GDPR

General Data Protection Regulation (GDPR) Statement for Caetus

Introduction

At Caetus, we are committed to protecting and respecting your privacy. This General Data Protection Regulation (GDPR) Statement outlines how we collect, use, and safeguard personal data in compliance with the UK GDPR and the Data Protection Act 2018.

Who We Are

Caetus is a UK-based provider of electrical components and energy management solutions, including IoT-enabled energy monitoring systems. Our website, products, and services involve the collection and processing of personal data, and we take our responsibility to protect this data seriously.

What Data We Collect

We may collect and process the following categories of personal data:

Identity Information: Name, job title, company name.
Contact Information: Email address, phone number, billing and shipping address.
Transaction Data: Details of purchases, payment information (processed securely via third-party payment providers).
Technical Data: IP address, browser type, and device information when you visit our website.
Marketing Preferences: Information about your communication preferences and interactions with our emails or advertisements.

How We Use Personal Data

We process personal data for the following lawful purposes:

To fulfil customer orders, including payment processing and delivery.
To provide customer support and respond to enquiries.
To send important service updates or changes to our terms and conditions.
To personalise user experience on our website.
To conduct marketing activities, where consent has been given.
To comply with legal and regulatory requirements.

Legal Basis for Processing

Under the UK GDPR, we rely on the following legal grounds for processing personal data:

Contractual Necessity: When processing is required to fulfil a contract with you.
Legal Obligation: When we need to comply with a legal requirement.
Legitimate Interests: When processing is necessary for our business operations and does not override your rights.
Consent: Where we rely on your explicit consent for marketing communications.

How We Store and Protect Data

We implement appropriate security measures to protect personal data from unauthorised access, loss, or misuse. These measures include:

Secure servers with encryption protocols.
Restricted access to personal data, only accessible to authorised personnel.
Regular data security audits and risk assessments.
Compliance with industry standards for data protection.

Data Sharing and Third Parties

We do not sell or trade personal data. However, we may share data with:

Service Providers: Third-party partners who assist with payment processing, IT services, and logistics.
Regulatory Authorities: When required by law or for fraud prevention.
Marketing Partners: Where explicit consent has been given for promotional communications.

All third parties are required to maintain the security and confidentiality of personal data in accordance with our agreements.

International Data Transfers

If we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or UK-approved data protection agreements.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access: Request a copy of the personal data we hold.
Right to Rectification: Request corrections to inaccurate data.
Right to Erasure: Request deletion of your data under certain conditions.
Right to Restriction: Request to limit how we process your data.
Right to Object: Object to certain types of processing, including marketing.
Right to Data Portability: Request data in a machine-readable format.
Right to Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise your rights, contact us at: Info@Caetus.co.uk

Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyse website traffic. Users can manage cookie preferences through their browser settings. For more details, please see our Cookie Policy.

Data Retention

We retain personal data only for as long as necessary for business or legal purposes. Once data is no longer needed, it is securely deleted or anonymised.

Changes to This Statement

We may update this GDPR statement periodically to reflect regulatory changes or improvements in our data protection practices. The latest version will always be available on our website.

Contact Us

If you have any questions about this GDPR statement or how we process personal data, please contact:

Caetus
Email: Info@Caetus.co.uk
Phone: 028 8744 0143

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.