Magnavale Data Privacy Policy

1. Introduction

Magnavale Ltd and its subsidiaries (“Magnavale”) are committed to protecting your personal data and being transparent about how we process it. We are registered as a Data Controller under the Data Protection Act 2018 with registration numbers:

• Magnavale Limited: Z1725962
• Magnavale Scunthorpe Ltd: ZB875225
• Magnavale Chesterfield Ltd: Z1725962
• Magnavale Warrington Ltd: ZB875027
• Magnavale Easton Ltd: ZB501665

As a Data Controller, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). This privacy notice is issued in accordance with GDPR Articles 13 and 14 to provide clear and accessible information about how and why we process your personal data.

2. Data Protection Officer

Magnavale has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance.

Contact Details:
Data Protection Officer
Park Rd, Holmewood, Chesterfield, S42 5UY
📧 Email: gdpr.enquiries@magnavale.co.uk

3. Your Personal Data and Its Processing

3.1 What Personal Data We Collect

We collect, process, and store various types of personal data, including but not limited to:

A. General Personal Data

• Identification Information: Name, title, date of birth, gender.
• Contact Information: Home and work address, email, phone number.
• Employment Information: Job title, employer details, work contact information.
• Financial Information: Payment details, billing address, transaction history.
• Communication Data: Any correspondence you send to us, including emails, phone calls, and feedback.

B. Technical Data

• Device Information: IP address, browser type, operating system, device identifiers.
• Usage Data: Information about how you use our website, services, and interactions with us.
• Cookies & Tracking Technologies: Preferences and browsing behaviour on our website.

1. Special Category & Sensitive Data (only processed where legally justified)

• Health Data: Information about physical or mental health (e.g., workplace health assessments, accident reports).
• Criminal Convictions & Offences Data: Processed where required by law (e.g., background checks).
• Diversity Data: Racial or ethnic origin, religious beliefs, or other special category data, where required for regulatory compliance or workplace equality monitoring.

3.2 How We Collect Your Data

We collect your data through:

• Direct interactions (e.g., website forms, email, phone calls, employment applications).
• Automated means (e.g., website analytics, cookies).
• Third-party sources (e.g., background checks, credit reference agencies, regulatory authorities).

3.3 Legal Basis for Processing

We only process personal data when legally justified, based on:

• Consent – You have given clear permission.
• Contractual Necessity – Processing is required to fulfill a contract.
• Legal Obligations – Processing is necessary to comply with laws and regulations.
• Legitimate Interests – Processing is required for business purposes unless overridden by your rights.

4. How Long We Keep Your Data

We retain personal data in accordance with Magnavale’s Record Listing and applicable legal obligations. Factors influencing retention include:

• The nature and sensitivity of the data.
• The risk of harm from unauthorized use or disclosure.
• Legal, regulatory, or business requirements.

For more details, contact: gdpr.enquiries@magnavale.co.uk

5.Your Rights as a Data Subject

You have the following rights under UK GDPR regarding your personal data:

5.1 Right to Be Informed

You have the right to receive clear and transparent information about how your data is used. Our privacy notices provide this information.

5.2 Right of Access (Data Portability)

You may request a copy of the personal data we hold about you. We will respond within 30 days.
📧 To request access, contact: gdpr.enquiries@magnavale.co.uk

5.3 Right to Rectification

If your data is incorrect or incomplete, you have the right to request corrections.
📧 To request rectification, contact: gdpr.enquiries@magnavale.co.uk

5.4 Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your data where appropriate. Some requests may not be granted if legal or regulatory obligations require us to retain certain data.
📧 To request erasure, contact: gdpr.enquiries@magnavale.co.uk

5.5 Right to Restrict Processing

If you dispute the accuracy of your data or object to its use, you may request a temporary restriction on processing.
📧 To request restriction, contact: gdpr.enquiries@magnavale.co.uk

5.6 Right to Object

You may object to:

• Direct Marketing – Opt out at any time.
• Processing Based on Legitimate Interests – If we cannot justify continuing, we must stop processing.
  📧 To opt out, contact: gdpr.enquiries@magnavale.co.uk

5.7 Withdrawing Consent

If we process your data based on consent, you can withdraw it at any time.

6. Data Sharing & Transfers

We do not sell or rent personal data. However, we may share data with:

• Service Providers (e.g., payment processors, IT providers).
• Regulatory Authorities (if required by law).
• Business Partners (when necessary for service delivery).

If data is transferred outside the UK, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

7. Cookies & Tracking Technologies

We use cookies for website functionality, analytics, and marketing. You can manage cookie preferences via your browser settings.

8. Exercising Your Rights, Queries & Complaints

For questions or to exercise your rights, contact:
📧 Email: gdpr.enquiries@magnavale.co.uk
📍 Address: Data Protection Officer, Park Rd, Holmewood, Chesterfield, S42 5UY

9. Complaints to the Information Commissioner’s Office (ICO)

If you believe we have mishandled your data, you have the right to lodge a complaint with the ICO:
🌍 Website: www.ico.org.uk