Data Protection & Privacy Policy


Bamford & Morris collects, stores and processes certain personal data to allow it to undertake the day to day functioning of its lawful business activities. Data is collected, stored and processed to allow Bamford & Morris to communicate with its customers and suppliers, create product designs, generate quotations, provide services, supply goods, offer continuing after sales care and to market products to potential new customers.  



Storing of Personal Data


All data collected by Bamford & Morris is securely stored in either or both of the following manners: 

1 - Hard copies of data, print outs of emails and enquiry details etc, are stored in a secure location at the Bamford & Morris premises. Access is restricted to employees who use this information for lawful business purposes only. 

2 - Electronic data is stored on either the Zoho CRM (Customer Record Management) data base or using Zoho Docs. Both applications are cloud based services provided by Zoho Corporation Pvt Ltd and accessed via a web browser such as Google Chrome or Microsoft Edge. Both  Zoho CRM and Zoho Docs are protected with a two step authentication procedure and individual files and folders containing personal data are password protected. Access is limited to relevant employees only.


All data stored on Zoho cloud services are covered by Zoho security and data protection policies. Further information about these policies can be found at the following:  www.zoho.com/gdpr.html  /   www.zoho.com/privacy.html /  www.zoho.com/security.html



Sharing of Personal Data


Bamford & Morris uses the personal data collected for its own internal use only. It does not routinely nor actively share collected personal date with any 3rd party. Only on a case by case basis in relation to a lawful business purpose and with the express permission of the data subject will personal data be shared. For example, if our customer wishes to speak with one of our suppliers directly to resolve a technical matter then with the permission of our supplier we will pass their contact details on to our customer. 



Disposal of Personal Data


All data retained in relation to a specific order, either in hard copy or electronic format, is held for a period of 10 years and may or may not contain personal data relating to customers and suppliers.  All other data held is retained for as long as it is considered relevant for the business purpose for which it was collected and processed. If that business purpose is no longer relevant or the data is found to be out of date, ie a contact has moved companies, the data will be deleted. Data  is reviewed regularly to ensure that it is up to date and still relevant to the business purposes for which it was collected. 



Rights of Access to and Changes to Personal Data 


All data subjects be it a customer, supplier or employee have the right to the following: 


1 - Request access to any and all of the personal data specifially relating to them held by Bamford & Morris. Any requested made verbally or received in writing will be recorded and responded to as soon as it is practicable. Usually within 24 hours. 


2 - Contact Bamford & Morris to update any or all of the personal data that Bamford & Morris hold. Any requested made verbally or received in writing will be recorded and responded to as soon as it is practicable. Usually within 24 hours. 

3 - The right to be forgotten. All customers, suppliers and employees have the right to request that Bamford & Morris delete all collected and stored personal data. As long as this request does not contravene any other rules or regulations, ie PED 2014/68, any requested made verbally or received in writing will be recorded and responded to as soon as it is practicable. Usually within 24 hours.