Privacy Policy
We have endeavoured to take all precautions necessary under the EU General Data Protection Regulations in order to protect the data which we process.
Seating Matters Anti Corruption and Bribery Policy 20 Jan 2020
Statement of Ethics, Seating Matters, Oct 2019
Anti-Slavery & Human Trafficking Policy
THE SEATING MATTERS PRIVACY COMMITMENT
We have endeavoured to take all precautions necessary under the EU General Data Protection Regulations in order to protect the data which we process.
WHO ARE WE?
‘We’ are Seating Matters, a company registered at 131 Carnamuff Road, Limavady, Northern Ireland.
Visitors to our websites
When someone visits www.seatingmatters.com, we use a third-party service, Hubspot to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow, Hubspot to make any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be upfront about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
By using our website and providing your personal data to us, you agree to our transfer, storage and processing of that data. We do our utmost to ensure that all reasonable steps are taken to make sure that your data is stored securely. Unfortunately, the sending of information via the internet is not totally secure and on occasion, such information can be intercepted. We cannot guarantee the security of data that you choose to send us electronically, sending such information is entirely at your own risk.
Use of cookies
Cookies are small text files that a website transfers to a site visitor’s hard disk or browser for added functionality, or for tracking website usage. We do not use cookies to gather personal information such as a person’s name or email address. In order to measure the effectiveness of our online presence, we may use cookies to identify repeat visitors to our site and to determine the path visitors take on our site. Any information gathered by the use of cookies is compiled on an aggregate, anonymous basis.
You can choose to accept or decline cookies. You can usually modify your browser setting to decline cookies if you prefer. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
Find out how to manage cookies on popular browsers:
Google Chrome
Microsoft Edge
Mozilla Firefox
Microsoft Internet Explorer
Opera
Apple Safari
To find information relating to other browsers, visit the browser developer's website.
Strictly Necessary Cookies
| Cookie Name | Description | Duration |
| CRAFT_CSRF_TOKEN | This cookie is used by Cloudflare to identify trusted web traffic. | Session Cookie |
Performance Cookies
| Cookie Name | Description | Duration |
| _ga | This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners._ga | 730 Day |
| _gat_UA-nnnnnnn-nn | This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. | Session Cookie |
| _gid | This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited._gid | 1 Day |
| _gat | This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes._ga | Session Cookie |
| _gclxxxx | Google conversion tracking cookie | 90 Days |
| JSESSIONID | This domain is controlled by New Relic, which provides a platform for monitoring the performance of web and mobile applications. | Session Cookie |
Targeting Cookies
| Cookie Name | Description | Duration |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 90 Days |
| AnalyticsSyncHistory | This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. | 30 Days |
| YSC | YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. | Session Cookie |
| bscookie | This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. | 731 Days |
| lang | This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. | Session Cookie |
| __cf_bm | This is a CloudFoundry cookie | Session Cookie |
| bcookie | This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. | 731 Days |
| lidc | This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. | 1 Day |
| UserMatchHistory | This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. | 30 Days |
| lang | This domain is owned by LinkedIn, the business networking platform. This sub-domain is connected with LinkedIn's marketing services that enable website owners to gain insight into types of users on their site based on LinkedIn profile data, to improve targetng. | Session Cookie |
| test_cookie | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange | Session Cookie |
| VISITOR_INFO1_LIVE | This cookie is used as a unique identifier to track viewing of videos | 180 Days |
| li_gc | This domain is owned by LinkedIn. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. | 729 Days |
| CONSENT | YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. | 5995 Day |
SOCIAL MEDIA
We use the following social media platforms; Facebook, Twitter, LinkedIn and YouTube. When you contact us through these platforms, including via private message, you should be aware that these platforms may collect your data. Please refer the individual service providers’ Privacy Policies (linked) for more information.
PEOPLE WHO CALL US
When you call our offices, we do not automatically record caller identification details, however, we may on occasion do this – we will let you know if this is the case.
WEBSITE & SECURITY PERFORMANCE
We use a third-party service to help maintain the security and performance of our website. To deliver this service it processes the IP addresses of visitors to our website.
