolve the objection and act.
On request either by phone or in writing we will reply to an objection regarding the processing of personal data within 28 days of the request if successful verification of identity has been complete.
Individuals have an absolute right to object to any processing undertaken for the purposes of direct marketing and all processing for this purpose will stop immediately.
We understand an individual’s rights and do not make decisions regarding individuals through automated decision making.
This privacy policy covers the activity and operations of Replenishh Limited. Replenishh Limited accepts no responsibility or liability for the third-party websites we provide links to. We recommend that visitors consult the respective privacy policies of these websites.
Customers who wish to stop receiving marketing email communications can do so quickly and easily. All marketing emails include an 'Unsubscribe' link. Alternatively, an email with the subject line of 'Unsubscribe' can be sent to feedback@replenishh.com. Your email address will be removed from our mailing lists used for marketing purposes. Please note that emails relating to the status of orders, transactions and updates will still be sent.
Replenishh conform to PCI (Payment Card Industry) Legislation regarding the protection of cardholder’s data and personal information. All transactions take place within a secure area of the website. Personal payment card information is not published in any form on the website and is not accessible to staff of Replenishh.
This privacy policy is reviewed annually and was last updated on 24 May 2018.
If you have any concerns or queries relating to your personal information, cookies or any aspect of our privacy policy, please e-mail, write or call our customer experience team.
Rapid Electronics Limited
Severalls Lane
Colchester
Essex
CO4 5JS
01206 751166
Conrad Group has appointed a Group DPO who has power of attorney for the Conrad group of companies including Replenishh. Their leadership and guidance support our internal review, planning and ongoing compliance.
Data Protection Officer is:
Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Tel. 0941-2986930
Fax 0941-29869316
Mail c.volkmer@projekt29.de
Web www.projekt29.de
You have the right to appeal to the regulatory authority, the Information Commissioner’s Office.
The UK’s independent authority set up to uphold information rights in the public interest, The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
