How Papercycle uses your information
1. Who we are
We are Papercycle Ltd, (‘We’, ‘us’ and ‘our’) a company incorporated in England and Wales with registered number 13121270 and having our registered address at Kingston House, Lydiard Fields, Swindon, England, SN5 8UB.
For the purposes of applicable data protection laws, we are the data controller.
2. How we collect your personal informationWe may need to collect personal information about you, and there are different ways that we might do so:
2.1. As you visit our website, Home (paper.org.uk) (our ‘website’), when you fill in forms on our website such as in order to purchase our services, or when you interact with our website or another
party’s website from cookies and other similar technologies;
2.2. When you interact with us or contact us through social media, (including messaging, “liking”, “following” and other communications);
2.3. When you contact us about our services, and provide feedback to us;
2.4. If you subscribe to our marketing, such as subscribing to our newsletter;
3. The personal information we collect
We may collect the following categories of information about you:-
3.1. Identity data: including name, title, address;
3.2. Contact data: including billing address, telephone number, and email address;
3.3. Financial and transactional data: including debit, credit card or bank account information, details about payments to and from you, whether you are a tax payer; details of transactions you carry out through our website and of the fulfilment of your orders. We do not store your credit or debit card information once the transaction is complete. For further information visit: www.pcisecuritystandards.org/pci_security/.
3.4. Technical data: including your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, traffic data, weblogs and other communication data;
3.5. Usage data: including anonymous statistical data about website visitors' browsing actions and patterns and use of our website; and
3.6. Marketing and communications data: including your preferences in receiving marketing contact from us and our third parties.
4. Lawful bases for use of the information
We will only use your personal information for the purposes for which we collected it:
4.1. Identity data, contact data, financial and transactional data: Where we need to perform the contract we are about to enter into or have entered into with you;
4.2. Identity data, contact data, technical data, usage data, financial and transactional data: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
4.3. Identity data, contact data, financial and transactional data: Where we need to comply with a legal obligation; and
4.4. Identity data, contact data, marketing and communications data, and technical and usage data: With your consent.
You have the right to withdraw your consent to marketing at any time by contacting us using the contact information at the bottom of this notice. For more information about Papercycle’s marketing, please see Section 5 below.
We will use your contact details if you have opted to subscribe to our e-newsletter.
We use services provided by third parties, including ASI, C Systems and MailChimp to manage our newsletter subscriptions. If you ever decide you no longer wish to receive our newsletter, you can do so at any time by unsubscribing from the mailing list, using the link provided in the newsletter email or by using the contact details below.
6. Disclosure of personal information
There may be circumstances where we need to share personal information. We may disclose your personal information to the following third parties for the following reasons:
6.1. ASI (Advanced Solutions International), who hosts and maintains the security on our website;
6.2. C Systems, MailChimp, and ASI, who manage our newsletter subscriptions;
6.3. Google Analytics, with your consent collects personal information about your use of our website and behaviour patterns, in order for us to improve our website and services;
6.4. tax authorities, regulatory authorities, and law enforcement agencies, for the purposes of the prevention and detection of crime, or to comply with our legal and regulatory obligations;
6.5. professional advisors, for example, to obtain legal or financial advice, or the disclosure is otherwise necessary for the purposes of establishing, exercising or defending legal rights;
6.6. internal contractors and consultants, who for example help to provide our services;
6.7. any member of our group companies, including Confederation of Paper Industries Ltd, in order to fulfil the purpose your information was collected for; and
6.8. prospective sellers or buyers of any of our business or assets. Any such new owner may use your personal information in the same way as set out in this privacy notice.
We will take steps to ensure that the third party protects the personal information in the same way that we do.
7. International transfers of personal information
We share your personal information with the above third parties. This may involve transferring your personal information outside the UK.
Whenever we transfer your personal information out of the UK, we ensure that appropriate safeguards are in place which afford you a similar degree of protection, such as ensuring we have carried out appropriate due diligence on our sub-processors, and having protective contractual arrangements in place with them.
