Privacy Policy

Introduction

One Stop Group Ltd takes your privacy very seriously and is committed to making sure its protected.

In this document, we will explain how we collect, use and protect your personal data. We will also explain what rights you have with regards to your personal data and how you can exercise those rights.
 

Who are we?

One Stop Group Ltd T/A One Stop Sourcing & Supply Co – Registered Office Leytonstone House, London E11 1GA

Our Personal data protection manager/Data Protection Officer and data protection representatives can be contacted directly here:

DPO@osssc.com
 

Collection of personal data

We collect personal data from you for one or more of the following purposes:
  • To provide you with information that you have requested or which we think may be relevant to a subject in which you have demonstrated an interest;
  • To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services;
  • To fulfil a contract that we have entered in to with you or with the entity that you represent;
  • To ensure the security and safe operation of our websites and underlying business infrastructure, and to manage any communication between you and us.
  • Information that you provide by filling in forms on our site www.osssc.com (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with our site.
  • If you contact us, we may keep a record of that correspondence.
  • Details of transactions you carry out through our site and of the fulfilment of your orders.
  • Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

IP addresses

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns and does not identify any individual.
 

Disclosure of your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may disclose your personal information to third parties:

  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or terms and conditions of supply and other agreements; or to protect the rights, property, or safety of One Stop Group Ltd, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Cookies and Google Analytics

Type Cookie Name Sample Contents Created Upon Expires Purpose
1st ASP.NET_SessionId kyaait45ol5s5545m5c0sj45 Entry to web site At end of session Session ID
1st ShopfrontCartID 41b9ab8a-01ac-4595-a3bb-a03f013104d5 Entry to web site 30 days Persistent cart ID
1st .ASPXAUTH ECDCC84526A1FDDF9FF099AC684350CF8
B25C5B2DF1BF116F8A7D88897DBE5B43
EEA70EBC83FB3B72F22A9E43AC2F6EDFE
5BE8AD6117FA35510B180EF2FFC019254
B10FAB0A4F5C085D26F0F323FDF317426
520FD622911D1AC37BF230B0C09E9C7CD
952F9DD1C353253040198EA43766AF697
9FF477B1269402DD8B23703D10A6710C2
3A1530ABB930F9E91C92D68425E3452A
A3542BACF2FFF50FCC2F27F9934A05FDD
Login At end of session or 30 days if "remember me" ticked Authorised login

Google Analytics Cookies


Type
Cookie Name Sample Contents Created Upon Expires Purpose
1st __utma 111872281.132638501.1335461433.1335461433.1335461433.1 Entry to web site 2 years Usage tracking
1st __utmb 111872281.1.10.1335461433 Entry to web site 30 minutes Usage tracking
1st __utmc 111872281 Entry to web site At end of session Usage tracking
1st __utmz 111872281.1335461433.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none) Entry to web site 6 months Usage tracking

Google Adwords Cookies

Type Cookie Name Sample Contents Created Upon Expires Purpose
3rd (doubleclick.net) id 22fa094859019999||t=1335519999|et=999|cs=002213fd482ccdda688b389999 Entry to web site 2 years Unknown

OrderWise Cookies

Type Cookie Name Sample Contents Created Upon Expires Purpose
1st ow_cookie_category_functional true Cookie Policy acceptance 90 days Cookie Control
1st ow_cookie_category_marketing true Cookie Policy acceptance 90 days Cookie Control
1st ow_cookie_category_performance true Cookie Policy acceptance 90 days Cookie Control
1st ow_cookie_seen true Cookie Policy acceptance 90 days Cookie Control
1st XSRF-TOKEN eyJpdiI6ImswQ25YMjFDV3VZeVl2SUs4Q0hPWVE9PSIsInZhbHVlIjoicFpiTDUyNVNycFwvNEY1YXlvUTcxWHN2SzVKaVlyc2ppZk1vMFg5MWJNWUVOOWp6YmtOUUFpY05XOHorbkZ0NnM3YlV0NDNaMG9lNitcL2hBQXo0TEcwdz09IiwibWFjIjoiYjFiMzNmN2E1MzVkYWZkZjQwMzEyYjA5MzllNjg0OWMxMzhiZmY1Yzg0MDJiMjU0MzM2MWJkY2ZjNDdmZjc0NCJ9 Entry to web site 2 hours Security
1st ow ccL5ENs7gGt4Xu1RjIktphPb3gcZJkQ9eytBzufK Entry to web site End of session User Login

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who works for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
 

Security measures

We have what we believe are appropriate security controls in place to protect personal data. Risk assessment, including assessing risks to the rights and freedoms of data subjects.

We do not, however, have any control over what happens between your device and the boundary of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. We accept no liability in respect of breaches that occur beyond our sphere of control.
 

Your rights as a data subject

As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email dpo@osssc.com or use the information supplied in the Contact us section below. In order to process your request, we will ask you to provide two valid forms of identification for verification purposes. Your rights are as follows:
  • The right to be informed
  • As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
  • The right of access
You may request a copy of the personal data we hold about you for a small charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you as well as the following information:
  • The purposes of the processing
  • The categories of personal data concerned
  • The recipients to whom the personal data has been disclosed
  • The retention period or envisioned retention period for that personal data
  • When personal data has been collected from a third party, the source of the personal data
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If requests are frivolous or vexatious, we reserve the right to refuse them. If answering requests is likely to require additional time or occasions unreasonable expense (which you may have to meet), we will inform you.


The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.


The right to erasure (the ‘right to be forgotten’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.


The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:

The accuracy of the personal data is contested


Processing of the personal data is unlawful
We no longer need the personal data for processing, but the personal data is required for part of a legal process

The right to object has been exercised and processing is restricted pending a decision on the status of the processing


The right to data portability
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
 

The right to object
You have the right to object to our processing of your data where

Processing is based on legitimate interest;
Processing is for the purpose of direct marketing;
Processing is for the purposes of scientific or historic research;
 

Contact Us

Any comments, questions or suggestions about this privacy policy or our handling of your personal data should be emailed to dpo@osssc.com

Alternatively, you can contact us at our HQ using the following postal address or telephone numbers:

One Stop Group ltd
Homefield Road East
Haverhill
Suffolk
CB9 8QP

Telephone 01440 712060
Company No. 05937062 Registered in England

Our telephone switchboard is open 8:00 am – 5:00 pm GMT, Monday to Friday. Our switchboard team will take a message and ensure the appropriate person responds as soon as possible.
Processing involves automated decision-making and profiling.
 

Complaints

Should you wish to discuss a complaint, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner.

Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to a supervisory authority within the European Union. For the United Kingdom, this is the Information Commissioner’s Office (ICO), who is also our lead supervisory authority.

Its contact information can be found at https://ico.org.uk/global/contact-us/