GDPR Policy

1Who we are and what we hold

GIBIDI UK Limited is the data controller. We are registered in England and Wales, company number 11433262, at Unit 5, Spelmonden Farm, Spelmonden Road, Goudhurst, Kent TN17 1HD. We are registered with the Information Commissioner's Office under registration reference ZB135484.

We hold data about our trade customers and suppliers, and about people at companies that have expressed an interest in us or used our services. We collect it through business contact, when quoting for or completing a supply contract, when someone subscribes to our updates, or when we meet and exchange business contact details.

We keep only what we need in order to deal with you: name, job role, company name and address, company email address, main company telephone number and work mobile.

2How we market to you

We may contact you in your professional capacity by email or post with product news, offers, technical updates and training dates. Because we sell only to businesses, we rely on our legitimate interests and on the rules for corporate subscribers under PECR.

We will only do so where:

• we have an existing professional relationship with you;
• we have a contract or financial arrangement with you; or
• we reasonably believe the information is relevant and useful to your job role.

We keep the volume of marketing reasonable and relevant, and every marketing email carries an unsubscribe link.

3What we do not do

• We do not sell your data, and we do not share it with anyone else for their own marketing.
• We do not buy or use marketing lists from third parties, regardless of any opt-in they claim to hold.
• We do not send marketing by cold call, automated call, text message or fax.

We do share data with the service providers who help us run the business, such as couriers, payment providers, our IT and email providers and the manufacturer for warranty registration. They act on our instructions under contract and cannot use it for their own purposes. Section 6 of our Privacy Notice lists them in full.

4Opting out

You can stop our marketing at any time. Use the unsubscribe link in any marketing email, email gdpr@gibidi-uk.com, or write to GIBIDI UK Ltd (GDPR), Unit 5, Spelmonden Farm, Spelmonden Road, Goudhurst, Kent TN17 1HD.

We will not contact you again for marketing by that method, and we will remove you from our active marketing lists. We keep a minimal suppression record so that we do not add you back by mistake.

Opting out of marketing does not stop messages we need to send about your orders, account, deliveries or warranty.

5Your rights

You have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent where we rely on it. You can object to direct marketing at any time.

To make a request, email gdpr@gibidi-uk.com. We will respond within one calendar month and there is no charge in normal circumstances.

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

6Accuracy, security and breaches

We do our best to keep your information accurate and up to date. Please contact us if anything needs correcting.

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, unauthorised use, disclosure or access, and we review our data and processes regularly.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to you, we will also tell you directly, without undue delay.

7Changes to this policy

Any changes to this policy will be posted on this page, and where the change is significant we will tell you by email. Please check this page from time to time for updates.