01666 504889

Data Retention Policy

Cotswold Steel Stockholders Limited, a company registered in England Wales under company number 01882861 of Units 2, Babdown Aerodrome, Tetbury, Gloucestershire, GL8 8YL is a data controller and responsible for the processing of personal data (referred to as “we”, “us” or “our” in this document).

Except as otherwise permitted or required by applicable law or regulation, we only retain personal data for as long as necessary to fulfil the purposes we collected it for, as required to satisfy any legal, regulatory, insurance, accounting, or reporting obligations, or as necessary to resolve disputes. 

To determine the appropriate retention period for personal data, we consider the nature and sensitivity of personal data, the amount of personal data, the potential risk of harm from unauthorised use or disclosure of personal data, the purposes for processing the personal data, whether we can fulfil the purposes of processing by other means, and any applicable legal requirements.

This policy covers all data that we hold or have control over. This includes physical data such as hard copy documents, contracts, notebooks, letters and invoices. It also includes electronic data such as emails, electronic documents, audio and video recordings.

Our standard data retention period is 7 years.

  • Information about users of our service (customers):
    • personal details including name and contact information
    • where customers access services via a website or app, device details, user activity details and user preferences, browser history details, location details and electronic identification data including IP address and information collected through cookies
    • contractual details including products and services provided
    • marketing communication preferences

 

  • Information about employees, workers, contractors and job applicants:
    • personal details including name and contact information
    • date of birth
    • gender
    • marital status
    • beneficiary and emergency contact information
    • government identification numbers
    • education and training details
    • bank account details and payroll information
    • wage/fee and benefit information
    • performance information 
    • employment details
    • training information
    • special categories of personal data, including information that relates to an employee’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetics or health, and sex life or sexual orientation

 

  • Information about suppliers:
    • name and contact information
    • financial and payment details

 

We reserve the right to amend this Data Retention Policy from time to time consistent with GDPR and other applicable data protection requirements.

Effective Date: 31st August 2023
Last modified: 31st August 2023