Purpose of this notice

This privacy notice explains how Integro (“we”, “us”, “our”) collects and processes your personal data when you use our website, sign up to our newsletter, enquire about or purchase services, or take part in surveys or promotions. Our site is not intended for children, and we do not knowingly collect data relating to children.

Please read this notice together with any other privacy or fair-processing notices we may provide on specific occasions. This notice supplements those notices.

Questions or requests

If you have questions or wish to exercise your rights, contact: GDPR@integro.co.uk.

You may also complain to the UK Information Commissioner’s Office (ICO) at www.ico.org.uk. We’d appreciate the chance to resolve concerns first—please email us.

Please keep your personal data with us accurate and up to date by letting us know about any changes.

Third-party links

Our site may include links to third-party sites, plug-ins and applications. Clicking those may allow third parties to collect or share data about you. We don’t control these sites and aren’t responsible for their privacy statements. We encourage you to read their privacy notices.

The data we collect about you

“Personal data” means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following:

• Identity Data: first name, last name, title, date of birth, gender, username or similar identifier.
• Contact Data: billing and delivery addresses, email addresses, telephone numbers.
• Financial Data: bank account and payment card details.
• Transaction Data: details about payments to and from you and details of services you’ve purchased from us.
• Technical Data: IP address, login data, browser type and version, time-zone setting and location, plug-in types and versions, operating system and platform, and other technology on the devices you use to access our site.
• Profile Data: your username and password, purchases/orders, interests, preferences, feedback and survey responses.
• Usage Data: information about how you use our site, products and services.
• Marketing & Communications Data: your preferences in receiving marketing from us and your communication preferences.

We also collect, use and share Aggregated Data (statistical/demographic) for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data if it does not identify you. If we combine or connect Aggregated Data with your personal data so that it can identify you, we treat the combined data as personal data.

We do not collect special categories of personal data (e.g., health, ethnicity) or information about criminal convictions and offences.

If you fail to provide data

Where we need personal data by law or under a contract with you, and you do not provide it when requested, we may not be able to perform the contract (for example, to provide services). We’ll notify you if this is the case.

How your personal data is collected

We collect data through:

• Direct interactions: You may give us Identity, Contact and Financial Data by filling in forms or corresponding with us by post, phone or email (e.g., applying for services, subscribing to updates, requesting marketing, entering a competition/promotion/survey, or giving feedback).
• Automated technologies: As you interact with https://www.integro.co.uk, we automatically collect Technical Data using cookies, server logs and similar technologies.
• Third parties/public sources: We may receive Technical Data from analytics providers (e.g., Google), advertising networks and search information providers; Identity and Contact Data from data brokers/aggregators; and from publicly available sources (e.g., Companies House).

How we use your personal data

We will only use your personal data when the law allows. Most commonly:

• To perform a contract, we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• To comply with legal or regulatory obligations.

Generally, we do not rely on consent as a legal basis for processing your personal data, other than for sending certain direct marketing communications. You can withdraw consent at any time by emailing GDPR@integro.co.uk.

Purposes for which we will use your data

• Register you as a new customer
  Data: Identity, Contact
  Basis: Performance of a contract
• Process and deliver orders; manage payments, fees and charges; recover debt
  Data: Identity, Contact, Financial, Transaction, Marketing/Comms
  Basis: Performance of a contract; Legitimate interests (debt recovery)
• Manage our relationship (updates to terms/privacy, request feedback)
  Data: Identity, Contact, Profile, Marketing/Comms
  Basis: Performance of a contract; Legal obligations; Legitimate interests (keeping records updated, studying service use)
• Enable you to take part in promotions, competitions or surveys
  Data: Identity, Contact, Profile, Usage, Marketing/Comms
  Basis: Performance of a contract; Legitimate interests (improving engagement)
• Administer and protect our business and website (troubleshooting, testing, maintenance, fraud/security)
  Data: Identity, Contact, Technical
  Basis: Legitimate interests (running our business, IT security); Legal obligations
• Deliver relevant website content and ads; measure or understand effectiveness
  Data: Identity, Contact, Profile, Usage, Marketing/Comms, Technical
  Basis: Legitimate interests (marketing and growth)
• Use analytics to improve our site, products/services, marketing and user relationships
  Data: Technical, Usage
  Basis: Legitimate interests (business development, website improvement)
• Make recommendations about services that may be of interest
  Data: Identity, Contact, Technical, Usage, Profile
  Basis: Legitimate interests (growth)

Marketing

You’ll receive marketing from us if you’ve requested information or purchased services from us and haven’t opted out. You can change your preferences or opt out at any time by following unsubscribe links in emails or emailing GDPR@integro.co.uk.

Third-party marketing

We will get your express opt-in consent before sharing your personal data with any company outside Integro for marketing purposes.

Cookies

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. Some parts of our site may not function properly without cookies.

Change of purpose

We will only use your personal data for the purposes we collected it for, unless we reasonably consider we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis.

Disclosures of your personal data

We may share your personal data with:

• Internal recipients within Integro (and, where relevant, our affiliates) acting as controllers or processors.
• External service providers acting as processors (e.g., IT, hosting, analytics, payment, marketing support).
• Professional advisers acting as processors or controllers (e.g., lawyers, bankers, auditors, insurers).
• HM Revenue & Customs, regulators and other authorities where required by law.
• Third parties to whom we may sell, transfer or merge parts of our business or assets. If a change occurs, new owners may use your personal data as set out in this notice.

All third parties are required to respect the security of your personal data and process it according to our instructions and the law.

International transfers

Some of our external providers (or their sub-processors) may be located outside the UK/EEA. When we transfer your personal data internationally, we ensure an adequate level of protection through one or more of the following safeguards:

• An adequacy decision/regulation by the UK Government or European Commission.
• Standard Contractual Clauses (and UK Addendum, where applicable);
• Participation in a recognised data-transfer framework providing equivalent protection.

For details of specific safeguards, email GDPR@integro.co.uk.

Data security

We have appropriate security measures to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Access is limited to those who have a business need to know and are subject to confidentiality. We have procedures to deal with any suspected personal-data breach and will notify you and applicable regulators where legally required.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting or reporting requirements. Factors include the amount, nature and sensitivity of the data, potential risk from unauthorised use or disclosure, the purposes of processing and whether these can be achieved by other means. By law, we must keep basic customer information (Contact, Identity, Financial and Transaction Data) for six years after you cease being a customer for tax purposes.

In some circumstances you can ask us to delete your data (see “Your legal rights”). We may anonymise your data so it can no longer be associated with you; we may use such information indefinitely without further notice.

Your legal rights

Under certain circumstances, you have rights under data-protection laws in relation to your personal data:

1. Access your personal data.
2. Correct your personal data.
3. Erase your personal data.
4. Object to processing where we rely on legitimate interests (including profiling), and to direct marketing.
5. Restrict processing.
6. Request transfer of your data (data portability).
7. Withdraw consent where we rely on consent to process your data.

To exercise any rights, email GDPR@integro.co.uk. We won’t usually charge a fee unless your request is unfounded, repetitive or excessive. We may need to request specific information to verify your identity. We aim to respond within one month.