Shrap Holdings and Shrap LTD (“We”) are committed to protecting and respecting your privacy. This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. We keep certain basic information when you visit our website and recognise the importance of keeping that information secure and letting you know what we will do with it.

For the purpose of the Data Protection Act 2018 (the Act), the data controller is Shrap Ltd of 87 North Road, Poole, BH14 0LT (registration number 11349561).

Information we may collect from you

We may collect and process the following data about you:

• Information that you provide by filling in forms on our website and/or via our mobile application. This includes information provided at the time of registering to use our services or requesting further services.
  

• If you contact us, we may keep a record of that correspondence.

• Details of your visits to our site are recorded including, but not limited to, traffic data, location data, browser usage and other communication data.
  

IP addresses and cookies

We may collect information about your device including, where available, your IP address, operating system and browser version. We collect statistical data about our users’ browsing actions and usage patterns in a way that does not identify any individual, and we will not collect personal information in this way.

We store and obtain information using a cookie file on your device. Cookies are issued when you sign in, and help us to improve our site and to deliver a better and more personalised service. They enable us:

• To estimate our audience size and usage patterns.
• To store information about your preferences, and so allow us to customise our services according to your individual requirements.
• To speed up your searches.
• To allow you to sign in to our services, and to recognise you when you return.

You may refuse to accept cookies by activating the relevant setting in your browser. However, most parts of our systems will be inaccessible if you choose to do this.

Where we store your personal data

Information you provide to us is stored on secure servers located in the UK, which are provided and managed by external suppliers appointed by us. The server suppliers are subject to strict contractual requirements on data security. We also have internal policies and controls in place to minimise the risk of your data being lost, misused, accidentally destroyed or disclosed.

Some of your personal data that we collect may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries. https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en
• Where we use certain service providers, we will require specific contract terms approved by the European Commission which give personal data the same protection it has in the EEA. For further details, see European Commission: Model contracts for the transfer of personal data to third countries. https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en

By submitting your personal data, you agree to this transfer, storing or processing. We will take all reasonable measures to ensure that your data is treated securely and in accordance with this privacy policy.

Any payment transactions will be encrypted. Where you have chosen a password which enables you to access our services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Our website may contain links to and from other websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

How we use your personal data

We use information held about you in the following ways:

• To ensure that content on our systems is presented in the most relevant format for you and your device.
• To provide you with information, products or services that you request from us, or which we feel may interest you, where you have consented to be contacted for such purposes.
• To carry out our obligations arising from any contracts entered into between you and us.
• To allow you to participate in interactive features of our service, when you choose to do so.
• To notify you about changes to our service.

Disclosure of your personal data

We will not sell or in any other way mistreat your data. However, we may be required to disclose your personal information to third parties:

• In the event that we sell or buy any related business or assets, in which case we may need to disclose your personal data to the seller or buyer of such business or assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation. This includes exchanging information with other companies and organisations for the purposes of preventing financial crime, and credit risk reduction.

Your rights

You have the following rights in relation to your personal data:

Request access to your personal data: You can ask for a copy of the personal data we hold about you free of charge. However, we may charge a reasonable fee if your request is repetitive or excessive, or we may refuse to comply with your request.

We may need to request specific information from you to help us confirm your identity to ensure that personal data is not disclosed to any person not entitled to receive it. We may also contact you to ask for further information to speed up our response.

We try to respond to all legitimate requests within one month of receipt, but it may take longer than this if your request is particularly complex. In such cases we will notify you, and keep you updated.

Request correction of your personal data: You have the right ask for any incomplete or inaccurate data we hold about you to be corrected, though we may need to verify the accuracy of the new data provided to us.

Request the deletion of your personal data: You may ask us to delete or remove personal data where there is no good reason for us continuing to process it. Please note, however, we may not always be able to comply with your request (for example where data is retained to fulfil our regulatory obligations).

Withdraw consent: You can withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide our services to you. We will advise you if this is the case at the time you request to withdraw your consent.

If you wish to exercise any of the rights set out above, please contact our Head of Compliance.

Changes to our privacy policy

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail or post. Please check back frequently to see any updates or changes to our privacy policy.