1. Milehouse Management Ltd t/a GMAutoflow (thereafter known as GMAutoflow) makes a commitment to protecting your privacy and promises only to use information collected about you in accordance with our Privacy Policy.
2. GMAutoflow is registered with the Information Commissioner in accordance with the General Data Protection Regulation (GDPR). Registration no. ZA474836.
3. This policy has been reviewed and enhanced to comply with GDPR which comes into effect 25th May 2018.

We take our commitment to your privacy seriously, and we treat any information you provide to us with care. As part of this commitment, GMAutfoflow has appointed a Data Protection Officer who is registered with the UK supervisory authority, the Information Commissioner’s Office (ICO).

Headings used in this privacy policy are for guidance only.

By visiting www.fountainsofteners.co.uk ("our website”) or by placing orders over the phone you are accepting and consenting to the practices described in our privacy policy, which is available below:

PRIVACY POLICY

We are committed to protecting your privacy and promises only to use information collected about you in accordance with our Privacy Policy below:

WHO WE ARE

• We are Milehouse Management Ltd t/a GMAutoflow ("GMAutoflow”, "we”, "us”, or "our”), a company registered in England and Wales (Company No. 4913708), with a registered office at Poplars, Newpound, Wisborough Green, West Sussex RH14 0EJ. We are registered with the Information Commissioner in accordance with the General Data Protection Regulation (the "Act”, Data Protection Registration no. ZA474836. For the purposes of the Act we are the data controller of your personal data.

WHAT INFORMATION WE COLLECT

• When you place an order with us, or interact with our websites we may ask you for certain information and you may submit personal data to us (for example your name, phone number, postal address, email address, contact and bank / credit card details).
• We may also record which products you are interested in (browse history) and which products you purchase as well as customer traffic patterns and site use.

• Some examples of how information may be collected by us:
  • Information you provide us: we receive and store information that you submit when using our website or that you provide us in any other way (for example by email or telephone). This information may be provided when ordering from us (via our website or by telephone); entering competitions; registering an account on our website; accessing your account; querying order status; or by submitting text/photo/video reviews of us and our products.
  • Information automatically provided: we receive, process and store certain information whenever you interact with our website. Like many websites, we use "cookies” (see the ”Cookies” section below) and obtain certain information automatically when your web browser accesses our website. Information automatically received by us includes the IP address that your computer uses to connect to the internet; your computer, browser, operating system and internet connection details; purchase history ; path analysis of your journey through our website; and products you searched for. We may also use software tools to measure and collect session information, length of visits to certain pages, repeat visits and page interaction information (such as clicks).
  • Email communications: to help us make our email newsletter more useful and interesting for our customers we attempt to receive a confirmation when you open and click on email newsletters from us (if your email software/service supports this option). If you no longer wish to receive email newsletters, please see the section below entitled ‘your rights’.
  • Telephone calls: We regularly monitor and record telephone calls for training purposes and to improve the quality of our service to you.
  • Information from 3rd parties: we may receive information about you from other sources and add this to our account information. For example, we update address information using data from third parties.

HOW WE USE THIS INFORMATION

• Information is kept securely in accordance with our internal security policy and may be used to:
  • process and deliver your order via the services of our nominated fulfilment partner/carrier ; by placing an order you are giving permission to pass on the necessary details to our nominated fulfilment partner/carrier to enable delivery of your order. In order to dispatch your order, we will pass only the necessary data to the appropriate carrier for delivery & tracking;
  • provide customer support services to you;
  • provide you with an up to date, efficient, and reliable service;
  • help prevent fraud (e.g. we may check payment card details with our credit agency, who may keep a record of that information, and reserve the right to refuse orders on that basis. Your credit rating can be checked for a nominal fee with the main UK agencies Equifax and Experian);
  • open and run your customer account;
  • administer prize draws; or
  • provide a more personal shopping experience.

By placing an order over the website or by phone, accepting the terms and conditions and/or submitting your data to us you agree to this use. This meets the EU conditions for lawful processing and enables us to enter into and fulfil the contract of sale with you the data owner.

