top of page

Introduction

 

At Orrsum we believe in being open and honest about the Personal Data that we hold about you.

 

This Privacy Notice tells you how we collect, use, store and share (collectively known as ‘processing’) personal data that you provide to us in person, online via our website at www.orrsum.co.uk or on social media, by email, text, phone, in writing or any other communication channels that we may use.

 

By Personal Data, we mean information that relates to you and allows us to identify you, either directly or in combination with other information that we may hold. If we need to hold any Personal Data that you share with us, we will tell you about it up front and will make it clear why we collect this Personal Data, what we intend to do with it and our lawful reason for doing so. 

This is because we want you to feel confident about how any Personal Data you share will be looked after or used by us. You also have the right to view, edit or delete the Personal Data that we hold about you online, in either electronic formats or on paper. 

 

Orrsum is a leading, specialist, global supplier of hosiery, underwear and loungewear and our aim is always to give the highest level of customer service to our clients and create the best value for them. 

 

We are registered with the Information Commissioner’s Office (ICO) Registration no ZA382422 and any Personal Data collected by us will be used and held in accordance with the requirements of the EU General Data Protection Regulation (GDPR).

 

By law, we can only process your Personal Data if we have a proper reason to do so (our lawful basis) as follows:

 

  • to fulfil a contract we have with you

  • if we have a legal duty 

  • if we have a legitimate interest to do so, or

  • when you consent to it

 

We only process Personal Data for the purpose it is intended, i.e. to fulfil a service, to provide you with information about our services and to tell you about any promotional events or offers that you may find useful or interesting. 

 

We will be especially careful with special category data (Sensitive Data) and we will only collect and process this type of data if you have given us your explicit consent to do so.

 

We will make it easy for you to tell us how you want us to communicate with you, including how to opt out from future communications, and we promise your request will be respected straight away. We will always provide easy ways for you to contact us. 

 

If you have any requests concerning your Personal Data or any queries with regard to our practices please contact our Data Protection Officer on the details provided within Section 5.

 

 

How we collect and use your data

 

We process Personal Data collected via our website and our other communication channels for the purposes of: 

 

  • Providing and personalising our services 

  • Dealing with your enquiries, requests and complaints 

  • Administering orders and accounts relating to our suppliers or customers 

  • Maintaining information as a reference tool or general resource 

  • Carrying out market research campaigns 

  • Providing you with information about our products, events and services

  • Carrying out our obligations from any contracts entered into by you with us

  • Processing your payments and orders made online or over the phone

  • Complying with our legal obligations and associated policies and procedures

 

We collect Personal Data from you when you enquire about our services though completion of a web enquiry form or if you register with us in person, online or via social media, send or receive an email or text, make a payment to us, ask a question about our services or receive one of our newsletters.

 

We may process data about your use of our website and services called “usage data”. This doesn’t include any data that can identify an individual, but may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. This data helps us to understand how our services are used in order for us to improve our website and our services.

 

We may process your “account data”, which could include your full name and/or email address in order for us to provide you with a service or to fulfil a contract with you.  

 

We may process your personal data that is provided in the course of the use of our services. This is called “service data” and may include your name, telephone number, email address and postal address. This is processed in order to allow us to provide you with a service and to communicate with you.

 

We may process information provided during a legitimate enquiry about goods and/or services or employment opportunities. This is called “enquiry data” and could include your name, email address and any other personal information which you provide to us within the enquiry.

 

We may process “transaction data” gathered when you purchase goods or services from us. We collect card details from you when you make an online purchase, however your card information is not held by us and rather collected and held by a third-party processor.

 

You have a choice if you wish to receive communications from us. We have an ‘opt-in only’ communication policy which means that we will only send marketing communications to those that have explicitly stated that they are happy for us to do so via email.

 

Our marketing communications include news items and information about forthcoming events and promotions. If you would like to receive any of these but have not already opted in, please contact us at www.orrsum.co.uk to provide your details and we will be happy to keep you informed.

 

If at any point you would like to opt out of receiving communications from us or would like to change the channels (such as email or post) that we use to contact you, just let us know by getting in touch or using the unsubscribe option shown on our website or included in update emails that we may send to you from time to time.

 

To find out more general information on cookies, and how to control or delete them, please go to AllAboutCookies.org.

