Introduction
Everyone has rights with regard to the way in which their personal data is handled.
Big Reg Ltd is committed to protecting the privacy and personal data of our customers, suppliers and other third parties.
This privacy policy sets out how Big Reg Ltd uses any information you provide, who we share it with and details the ways in which we protect your privacy when you enquire about, buying, transferring or selling, the rights to a private Registration Mark.
For the purpose of UK data protection laws, the data controller is Big Reg Ltd, of 11 Southfield Road, Balloch, Cumbernauld, G68 9DQ. If you have any questions regarding our policy, please contact us by writing to us, or by using the contact form on our website.
What personal information do we collect?
We have a legal duty to protect any information we collect from you. We use leading technologies to safeguard any sensitive data while the latest encryption software protects any payment card details you submit to us.
We maintain strict security standards to prevent any unauthorised access to this data. Our business office is locked and secure, access is only permitted by the two business directors, we do not have any other staff. We do not permit business related visitors in to our operational office, if we do have visitors, they are under direct supervision at all times by the owners and they are not permitted to enter data storage areas.
The personal information we collect about you is used to process your order to purchase or sell a Registration Mark, or respond to your enquiries. You may give us information such as:
You may give us this information by filling in forms on our website, or requesting further information about our products and services, participating in discussions on social media outlets, or corresponding with us by phone, email, letter or otherwise.
We do not record or keep any of your payment card details. They are sent securely to our payment providers. We do not receive any of the information you supply directly to any of our payment providers.
We will never disclose your identity or contact details to a seller and vice-versa.
We understand and appreciate that customers occasionally do not wish to enter payment card details over the internet, if you prefer, you can telephone us and arrange to pay by bank transfer.
UK law prevents us from disclosing any details relating to the current Registered Keeper of any Registration Mark. Except to law enforcement officers, who must always give us evidence of a legitimate request relating to the performance of their duties in upholding the law.
We employ the services of a Confidential Waste Disposal company for all sensitive paper documents by using advanced cross-cut shredding technology, all of our sensitive documents are transformed into intricate confetti-like fragments.
Why do we need to collect your personal data?
It is both a contractual and legal requirement for you to provide us with certain information, if you do not provide us with that information, we may not be able to perform the contract. The legal basis upon which we collect your information is to facilitate our business with you.
We use personal information about you to:
How we collect your personal data
We collect personal data from you when you fill in forms on our website, request further information about our products and services, participate in discussions on social media outlets, or correspond with us by phone, email, letter or otherwise.
We may automatically collect certain data from you as you use our website by using cookies and similar technologies. Please see our cookie policy for more details about this
Who we may share your information with and why
We will never sell or exchange for reward, any of your personal details with a third party.
You agree that we have the right to share your personal information with, our auditors and quality assurance assessors, and analytics / search engine providers that assist us in the improvement and optimisation of our website.
We also need to share your data with relevant UK government departments in order to fulfil the contract of services we are providing to you and comply with UK regulations.
These are as follows:
Keeping in contact with you
After your sale or purchase has completed, and only if you have consented to receive further information from us. We would like to, keep you updated on changes to government policy surrounding private plates, send you the occasional newsletter or relevant articles and keep you updated with other specific matters you have asked for.
You can ask us to stop sending you information messages at any time by following the opt-out link on any message sent to you or by writing to the address at the top of this policy, or by using the contact form on our website.
We do not pass your details to any third party unless you give us permission to do so. We will also remove all your data upon request and only keep the data required to be kept by law.
The information we hold will be as accurate and up to date as possible but we must rely on you to keep us informed. If there are any inaccuracies, we will correct the information in accordance with your instructions.
Your personal information will be held securely in accordance to our internal security policy and the law.
We will never transfer your information outside the EEA (European Economic Area) without first obtaining your consent.
What are our legal grounds for collecting and using your personal data?
The legal grounds that are relevant to us for the purpose of collecting and using your data are as follows:
How long is your personal information retained by us?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Your rights
Under data protection laws, you have the right to ask us to:
Not all of these rights will apply in all circumstances. Please contact us by writing to the address at the top of this policy, or by using the contact form on our website if you wish to exercise any of these rights. If you are unhappy with the way we are handling your personal information, please contact our admin team in the first instance and we will try to resolve your complaint. You also have the right to complain to the Information Commissioner’s Office, which is the regulator for data protection laws: https://ico.org.uk/
Big Reg Ltd is PCI DSS (Payment Card Industry Data Security Standard) Compliant
At Big Reg our operational business infrastructure is compliant with the PCI DSS, which is a worldwide security standard assembled by the Payment Card Industry Security Standards Council (PCI SSC).
The PCI security standards are technical and operational requirements that were created to help organisations prevent payment card fraud, hacking and various other security vulnerabilities and threats.
The standards apply to all organisations that store, process or transmit cardholder data - with guidance for software developers and manufacturers of applications and devices used in those transactions. Any company processing, storing or transmitting cardholder data should be PCI DSS compliant.
The standards require merchants who store, process or transmit cardholder data to:
Worldpay by FIS Global
Our online payment provider is Worldpay, operated by FIS Global who utilise the highest levels of encryption and security available on the internet. Worldpay is one of the foremost providers of electronic payment clearing systems in the UK.
For your security, Big Reg personnel or systems never store your payment card details. Worldpay handle all customer credit and debit card payments for Registration Marks or services being provided by Big Reg.
For your security, Worldpay verify your payment card details as well as your registered card account address.
Changes to our Privacy Policy
Any changes we make to our policy in the future will be posted on our website and, where appropriate, notified to you by email. Please check our website frequently to see any updates or changes to our policy.
Contact
Questions, comments and requests regarding this policy are welcomed and should be addressed to us by writing to the address at the top of this policy, or by using the contact form on our website.