DATA SECURITY

• We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
• Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
• Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
• We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

WHO ELSE MAY SEE YOUR DATA

• In order to fulfil your order we may need to disclose some of your information to our delivery partners including but not limited to; Royal Mail, Parcelforce, DPD, UPS, FedEx.
• GMAutoflow have engaged Sage Pay to act as it’s payment gateway provider. Sage Pay host the payment fields on our website which means they collect full payment details and manage the entire payment process. GMAutoflow do not store full payment details at all, but receive partial payment details back for internal tracking only, it is not possible to process a payment with the details received back. This ensures PCI compliance and supports the core GDPR concept of privacy by design. 
• We may disclose your personal information to third parties:
  • In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
  • If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions and other agreements; or to protect our rights, property, our safety, or the safety of our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

THIRD PARTY LINKING

• Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

YOUR RIGHTS

Under the terms of this policy and in accordance with the GDPR legislation you have the following rights as regards your personal data:

• Right to be informed – you have the right to be informed of the collection and use of your personal data. Our privacy policy is a core part of satisfying this right.

• Right of access- you have the right to know what personal data we have collected and what we intend to do with the data. The ways we may use your data are listed above in the section entitled ‘How We Use This Information’. If you wish to request details of the personal data we hold about you, this can be made by any communication method on our website or shown below but to aid the efficiency of the request, we have set up a dedicated email address which is privacy@gmautoflow.co.uk.

• Right to withdraw consent to marketing or any data processing - you have the right to withdraw your consent to Fountain Softeners using your data in all or specific ways. You can opt out of marketing communications at any time by selecting the option on your customer account under marketing preferences. There is also an ‘unsubscribe’ link contained at the end of every email communication. If you choose to withdraw all consent to any processing or usage of personal data then please be aware that we will be unable to fulfill your orders. 

• Right to rectification- if you believe that the information we hold about you may be incorrect then you have the right to request that is updated and amended. Please use your customer account to complete any changes or contact customerservice@gmautoflow.co.uk.

• Right of erasure- you can choose what personal data you wish us to hold and have the right to remove this data in full or in part at any time. You can update your customer account data directly or you can contact us at customerservice@gmautoflow.co.uk for assistance.

• Right to be forgotten- you have the right to request that any personal data that could be used to identify you and that is held by GMAutoflow is permanently erased. This is an intractable request and once it has been made there is no way to reverse it. If you wish to have your data permanently deleted then please contact us at customerservice@gmautoflow.co.uk for assistance. Please be aware that GMAutoflow is legally obliged to retain documents/records for a period specified by law, please see retention section below. If you make a request to have your data deleted we will inform you of any documentation we are legally obliged to retain and explain the timeline. After this has expired we commit to deleting this data too. We will action all requests for data deletion as quickly as possible but please allow a period of 30 days for the request to take full effect.

• Right to object to automated decision making- GMAutoflow uses automation for some order processing for example; fraud checking of orders. If you wish to object to automation of this data processing then please be aware that we may not be able to process your order.

• Consent- GMAutoflow will specifically request your consent to use your personal data in the following ways:

• By placing an order you are accepting our terms and conditions and consent to use the data you have provided to fulfill your order. GMAutoflow will only collect the data required to support and fulfill your order, if you choose not to give your consent then we will not be able to process your order.
• When creating a customer account and placing an order we will offer you the opportunity to opt in to our marketing offers & emails. You may opt out of marketing communications at the point of account creation or at any subsequent time by selecting/deselecting the boxes in your customer account/email preferences. 

RETENTION OF DATA

One of the core principles of GDPR is storage/retention of data and the regulation states to keep data only for as long as reasonably required. The regulation also states if there is a legal or statutory obligation to retain data, this supersedes GDPR for the period of legal/statutory obligation.

GMAutoflow has reviewed all of its legal obligations and determines the following pieces of statute are applicable to data retention:

• Companies Act 2006
• HMRC Record Keeping Requirements

Adequate financial records will need to be kept for six complete financial years. To maintain adequate financial records, details of customer orders and supporting information will need to be kept.

After these periods, all Personally Identifiable Information will be removed.

WHERE WE STORE YOUR PERSONAL INFORMATION

• The primary location for data stored by GMAutoflow and used for the processing of orders is in the UK where only authorised personnel have access to the data.
• The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfillment of your order and the provision of support services. By submitting your personal information, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

COOKIES

• Cookies are a technology which can be used to provide you with tailored information from our website. A cookie is an element of data that our website sends to your browser, which may then store it on your system. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it.
• If you do not wish for us to use cookies when you use our website please adjust your internet browser settings to not accept cookies. Please note that cookies allow you to take full advantage of the services we provide through our website and so we recommend that you leave them turned on in order to get the best browsing experience on our website.
• We use the cookies for the following purposes:
  • site administration;
  • operation of our website. These include, for example, cookies that allow you to log into our website or use the website’s shopping basket;
  • recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily;
  • completing the user’s current activity;
  • reviewing browsing history in order to recommend more suitable products and more relevant marketing email communications;
  • Our websites use cookies to keep track of how you use the shopping cart. This information may be used to offer assistance if you seem to be having problems, or to send special offers that relate to the products viewed, or to help us improve the Website. We will not sell the information to third parties;
  • research and development.
• Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
• To find out more about cookies including how to manage your cookie settings, please visit www.allaboutcookies.org.