8. Third party links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit. We may include links to the following third-parties’ websites:
Where we have YouTube video content embedded on our website, YouTube controls any information that is collected by viewing their content. YouTube’s privacy notice can be located at www.google.co.uk/intl/en-GB/policies/privacy/
8.2. Our website contains links to our social media pages. Any information you provide to us or share with us via social media (including messaging, “liking”, “following” and other communications) is controlled by the social media network.
We currently use:
8.2.1. Facebook, which has its own privacy notice at https://www.facebook.com/privacy/explanation;
8.2.2. Twitter, which has its own privacy notice at https://twitter.com/en/privacy;
8.2.3. Instagram, which has its own privacy notice at https://www.instagram.com/about/legal/terms/api/; and
8.2.4. LinkedIn, which has its own privacy notice at https://www.linkedin.com/legal/privacy-policy.
9. Keeping personal information secure
We know that you provide your personal information in good faith and expect it to be looked after. This is why we take the security of your personal information seriously and have taken steps to ensure that our systems adequately protect your personal information. This includes:
9.1. storing all personal information that we control on internal servers located in the United Kingdom or European Union;
9.2. maintaining up-to-date firewalls and anti-virus software on systems that have access to your personal information;
9.3. ensuring strict access controls on a need-to-know basis; and
9.4. retaining your personal information for no longer than the purpose we collected it for. For more information about retention of your personal information, please see Section 10 below.
10. Retaining personal information
We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period if we are legally required to, in the event of a complaint, or we reasonably believe there is a prospect of litigation in respect to our relationship with you.
We will take reasonable steps to destroy or anonymise personal information at the end of the retention period.
In some circumstances you can ask us to delete the information we hold about you, please see Your rights at Section 11 below for further information.
11. Your rights
You have rights in respect of your personal information and this Section explains a bit more about those rights. If you have any questions regarding our use of your personal information, we will be happy to give you peace of mind by answering any questions or providing any additional information that we can, please get in touch on the contact details at the end of this privacy notice. You have the right to:
11.1. Be informed about your personal information
We have created this privacy notice to provide you with information regarding what personal information we may hold about you. You can contact us at any time to ask what information we hold about you and how we use it.
11.2. Access your personal information
We want you to fully understand and be comfortable with how we use your personal information. You can contact us at any time to ask whether we process any personal information about you and to check the lawful basis we rely on to process it.
11.3. Update and correct your personal information
You have the right to request that we rectify any inaccuracy about you that we may hold. We may need to verify the accuracy of new information you provide to us.
11.4. Remove your personal information
You have the right to request we erase your personal information from our systems. Please be aware that we may have to keep some of your information to comply with the law or for HMRC purposes but we will evaluate your request within applicable data protection laws.
11.5. Restrict processing of your personal information
You have the right to ask us not to process your personal information in certain circumstances. You can exercise your right to prevent such processing by not opting in to marketing. You can also exercise the right at any time by contacting us using the contact information at the bottom of this notice.
11.6. Object to automated individual decision-making
You have the right to object to automated individual decision-making and profiling.
11.7. Port your personal information
You have the right to request we port the personal information you have provided to us, to you so that you can move, copy or transfer your personal information for your own purposes across different services.
You are important to us, and so is protecting your personal information. For this reason, we take any complaints we receive from you about our use of your personal information very seriously and request that you bring any issues to our attention in the first instance.
You have the right to lodge a complaint about our handling of your personal information with the Information Commissioner’s Office (ICO) but we would appreciate the opportunity to deal with your concerns before you approach the ICO.
The ICO can be contacted at:
Address: UK Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: +44 (0) 01625 545745
13. Updating this privacy notice
We keep our privacy notice under regular review in order to ensure that it properly reflects our use of personal information. This privacy notice was last updated in January 2023.
14. How to contact us
You can contact us by:
Post: Papercycle Limited, Kingston House, Lydiard Fields, Swindon, England, SN5 8UB
Email: [email protected]