Privacy Policy
Privacy Policy & Cookies
Introduction
One Stop Group Ltd takes your privacy very seriously and is committed to making sure its protected.
In this document, we will explain how we collect, use and protect your personal data. We will also explain what rights you have with regards to your personal data and how you can exercise those rights.
Who are we?
One Stop Group Ltd T/A One Stop Sourcing & Supply Co – Registered Office Leytonstone House, London E11 1GA
Our Personal data protection manager/Data Protection Officer and data protection representatives can be contacted directly here:
DPO@osssc.com
Collection of personal data
We collect personal data from you for one or more of the following purposes:
- To provide you with information that you have requested or which we think may be relevant to a subject in which you have demonstrated an interest;
- To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services;
- To fulfil a contract that we have entered in to with you or with the entity that you represent;
- To ensure the security and safe operation of our websites and underlying business infrastructure, and to manage any communication between you and us.
- Information that you provide by filling in forms on our site www.osssc.com (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with our site.
- If you contact us, we may keep a record of that correspondence.
- Details of transactions you carry out through our site and of the fulfilment of your orders.
- Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
IP addresses
- We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns and does not identify any individual.
Disclosure of your information
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may disclose your personal information to third parties:
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or terms and conditions of supply and other agreements; or to protect the rights, property, or safety of One Stop Group Ltd, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Cookies and Google Analytics
|
Type
|
Cookie Name
|
Sample Contents
|
Created Upon
|
Expires
|
Purpose
|
|
1st
|
ASP.NET_SessionId
|
kyaait45ol5s5545m5c0sj45
|
Entry to web site
|
At end of session
|
Session ID
|
|
1st
|
ShopfrontCartID
|
41b9ab8a-01ac-4595-a3bb-a03f013104d5
|
Entry to web site
|
30 days
|
Persistent cart ID
|
|
1st
|
.ASPXAUTH
|
ECDCC84526A1FDDF9FF099AC684350CF8
B25C5B2DF1BF116F8A7D88897DBE5B43
EEA70EBC83FB3B72F22A9E43AC2F6EDFE
5BE8AD6117FA35510B180EF2FFC019254
B10FAB0A4F5C085D26F0F323FDF317426
520FD622911D1AC37BF230B0C09E9C7CD
952F9DD1C353253040198EA43766AF697
9FF477B1269402DD8B23703D10A6710C2
3A1530ABB930F9E91C92D68425E3452A
A3542BACF2FFF50FCC2F27F9934A05FDD
|
Login
|
At end of session or 30 days if "remember me" ticked
|
Authorised login
|
Google Analytics Cookies
|
Type
|
Cookie Name
|
Sample Contents
|
Created Upon
|
Expires
|
Purpose
|
|
1st
|
__utma
|
111872281.132638501.1335461433.1335461433.1335461433.1
|
Entry to web site
|
2 years
|
Usage tracking
|
|
1st
|
__utmb
|
111872281.1.10.1335461433
|
Entry to web site
|
30 minutes
|
Usage tracking
|
|
1st
|
__utmc
|
111872281
|
Entry to web site
|
At end of session
|
Usage tracking
|
|
1st
|
__utmz
|
111872281.1335461433.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
|
Entry to web site
|
6 months
|
Usage tracking
|
Google Adwords Cookies
|
Type
|
Cookie Name
|
Sample Contents
|
Created Upon
|
Expires
|
Purpose
|
|
3rd (doubleclick.net)
|
id
|
22fa094859019999||t=1335519999|et=999|cs=002213fd482ccdda688b389999
|
Entry to web site
|
2 years
|
Unknown
|
Where we store your personal data
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who works for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Security measures
We have what we believe are appropriate security controls in place to protect personal data. Risk assessment, including assessing risks to the rights and freedoms of data subjects.
We do not, however, have any control over what happens between your device and the boundary of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. We accept no liability in respect of breaches that occur beyond our sphere of control.
Your rights as a data subject
As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email dpo@osssc.com or use the information supplied in the Contact us section below. In order to process your request, we will ask you to provide two valid forms of identification for verification purposes. Your rights are as follows:
- The right to be informed
- As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
- The right of access
You may request a copy of the personal data we hold about you for a small charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you as well as the following information:
The purposes of the processing
The categories of personal data concerned
The recipients to whom the personal data has been disclosed
The retention period or envisioned retention period for that personal data
When personal data has been collected from a third party, the source of the personal data
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If requests are frivolous or vexatious, we reserve the right to refuse them. If answering requests is likely to require additional time or occasions unreasonable expense (which you may have to meet), we will inform you.
The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
The right to erasure (the ‘right to be forgotten’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:
The accuracy of the personal data is contested
Processing of the personal data is unlawful
We no longer need the personal data for processing, but the personal data is required for part of a legal process
The right to object has been exercised and processing is restricted pending a decision on the status of the processing
The right to data portability
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
The right to object
You have the right to object to our processing of your data where
Processing is based on legitimate interest;
Processing is for the purpose of direct marketing;
Processing is for the purposes of scientific or historic research;
Processing involves automated decision-making and profiling.
Contact us
Any comments, questions or suggestions about this privacy policy or our handling of your personal data should be emailed to dpo@osssc.com
Alternatively, you can contact us at our HQ using the following postal address or telephone numbers:
One Stop Group ltd
Homefield Road East
Haverhill
Suffolk
CB9 8QP
Telephone 01440 712060
Company No. 05937062 Registered in England
Our telephone switchboard is open 8:00 am – 5:00 pm GMT, Monday to Friday. Our switchboard team will take a message and ensure the appropriate person responds as soon as possible.
Complaints
Should you wish to discuss a complaint, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner.
Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to a supervisory authority within the European Union. For the United Kingdom, this is the Information Commissioner’s Office (ICO), who is also our lead supervisory authority.
Its contact information can be found at https://ico.org.uk/global/contact-us/