MARKETING COMMUNICATIONS & OTHER TECHNOLOGIES USED

The following list is not exhaustive but contains GMAutoflow and associated brands current core partners:

• Newsletter - When ordering from GMAutoflow, and creating your customer account, entering competitions or otherwise interacting with us we will give you the opportunity to subscribe to our email newsletter. You may opt in and out of marketing communications at the point of account creation or at any subsequent time by selecting/deselecting the boxes in your customer account/email preferences. 
• Actinic/Oxatis - This service provider stores information about your account, your orders, and products which interest you. Personal data may be used to send triggered emails, such as cart abandonment and to personalize marketing, for example, to suggest products related to your previous purchases. It may also be used to send you special offers and product news by email. 
• Google Analytics - Our websites use Google Analytics, a web analytics service provided by Google, Inc („Google"). Google Analytics uses cookies – files which are stored on your computer and which allow an analysis of your use of the website. The information generated by these cookies is generally transferred to a Google server in the USA and stored there. This site uses IP anonymisation, meaning that your IP address is abridged within the European Union and any contracted states in the European Economic Area before it is sent to the USA. Only in exceptional cases with the full IP address be transferred to the Google server then abbreviated there. Google uses this information on behalf of the website owner to analyse your use of the website, compiling reports on website activity and to provide other services related to website usage and internet usage for the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly. However, this may result in your not being able to fully utilise all the functions on our websites. If you wish, you can also prevent Google from collecting and processing the data (including your IP address) by downloading and installing the browser plug-in available via this link Google Browser Plugin.
• Google Adverts - Our websites use Google Remarketing, a service provided by Google to integrate advertisements into websites. For this purpose, information about your browsing behaviour is collected anonymously when you visit our websites and stored on your computer with the help of cookies. This information helps third-party advertisers such as Google to display appropriate ads on web pages. You may opt out of Google’s use of cookies by clicking on the following Google Ads Privacy & Terms. Further information is available regarding Googles privacy at Google Privacy Policy.

LAWFUL BASIS FOR PROCESSING DATA

There are six lawful bases for processing personal data within the GDPR regulation, details of which can be found here . The following are the bases applicable to GMAutoflow :

• Contract – GDPR regulation states the contractual lawful basis for processing data is "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.” This basis will be used in the fulfilment of orders placed via our websites.
• Consent – GDPR regulations state Consent is "the individual has given clear consent for you to process their personal data for a specific purpose.” This basis will be used in relation to sending direct marketing communications where consent has been freely given for the specific purpose, is an affirmative step and confirmation retained e.g. consent specifically given to receive our newsletter.
• Legitimate Interest – GDPR regulations state "the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.” This basis will be used for the protection of our customers & employees as well as promoting our products & services e.g. for relevant, targeted marketing emails to existing customers.

DATA PROTECTION IN ACTIVE OPERATION

GMAutoflow take their obligation under GDPR very seriously which is why a Data Protection Officer has been appointed. In addition to this, a comprehensive training programme has been constructed and rolled out to our team. This supports our commitment to protect our customer’s data and deliver a professional service.

YOUR CONCERNS

• If you have any questions or comments about privacy or our privacy policy, or if you already have submitted information that you do not wish us to have or if you think that we have cookies or data about you that you do not want us to use or that is incorrect please contact us at the address below, by telephone ( on 01483 701970) or email (at privacy@gmautoflow.co.uk) and the information will be corrected as soon as possible or removed from our database as you request.
• GMAutoflow has a dispute resolution mechanism. If you think we have not followed our privacy policy in some way, please contact us and we can help you resolve your concern.
• If we are unable to resolve your dispute, you can raise your concern directly with the Information Commissioner’s Office whose website can be found here.

CHANGES TO OUR PRIVACY POLICY

• Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

CONTACT US

• Should you have any queries relating to our privacy policy you can contact us by:
  • email to privacy@gmautoflow.co.uk
  • post- FAO The Data Protection Officer, GMAutoflow, Poplars Barn, Newpound, Wisborough Green, West Sussex RH14 0EJ
  • by telephoning (UK) 01483 701970