T J Thomas Ltd(company number 1591075 ) is the data controller of your personal data (referred to in this Policy as “T J Thomas Ltd” or “we”).
If you have any questions about your personal data which are not answered by this Policy, please contact our Data Protection Officer:
Post: Data Protection Officer ,T J Thomas Ltd, 1 Derby Buildings, Wavertree Road, Liverpool, L7 3ES.
How we collect your personal data
Information provided by you:
We collect your personal data to give you the best possible experience as a user of our products and services. In general, we collect information from you when you interact with us to, open up an account, visit our website, enter a competition, or contact us with an enquiry or complaint. This covers all channels of communication with us, including over the telephone, email, website, social media and in person.
We’ll collect the following information from you when you request a quote or place an order:
If you enter one of our surveys or competitions, we will collect the following:
Your contact details
Any information that you disclose to us in your responses
If you visit our website www.tjthomas.co.uk:
How we use your personal data
We’ll use your personal data for the purposes outlined below:
To fulfil our contractual agreement to provide you with our products and services:
To deliver our products and services to you according to our contractual agreement
To collect customer payments and manage finance agreements
To comply with our legal obligations, and for the establishment, exercise or defence of legal claims:
To comply with our regulatory requirements, for example those under FCA, HMR&C
To meet our data protection obligations to verify your identity, before we provide you with information relating to your account
To resolve any disputes relating to you renting with us.
For the detection and prevention of crime, including any investigations into potential fraudulent activity
To respond to requests for information from the police and government bodies, to support in criminal investigations
Where we have legitimate business interests:
To respond to customer enquiries and complaints
To manage payment schedules, credit levels and debt collection
To understand customer behaviour, so that we can provide you with products and services that are best suited to your requirements
For management information (MI) reporting purposes, to help us continually improve our offering to our customers
Subject to your marketing preferences, to provide you with information about products and services that we think you’d benefit from, by post, telephone or by electronic means
Where we have your consent:
If you are an existing customer, subject to your marketing preferences, or where you have otherwise expressly consented, we’ll send you relevant information about products and services that we think you’d benefit from. We’ll never sell your data to third parties for marketing purposes.
This information could be sent to you via text, telephone, email or post. You can opt out or update your marketing preferences at any time by contacting us:
Post: Customer Services, 1 Derby Buildings, Wavertree Road, Liverpool, L7 3ES.
Before we open up a rent account for you. We’ll perform checks on the information you provide us with such as employer, current landlord & guarantor.
Calls may be recorded for training and monitoring purposes, and to assist us in the provision of our products and services to you. We also will retain these calls to keep a record of our contractual agreement with you, and to help us investigate any complaints or disputes.
Sharing your personal data
Your personal information may also be shared with any company that is a member of our group of companies, where necessary for internal administrative purposes, corporate strategy, auditing and monitoring and research and development. We may also share your personal information with our group companies where they provide products and services to us that help us to provide products and services to you as our customer.
Your personal data may also be shared with the following categories of third parties:
Debt collection agencies, to help us recover any outstanding debt
Industry regulators, legal and tax services, to help us comply with our legal and regulatory obligations
Distribution Network Operators (DNOs) and the police, should we be required to provide any information in order to support an investigation
Dispute and complaints services, should we need to resolve a complaint with you
IT service providers, to enable us to manage and host our IT platforms
Social media platforms and management tools, to enable us to respond to any communications with you via our social media channels
Independent organisations and charities, such as Citizens Advice, should you choose engage with us or raise a complaint through these channels
We will also disclose your personal data to third parties:
(a) where it is in our legitimate interests to do so to run, grow and develop our business:
i. if we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets;
ii. if T J Thomas Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by T J Thomas Ltd will be one of the transferred assets;
iii. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, any lawful request from government or law enforcement officials and as may be required to meet national security or law enforcement requirements or prevent illegal activity;
(b) to enforce our contract with you, to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity; or
(c) to protect the rights, property or safety of T J Thomas Ltd, our employees, customers, suppliers or other persons.
You can do so by:
Post: Customer Services, 1 Derby Buildings, Wavertree Road, Liverpool, L7 3ES
Where is my personal data stored?
When we do send personal data outside the EEA, we will ensure that appropriate safeguards are in place to protect your data in accordance with European data protection requirements, such as the General Data Protection Regulation (GDPR). These may include:
Sending information to countries which have been deemed as having adequate protection by the EU
Entering into European Commission approved standard contractual arrangements with the third party, or in the case of US based service providers, ensuring they have signed up to the EU-US Privacy Shield (see further www.privacyshield.gov/welcome)
For more information, please contact us by:
T J Thomas Ltd have implemented appropriate technical and organisational measures to protect the confidentiality of the personal data that you entrust us with. We update and test our physical, logical and procedural security controls on an ongoing basis. These include limiting access to your personal data to those who need it and training our employees about the importance of maintaining the privacy and security of your personal data.
How long do we keep this information?
To comply with the statutory retention periods for accounting records, as set by the Companies Act and HM Revenue & Customs (HMRC).
To comply with the retention periods set by the TRAS Fraud Prevention Agency
Where our retention periods are not governed by legislation, our retention policy is based on commercial justifications, which have been set in accordance with the principle of retaining personal data for no longer than is necessary for the purposes for which it is processed. These include:
- To comply with our Supplier Licence Conditions
- To enable us to provide you with our products and services
-To allow us to resolve any disputes or complaints
- For the detection and prevention of fraud
Data subject rights
The following section sets out your rights in relation to your personal data. This includes your rights under the Data Protection Act, in addition to the enhanced rights that you will be entitled to post 25th May 2018, following the coming into force of the GDPR. If you would like to exercise any of your data subject rights, please contact us by:
You have the following rights and choices in relation to your personal data:
2. You have the right to ensure that any information we hold about you is accurate and kept up to date. Please let us know if you would like to update any inaccurate or incomplete records. You are also entitled to the following additional rights under the GDPR. These rights will become effective after 25th May 2018.
3. You have the right to request that we erase your personal data on the following grounds:
Your personal data is no longer necessary in relation to the purpose for which it was collected or processed
If the processing is based on consent, you choose to withdraw your consent and there is no other legal ground for processing.
You object to processing, and there are no overriding legitimate grounds to continue the processing.
Your personal data has been processed unlawfully.
Your personal data must be erased for compliance with a legal obligation.
4. You have the right to request the restriction of processing of your personal data under specific conditions, unless we have a lawful reason to continue, such as for the establishment, exercise or defence of legal claims.
5. You have the right to request a copy of personal data you have provided to us in a structured, commonly used and machine readable format, so that you can transmit this to another organisation. Where technically feasible you can also request that we transmit this data to another organisation.
6. You have the right to object to processing which is based on:
Tasks carried out in the public interest
7. You have the right not to be subject to any decisions made based solely on automated processing, including profiling, which produces legal effects or significantly affects you. Where such decisions are made, you have the right to:
Obtain human intervention
Express your point of view
Obtain an explanation of the decision and challenge it
If you would like to make a complaint, please contact our Data Protection Officer:
Data Protection Officer, 1 Derby Buildings, Wavertree Road, Liverpool, L7 3ES.
You also have the right to lodge a complaint with the supervisory authority, the Information Commissioner’s Office.