Privacy Policy

Introduction

Here at the GGF and subsidiary companies, we are committed to a policy of protecting the rights and privacy of individuals. Protecting your personal information is of high priority for both the staff and management of the GGF and subsidiary companies.

Purpose of Policy

The GGF and its subsidiaries has created this policy to ensure that:

• It complies with GDPR, PCI-DSS, UK PII et cetera and follows good practice.
• Both the PCI DSS and the GDPR aim to ensure organisations keep personal data in a secure way. The PCI DSS focuses on payment card and cardholder data, while the GDPR covers regulation for EU residents’ personal data. The important difference is that GDPR is more general than PCI DSS.
• It is open about how it processes and stores your personal information
• It demonstrates our accountability and responsibility for data protection
• It has implemented a GDPR compliant Subject Access Request (SAR) procedure for responding to all types of data privacy related requests.

Who we we?

Rushworth Inspection Services And Auditing Limited is a registered business in England & Wales with registration number 05332186. The company’s registered office address is 40 Rushworth Street, London SE1 0RB. The company is VAT registered with VAT number 991272205. Rushworth Inspection Services And Auditing Limited is a member of the Glass & Glazing Trade Federation.

The GGF and its subsidiary companies are the main representative organisations for companies involved in all aspects of the manufacture of flat glass and products and services for all types of glazing, in commercial and domestic sectors. The GGF is registered at Companies House as ‘Glass and Glazing Federation’ (hereafter referred to as GGF) as a company limited by guarantee (registration number 04063012) and registered address of Newspaper House, 40 Rushworth Street, London, SE1 0RB. The GGF group of companies comprises the following key legal entities:

• Glass and Glazing Federation Limited (Known as GGF)
• G.G.F. Fund Limited
• GGF Property Limited
• FENSA Limited
• British Fenestration Rating Council Limited (known as BFRC)
• Borough IT Limited
• Installsure Limited (GGFi)
• Rushworth Inspection Services and Auditing Limited (known as RISA).

 

What’s not included?

This policy doesn’t cover other companies or organisations (which advertise our products or services and use cookies, tags and other technology) collecting and using your personal information to offer any relevant online advertisements to you. Please read our cookie policy here (at the end of this policy document) for information about how we use cookies on our websites.

You can connect to other organisations’ websites, apps, products, services and social media from our websites via links. This privacy policy doesn’t apply to how the other organisations may use your personal information.

You’re advised to review their privacy policies before providing your personal data.

How do we collect information about you?

There are different ways in which we collect information about you. This includes when you use any of our websites and when you contact us via email, phone or post. In some instances, they will have a legal basis for us doing so.

What type of information is collected from you?

The GGF and subsidiary companies collect certain personal information about you. These would include your name, business contacts, address, email address, IP address and in certain circumstances, employee details. We might also hold your credit/debit card or bank information to process payments if you purchase a product or service from us and give us your explicit consent to hold such data about you.

How is your information used?

The GGF and its subsidiaries may use your personal data:

• To notify you about changes to our services
• To fulfil our legal obligation under government licence and regulation
• To process financial payments
• To carry out obligations arising from any contracts entered into
• For market research, user trend studies, website user improvements and customer services
• To provide you with obligatory information
• To third parties who undertake services on our behalf in relation to our business operations, or where you have otherwise provided consent for us to do so (e.g. for promotional material)
• To provide you with information, products or services which you have requested or which we believe may be of interest to you
• To seek your views or comments on the services we provide
• To process job applications.

How long is your information retained for?

Your personal information will not be retained beyond what is required and will be held on our system for as long as it is necessary in relation to the purpose for which it was collected or for which it was further processed. The length of time for which we retain your personal information will take into account the legal and contractual requirements that influence the retention period.

Your personal information will be deleted or destroyed within a set time (currently 3 months) after it has been confirmed that it is no longer required to be retained.

Who has access to your information?

The GGF group of companies work with third party service providers, who are a natural or legal person, public authority, agency or body other than the data subject (you), the controller (GGF group of companies), a processing internal or external person or entity who, under the direct authority of the GGF and its subsidiaries or a processor, are authorised to process your data, such as Local Authorities, External Printing and Insurance companies.

Consent

All processing of personal data requires a lawful basis, e.g. Contractual or Legal Obligation, where Consent provides one such lawful basis.

Your consent is considered to be freely given, specific, informed and an unambiguous indication by you, through a statement or by a clear affirmative action, which signifies agreement to the processing of your personal data. For example, depending on the circumstances, valid consent could be provided verbally, in writing, by ticking a box on one of our web pages, by choosing technical settings in an app, or by any other statement or conduct which clearly indicates in this context your acceptance of the proposed processing of your personal data.

Your consent can be withdrawn at any time; however, your right to withdraw consent is not retrospective (i.e. you cannot withdraw consent to processing that has already taken place).

How can you access your information that we hold?

You have the right to obtain confirmation that your data is being processed and to access your personal data that we hold about you, which is known as a Subject Access Request (SAR). We will typically provide this information free of charge; however, we may charge a ‘reasonable fee’, when a request is unfounded or excessive, to cover administrative cost.

Data Accuracy

We take all reasonable steps to ensure that the information we hold about you is up to date and accurate. If, however, you change any of the information we hold about you, such as your address, then please contact us on email: enquiries@risaltd.co.uk or write to us at: Newspaper House, 40 Rushworth Street, London, SE1 0RB.

How secure is your information?

All data held is protected by multiple layers of data and system security, i.e. (but not limited to) Data encryption, firewalling, intrusion detection, malware prevention, conforming to least privilege model (data held on our networks has access restrictions according to individuals, teams and business entity needs, which is reviewed on a regularly basis).

All data transfer to external entities, will be encrypted, transferred over a secure network and conform to 2FA (two factor Authentication).

Cookie Policy

The Internet pages of the GGF and its subsidiaries use cookies. Cookies are text files that are stored in a computer system each with a unique Cookie ID via an Internet browser, which becomes personal data under the GDPR, as they constitute ‘online identifiers’.

Through the use of cookies, the GGF and its subsidiaries can provide you with more user-friendly services that would not be possible without the cookie setting.

You may, at any time, prevent the setting of cookies through our websites by means of a setting on your Internet browser, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time using your Internet browser or other software programs. This is available in all popular Internet browsers.