We:

• use your information to process orders and manage your account;

• share information only where necessary to provide our services, comply with legal obligations or as described in this Privacy Notice;

• do not sell your personal information to third parties;

• do not store payment card details;

• do not collect special category personal data (such as information about health, religion or ethnic origin).

We make sure all passwords, names, email addresses and postal addresses in our database are stored safely on our servers in secure facilities and we’re working towards implementing encryption of all personal data.

We’re PCI DSS compliant i.e. we meet a set of security standards designed to ensure that we accept, process, store or transmit credit card information in a secure environment. 

• We’re working to anonymise personal data outside of our production environment
• Data is not shared outside of the UK
• We make sure we have contracts in place with our suppliers and partners to ensure GDPR compliance

As we’re a small business, we can respond within one month to any data subject requests.

Our CEO & Founder, Jim Brown is our Data Protection Officer (DPO). Please email any queries to: jim@paperstone.co.uk

Paperstone and Office Needs are related companies that work closely together. To provide a more joined-up service and operate our businesses efficiently, we may share relevant customer account and sales information between the two companies where it is necessary for the purposes described below.

The information we may share includes:

• your name, job title and business contact details (such as your business email address and telephone number);
• your company name, billing and delivery addresses;
• enquiries, quotations and account notes;
• products and services you have purchased or shown an interest in;
• order history, pricing, discounts and spending patterns;
• delivery, installation and service requirements; and
• payment or credit account status (but not payment card details).

We use this information to manage customer accounts, respond to enquiries, prepare quotations, supply products and services, understand our customers' needs, improve our products and services, and, where permitted by law, tell business customers about products and services that may be relevant to them.

We only share information that is relevant and necessary for these purposes. We do not share payment card details or account passwords.

Paperstone and Office Needs are separate data controllers. Each company is responsible for the personal information it processes and for complying with applicable data protection law.

Paperstone Limited
Company number: 05214658
Oxford House, 15–17 Mount Ephraim Road, Tunbridge Wells, England, TN1 1EN

Office Needs Limited
Company number: 03340530
4 Olympic Business Centre, Paycocke Road, Basildon, Essex, SS14 3EX

We normally share this information because it is in our legitimate interests to provide an efficient, consistent service across our businesses, manage customer relationships effectively and improve the products and services we offer. Before relying on this lawful basis, we consider the impact on individuals' rights and ensure that our interests do not override those rights and freedoms.

You have the right to ask either company for access to the personal information it holds about you, to request that inaccurate information is corrected, and to object to or restrict certain processing in the circumstances provided by data protection law. You can also ask us to stop using your details for direct marketing at any time. Every marketing email we send includes a simple way to unsubscribe.

We keep shared information secure and only allow access to employees who need it to carry out their work. We retain shared information only for as long as necessary for the purposes described above or to comply with legal obligations. When it is no longer needed, we securely delete or anonymise it.

For more information about how we use personal information and your data protection rights, please see our Privacy Notice.
 

If you consent to targeting and advertising cookies we share one-way hashes* of some personal data (first & last name, email, phone number and street address) with Google Ads when you place an order. This is strictly for the purpose of measuring the performance of our ads. Google cannot directly use this data and is only processed to help us advertise effectively.

* A one-way hash is like putting a document through a shredder.  If you put two identical documents through a shredder and looked carefully, you could tell they were the same, but you still wouldn't be able to read the original document.