Your privacy and trust are important to us and this Privacy Policy (“Policy”) provides important information about how TM Group Limited (“Company” “we” or “us”) handles personal data.
We are the controller and are responsible for your personal data. This Policy applies to personal data which we process in the course of doing business with you, including when you purchase a product or service from us (collectively, our “Services”). We will also collect personal data provided by you through the Company’s website, even if you are not a customer, for example when you sign up for our newsletter.
Please read this Policy carefully and contact us if you have any questions about our privacy practices or your personal data choices.
[This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.]
It is important that you check back often for updates to this Policy. If we make changes we consider to be important, we will let you know by placing a notice on our website and/or contacting you using other methods such as email.
Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
When someone visits our website we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns (“Aggregated Data”). We do this to find out things such as the number of visitors to the various parts of the site. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity.
For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
We do not collect any Special Categories of Personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
If you fail to provide personal data:
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with Services). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
We use different methods to collect data from and about you including through:
Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns.
Third parties or publicly available sources. In addition to the collection of Technical Data, we may receive personal data about you from various third parties including public records and social media as set out below:
We will only use your personal data when the law allows us to.
Most commonly, we will use your personal data in the following circumstances:
Please note that we may process your personal data without your knowledge or consent, in compliance with data protection rules, where this is required or permitted by law. We do not undertake any automated decision-making or profiling.
Further details on the circumstances in which we share personal data are set out below.
We will collect and store personal data including contact details of our customers and those employees of the customer who are involved in instructing us so that we can provide our Services in accordance with our contract with you.
We may also collect and store personal data about employees of the customer for whom we are providing Services. This information may include names, contact details and/or job role. We are processing this information on behalf of our customer in order to provide them with the Services.
Unless you request us not to do so, we may also contact those employees of the customer who are involved in instructing us on an individual basis about similar services which we offer, this contact may be made by telephone, email or post. We will only do this if it is necessary for our legitimate interests.
Suppliers We will collect and store personal data including contact details of our suppliers and those employees of the supplier who are involved in the delivery of the Services to our customers so that we can receive your goods or services in accordance with our contract with you.
We may also contact you about new business opportunities for us to work together with you and to keep you informed of our activities. We will only do this if it is necessary for our legitimate interests and your interests do not override our interests.
We will collect and store personal data including contact details of third parties with whom we are in contact during the delivery of Services to our customers or discussions relating to prospective customers. We process that information because it is in our legitimate interests to do so in order for us to be able to perform our contracts for our customers or pitch for work from prospective customers. We believe that you would reasonably expect us to process your personal data in this way and that your interests do not override our interests.
We may also contact you about new business opportunities for us to work together with you and to keep you informed of our activities. We will only do this if it is necessary for our legitimate interests and your interests do not override our interests.
Prospective Customers or Prospective Suppliers
We will collect and store personal data including contact details of people who we might do business with as a supplier or a customer. We may collect this information from you when you contact us (including through this website). We will only collect contact information from your website or another third-party website if we have identified you specifically as someone who may be interested in receiving services from us or delivering goods or services to us.
For personal data which is collected on prospective customers or prospective suppliers, we may contact you about new business opportunities for us to work together with you and to keep you informed of our activities. We will only do this if it is necessary for our legitimate interests and your interests do not override our interests.
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the lawful bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific lawful basis we are relying on to process your personal data where more than one basis has been set out in the table below.
You can ask us to stop sending you marketing messages at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a Service purchase or other transaction.
The Company and our third-party providers set and use cookies and similar technologies to store and manage user preferences, deliver targeted advertising, enable content, and gather analytic and usage data. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For further information, please see our Cookie Policy.
The Company shares or discloses personal data when necessary to provide Services or conduct our business operations as described below. When we share personal data, we do so in accordance with data privacy and security requirements. We do not sell any personal data to third parties.
Below are the parties with whom we may share personal data and why:
Whenever we transfer your personal data outside of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data. The UK has adequacy regulations that include:
• Appropriate safeguards in accordance with Article 46 of the GDPR (UK DPA 2018 Section 75) and transfer risk assessments.
Please contact us (see the contact details at the end of this privacy notice) if you want further information on the specific mechanism used by us when transferring your personal data outside of the UK, and see the information here.
We take appropriate steps to ensure that personal data is processed, secured, and transferred according to applicable law.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Our information security policies and procedures are closely aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet our business needs, changes in technology, and regulatory requirements. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We retain personal data for as long as we reasonably require it for legal or business purposes. In determining data retention periods, the Company takes into consideration local laws, contractual obligations, and the expectations and requirements of our customers and suppliers.
When we no longer need personal data or when you request us to delete your information, where this is legal, we will securely delete or destroy it. The length of time that we keep customer and supplier files will depend on the nature of the goods and services provided or received.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of your personal data are available upon request by contacting us via the methods stated at the end of this privacy notice.
We respect your right to access and control your information, and we will respond to requests for information and, where applicable, will correct, amend, or delete your personal data.
10. Children’s Privacy
Our services are not directed at children under 13. If you learn that a child under 13 has provided us with personal data without consent, please contact us.
11. How to Contact Us
Please contact us with any requests related to your personal data. We understand that you may have questions or concerns about this Policy or our privacy practices. Please feel free to contact us in one of the following ways:
Email: GDPR@tmgroup.co.uk
Address: 1200 Delta Business Park, Swindon, SN5 7XZ
