Privacy Policy

Cookies policy

E&E is committed to respecting the privacy of individuals using this Website and does not use cookies to track or log information about users. All information submitted through forms on the Website (e.g. ‘Contact Us’) is transferred to E&E by email, and will be dealt with in accordance with data protection legislation. Emails are not encrypted and, as the internet is not always secured, users are sending the information at their own risk. By submitting your data to us, you grant to us the right to use, reproduce, modify or transmit this data in the aim of processing your request (e.g. we may have to pass your product requirements to our suppliers to find the precise product).

E commerce website and payment card

E&E accept card payments only via website. Customers will be direct to Payment card providers (Barclays) secured website to enter their card details. Hence E&E has no access to any customer card numbers.

E&E does not store, transmit or receive cardholder data electronically in any other way (This could be via CD-ROM, USB drive or an internet network) and for any other purpose.

 To handle payment cards an organisation is required by the Payment Card Industry Data Security Standard (PCI DSS) to have an Information Security Policy in place. This must cover all relevant areas of the standard. E&E complies with PCI DSS standard and act as per company Information Security Policy.

The only data company holds is customer E commerce registration details, order details, invoice details, contact details and billing details. These data will be handled as per GDPR regulations.

Data Handling

Company may use buyer data to decide/ evaluate offers, product prices, customer satisfaction business plans. However company shall assure that these data shall only be used and processed by trained staff within the company. Buyer data is buyers’ privacy such valid assets shall not be passed on to a third party under any circumstance unless prevailing law orders. (b) The data shall store in the company IT system or locked safely based on the company risk assessment and risk mitigation. (c) Buyer Data shall be held with the company until the valid relationship lasts or buyer shall appeal for deletion. (d)According to the GDPR regulations data subject shall have the right to request for the data that the company hold about buyer (Subject access request). This service shall be a chargeable service. (e) If the buyer feels the data the company hold is inaccurate we shall be obliged to correct it.

 

(f) If the buyer feels it is unnecessary to keep the data, buyer shall have the right to request to delete the data that the company hold.  (g)The GDPR claims that buyer shall have the right to object processing of data. (h) If buyer has any concern on the way the company handle data, buyer shall have the right to complain to Information Commissioner’s Office (ICO).

 

Any changes to E&E’s privacy policy will be posted on the Website homepage so users are always aware of what information we collect and how we use it.