 

 

Your Rights

 

Under the EU General Data Protection Regulation (GDPR) you have the following rights:

 

  • The right to be informed about the processing of your Personal Data through this privacy notice

  • The right of access to your Personal Data

  • The right to edit and update your Personal Data

  • The right to request to have your Personal Data deleted (however, this does not apply where your Personal Data is being processed on the basis of legal obligation)

  • The right to restrict processing of your Personal Data where it may be incorrect or you think the processing is unlawful

  • The right to data portability of your Personal Data (this only applies to Personal Data you have provided to us and where the processing is based on your consent or related to a contract we have with you, or when processing is automated)

  • The right to object to the processing of your Personal Data for the purposes of direct marketing, scientific or historical research or statistical purposes

  • The right to make a complaint

 

Right to access, correct, remove or object to the use of your Personal Data

 

You have the right to request a copy of the information that we hold about you. The first copy response is free of charge. Thereafter we have discretion to charge a small administration fee. If you would like to request a copy of the information that we hold about you, please contact us by email at datarequests@orrsum.co.uk

 

The accuracy of your Personal Data is important to us. If you believe that the Personal Data held by us about you is inaccurate, incorrect or incomplete, you can ask for it to be updated by contacting us by email at datarequests@greentreat.co.uk

 

You have a right to have your Personal Data deleted if:

 

  • it is no longer necessary for the purpose we originally collected and processed it for

  • you withdraw your consent

  • you object to its processing and we have no legitimate interest for continuing the processing of this

  • it was unlawfully processed by us

 

When you ask for your Personal Data to be updated or removed from our current record systems, we will normally respond to you within one month of the request being received. Sometimes, we may need to extend this timescale to three months and if this is the case, we will tell you. 

 

Option to unsubscribe

 

You can opt out of email correspondence immediately by following the link on our emails to unsubscribe or by emailing us at datarequests@orrsum.co.uk

 

You also have the right to object to processing of your Personal Data when it is:

 

  • used in our legitimate interests               

  • for direct marketing (including profiling) purposes

  • processed for the purpose of scientific/historical research and statistics

 

If you wish to object to us processing your Personal Data, this must be on grounds relating to your particular situation and you must explain this in your request. To object you should contact us by emailing us at datarequests@greentreat.co.uk

 

We will agree to stop processing your Personal Data unless we can show you that we have compelling legitimate or legal grounds for processing it. This will be done within one month of your request being received unless it is for the purpose of direct marketing when it will be stopped immediately on receipt of your request.

 

For more information about the above or if you have questions, please contact us by email at datarequests@orrsum.co.uk

 

 

Securing your data

 

In order to protect you and your Personal Data, we will collect, process, store and share your data safely and securely. For this reason, we have in place manual, electronic and managerial procedures to safeguard and secure the Personal Data we collect. 

 

Data Retention

 

We will retain your Personal Data for as long as we need it in order to fulfil its purpose as outlined in this Privacy Notice or in a contract that you hold with us. In some cases we are legally required to hold some types of Personal Data to fulfil our statutory obligations, e.g. tax information. 

We will not retain Personal Data if you have asked for your information to be deleted or if you have unsubscribed from one of our mailing lists. 

 

Data Sharing

 

We may on occasion use external ‘data processors’ to manage and process your Personal Data as part of our product design or supply service. All of our data processors have provided statements on how they will keep your Personal Data safe and secure in compliance with GDPR legislation.

 

Data Breaches

 

We aim to ensure that we process your Personal Data in a transparent and lawful way, respecting your rights as an individual. However, if we become aware of a suspected Personal Data breach we will investigate this immediately. 

If, having assessed the situation, we believe that the Personal Data breach is likely to result in a risk to the rights and freedom of an individual then we will report the breach to the ICO within 72 hours of becoming aware of it. Examples of this may be Personal Data breaches that result in financial loss or loss of confidentiality, discrimination, damage to your rights as an individual, or our company reputation. We will inform all individuals affected by the breach.

 

Your Personal Data - whether in hard copy or digital format - will be held securely by us. The latter will be stored on the Company’s private servers, backed up regularly and will only be accessible via the use of secure passwords by trained personnel. It will be deleted accordingly when it is no longer required. Your Personal Data will not be transferred overseas.

 

If you wish to complain

 

At EJ Orr Limited we aim to meet the highest standards when collecting and using your Personal Data. If you wish to make a complaint about the way that we have processed your Personal Data, you can do this by emailing us at datarequests@orrsum.co.uk

 

Alternatively, you can contact us by phone on or by post at https://www.orrsum.co.uk/ . You can also make a complaint directly to the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns/

 

 

Contact Us

 

For more information about our privacy practices or if you have questions, please contact us by email at datarequests@orrsum.co.uk or by mail using the details provided below:


Orrsum
Unit 17

Nottingham South & Wilford Industrial Estate 

Nottingham

NG11 7EP

bottom of page