PEOPLE WHO EMAIL US
Any email sent to us, including any attachments, may be monitored and used by us for reasons of security and for monitoring compliance with office policy. Email monitoring or blocking software may also be used. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law.
Any information you provide to us, including in any footer or attachments, in an email may be used in conjunction with any of our stated business purposes. If you do not intend this to happen, you must make clear to us your expectations. We do not encrypt emails as a matter of policy.
PEOPLE WHO MAKE A COMPLAINT TO US
We take any complaints we receive very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. When we receive a complaint, we make up a report containing the details of the complaint, which we sometimes term a ‘non-conformance’. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide.
We will keep personal information related to complaints for 3 years.
JOB APPLICANTS, CURRENT & FORMER EMPLOYEES
When individuals apply to work with us, we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example where we want to take up a reference or obtain a ‘disclosure’ from the Criminal Records Bureau, we will not do so without informing them beforehand unless the disclosure is required by law.
Personal information about unsuccessful candidates will be held for 12 months after the recruitment exercise has been completed; it will then be destroyed or deleted. We may retain anonymised statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.
YOUR RIGHTS
You have fundamental rights over the data you share with us. These are explained in detail on the Information Commissioner's Website, and we are committed to making it as simple as possible for you to exercise them.
- You may exercise your right to access, erasure or rectification by contacting us to make a request. We encourage you to complete and return a Subject Access Request form, but you may choose to make the request in another format.
- You have the right to request copies of your data, which we will provide in a suitable format.
- You have the right not to be subject to an automated decision which may have a significant impact on you.
- You have the right to object to our processing your data, and if you are unsatisfied with our response, complain to the ICO.
OUR PURPOSE FOR COLLECTING DATA
We have to hold the details of the people who contact us in relation to our products and services in order to provide them. However, we only use these details to provide the service the person has requested and for closely-related purposes. Any personal data relating to you will be used and recorded by us in accordance with current data protection legislation and this privacy statement.
For example, we might use information about people who have purchased our products/services to carry out a survey to find out if they are happy with the level of service they received.
Emails submitted on our live chat may be used for marketing purposes unless directed not to by the customer.
If we intend to do anything else with your data, we will inform you at the point of consent.
The lawful basis upon which we will collect and store your data is:
- Explicit Consent – You have agreed that your personal data will be processed. You have the right to withdraw this consent at any time.
- Contractual Necessity – Your personal data will be processed because it is necessary in order to enter into or perform a contract with you.
- Compliance with Legal Obligations – Your personal data will be processed on the basis that we have a legal obligation to perform such processing.
To protect your data we have put in place security precautions which include but are not limited to:
- Physical and administrative security measures at our offices.
- Firewalls and continuously updated antivirus programmes.
- Encrypted storage.
Our company data is stored in the following locations:
- On servers in our office in Northern Ireland.
- Across several sites connected by a secure communications system.
- By a secure cloud storage provider with data centres in the United States.
For the purposes of GDPR, we are resident in the United Kingdom, and regulated by the Information Commissioner’s Office. We do not carry out any data processing outside of the EEA; if that changes, we will inform you.
We do not share data with third parties, other than those whose services we use for payroll, marketing, and IT. Where we transfer any data to a third party, we have put in place all necessary controls to ensure the protection of privacy.
Your data, including the records of any transaction you make with us, will be stored in accordance with our retention policy, and depending on the nature of the record. For example, financial records will be retained for 7 years as this is common practice.
Third Party Processors
Our carefully selected partners and service providers may process personal information about you on our behalf as described below:
“Digital Marketing Service Providers
We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information.
Our appointed data processors include:
(i)Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.”
If you have any questions about us or how we handle your data, please contact us at accounts@seatingmatters.com.
PRIVACY NOTICE
We have endeavoured to take all precautions necessary under the EU General Data Protection Regulations in order to protect the data which we process.
Seating Matters reserves the right to modify or amend this Statement at any time. The effective date will be displayed at the end of this statement. To keep visitors informed, Seating Matters will notify users of changes to our Privacy Statement by prominently identifying the modification date at the end of this statement.
Last modified 18 May 2018