Who is responsible for your data
For the purposes of applicable UK and EU privacy law, we are the "data controller." Our registration with the ICO Data Protection Register is ZA349035.
Personal Data we process
We collect and process the following types of personal data:
Cookies and Other Tracking Technologies
We may enable the following types of cookies on our Sites:
Strictly Necessary Cookies
These cookies allow you to use some of the features of our Sites, like setting your privacy preferences, logging in, or filling in forms. These cookies are strictly necessary to provide you with services available through our Sites and cannot be turned off.
These cookies let you browse our Sites or benefit from enhanced features, such as memorising language preferences or using instant messaging support. If these are disabled, it could impact your experience of some Site functionality.
These let our Sites work better according to the way you use them. They may be set by us or by third party providers whose services we’ve added to our pages. If you don’t allow these cookies, then some or all of these services may not function properly.
These are provided by our third-party advertising partners, and collect information about your browsing habits and preferences. This information allows us, and our third-party advertising providers, to display relevant content and advertisements on other websites you visit.
How we use your Personal Data
We, and our third party service providers acting on our behalf, may use your personal data in the following ways:
We process your personal data subject to a number of legal bases, including on the basis of our legitimate interests, where it is necessary for the performance of a contract with you, or where you have consented to us doing so.
Sharing your information with third parties
We may share your personal data with our service providers who perform services on our behalf and in accordance with our instructions. Our service providers are not permitted to use personal data for any purposes other than as required for performance of services on our behalf and are not permitted to use your personal data for their own purposes. Where necessary, or with your consent, we may also share Personal Information with other third parties involved in your transaction, such as relevant retailers and distributors.
We may also make your personal data available to other third parties:
Payment card information
Card payment transactions will be processed by a third party payment provider. We, with support from our authorized third party payment provider, will only use your payment information to process your payments to provide you with the products or items you ordered through our Site and telephone. Our current payment provider is Barclaycard, but this may change from time to time.
For our Sites and email payments, your credit/debit card details are entered directly into Barclaycard's secure payment portal and never revealed to us. Barclaycard encrypts your credit/debit card information and operates a secure server.
For telephone payments, you credit/debit card details are entered directly into Barclaycard's secure payment portal by a member of Benjamin Moore staff. They do not record your card details in any other way and once the payment is processed, card details are no longer available to staff members.
Links to other sites
Our Sites may contain links to third party websites not operated by Benjamin Moore. If you follow a link to another website from one of our Sites, you should note that those websites will have their own private policies, cookie policies and terms and conditions. We do not accept any responsibility or liability for the policies of third party websites.
Security of your Personal Data
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Your Rights Regarding Personal Data
Subject to applicable law, you may have the right to:
If you would like to exercise any of these rights, please contacting us using the methods provided in the "Contact Us" section below, detailing your name, address and the information which is of interest to you. You can also complete our Privacy Web Form.
You may have a right to lodge a complaint with a supervisory authority or other regulatory agency if you believe that we have violated any of the rights concerning your personal data. We encourage you to first reach out to us first using the methods provided in the "Contact Us" section below, so we have an opportunity to address your concerns directly before you do so.
We retain your personal data only for so long as is necessary to fulfill the purposes for which it was collected, unless a longer retention period is permitted or required by applicable law. If you want to learn more about our specific retention periods for your personal data, please contact us using the methods provided in the "Contact Us" section below.
You can also write to us via postal mail at: Privacy Administrator, Benjamin Moore UK Ltd, 804 Oxford Avenue, Slough, SL1 4LN.