Privacy policy

1. Who we are

Signtech is the data controller. This means we are responsible for deciding how and why we hold and use your personal information.

We are registered with the Jersey Office of the Information Commissioner (“JOIC”) under registration number 15617.

We have appointed a Data Protection Manager (“DPM”) to oversee compliance with this notice. To contact the DPM, email signs@signtech.je with “Data Protection” in the subject line, telephone +44 (0) 1534 811029, or write to Signtech at Lewis Lane, St Helier, Jersey, JE2 3PF.

2. Our data protection principles

We will ensure that personal information is:

1. used lawfully, fairly and transparently;
2. collected for specified, clear and legitimate purposes and not used incompatibly with those purposes;
3. adequate, relevant and limited to what is necessary;
4. accurate and kept up to date where necessary;
5. kept only for as long as necessary; and
6. held securely and protected against unauthorised or unlawful use, accidental loss, destruction or damage.

We are accountable for our compliance with these principles and maintain appropriate measures to demonstrate that compliance.

3. Information we collect

Personal information means information relating to an identified or identifiable individual. It does not include information that has been anonymised so that an individual can no longer be identified.

Depending on how you interact with us, we may collect:

• Identity information, such as your name and title.
• Contact information, such as your address, email address and telephone number.
• Business information, such as your employer, role or occupation.
• Project information, including enquiries, specifications, artwork, photographs, site details, approvals and correspondence.
• Account and transaction information, including quotations, orders, invoices and payment status.
• Technical and usage information, such as IP address, browser or device information and how you use our website.
• Communication preferences, including whether you wish to receive marketing communications.
• Recruitment and employment information where you apply to work with us or are employed by us.

Please do not provide personal information about another person unless you are authorised to do so and have made them aware of this notice where appropriate.

4. How we collect information

We may collect personal information:

• when you contact us, request a quotation, place an order or ask us to provide a product or service;
• when you communicate with us by telephone, email, our website, social media or in person;
• when you submit artwork, photographs, plans, site information or other project materials;
• when you subscribe to communications, respond to a survey or attend an event;
• when you visit our website, through cookies and similar technologies;
• from your employer, colleague, agent or another person authorised to deal with us;
• from suppliers, professional advisers, payment providers and other organisations involved in providing our services; and
• from publicly available sources where it is lawful and appropriate to do so.

5. How and why we use information

We will use personal information only where the law allows us to. Our principal purposes and lawful bases include:

• Contract: to prepare quotations, process orders, design, manufacture, deliver, install and maintain products or otherwise provide services you have requested.
• Legal obligation: to meet accounting, tax, employment, health and safety, regulatory and other legal requirements, and to respond to lawful requests from public authorities.
• Legitimate interests: to respond to enquiries, manage our customer and supplier relationships, operate and improve our business, maintain security, recover debts, protect our legal rights and improve our services, provided your rights do not override those interests.
• Consent: where you have freely given specific consent, for example for certain marketing communications. You may withdraw consent at any time.
• Vital interests: in rare emergency situations where processing is necessary to protect someone’s life.

Change of purpose

We will use personal information for the purpose for which it was collected. If we reasonably need to use it for a compatible purpose, we may do so. If we need to use it for an unrelated purpose, we will notify you and explain the lawful basis that permits the use.

6. Website and cookies

Our website may use cookies and similar technologies to operate correctly, remember preferences, understand website use and support relevant communications. Cookies may collect technical information such as your IP address, browser type, device and pages visited.

Essential cookies are required for the website to function. Where required, non-essential cookies will be used only after you have made a choice through our cookie banner. You can review or change your choices using the cookie controls available on our website. You can also control cookies through your browser, although disabling some cookies may affect website functionality.

Our website may contain links to external websites or services. Those organisations are responsible for their own privacy practices, and we encourage you to read their privacy notices.

7. Special category information

Special category information includes information concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric information, sex life or sexual orientation.

We do not ordinarily need special category information to provide signage or related services. We may process it for recruitment, employment, health and safety or legal purposes where necessary. Where we do so, we will have both a lawful basis and an additional legal condition for processing. Where we rely on explicit consent, you may withdraw it at any time by contacting our DPM.

8. Sharing information and international transfers

We do not sell personal information. We may share it only where necessary and lawful, including with:

• suppliers, subcontractors and installation partners involved in delivering a project;
• IT, website, cloud-storage, communications and other service providers acting on our behalf;
• payment, banking, accounting, insurance and professional-advisory providers;
• public authorities, regulators, law-enforcement bodies or courts where required by law or a valid request; and
• a purchaser, investor or adviser in connection with a proposed sale, merger or restructuring of our business, subject to appropriate confidentiality measures.

Organisations processing personal information on our behalf are required to protect it, act only on our instructions and use it only for the agreed purposes.

Some service providers may process personal information outside Jersey. Where this occurs, we will ensure that the transfer is lawful and that appropriate safeguards provide a level of protection consistent with the DPJL.

9. Data security

We use appropriate technical and organisational measures designed to protect personal information against accidental loss, alteration, unauthorised disclosure or access, and other unlawful processing.

Access is limited to colleagues, agents, contractors and service providers who have a genuine need to know. They must process information only as authorised and are subject to confidentiality obligations.

We maintain procedures for responding to suspected personal-data breaches and will notify affected individuals and the regulator where legally required.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, reporting, warranty and dispute-resolution requirements.

When deciding how long to retain information, we consider its amount, nature and sensitivity; the risk of harm from unauthorised use or disclosure; the purposes of processing; whether those purposes can be achieved by other means; and applicable legal requirements.

We may anonymise information so that it can no longer be associated with you. We may use anonymised information without further notice. You may request further information about applicable retention periods from our DPM.

11. Your rights

Depending on the circumstances, you may have the right to:

• be informed about how your personal information is used;
• request access to your personal information and information about how it is processed;
• request correction of incomplete or inaccurate information;
• request erasure of your information where there is no lawful reason for us to continue processing it;
• object to processing based on legitimate interests or for direct marketing;
• request restriction of processing in certain circumstances;
• request data portability for certain information you provided to us; and
• raise concerns about solely automated decision-making that has a legal or similarly significant effect on you.

These rights are not absolute and may be subject to conditions, limitations or exemptions under the DPJL. More information is available from the JOIC guidance on individual rights.

12. Making a data-protection request

To exercise a right, contact our DPM using the details in section 1. Please describe your request clearly and identify the information concerned. You may make a request verbally or in writing, although a written request can provide a useful record.

We may ask for information reasonably necessary to confirm your identity and ensure that personal information is not disclosed to someone who is not entitled to receive it. We may also ask for clarification where needed to locate the relevant information.

We will respond without undue delay and ordinarily within four weeks after receiving and, where necessary, verifying your request. If a request is complex or we receive several requests, the law may permit additional time. If so, we will explain this before the initial period expires.

You will not normally have to pay a fee. We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, as permitted by law.

13. Marketing and withdrawing consent

Where we send electronic marketing, we will do so on an appropriate lawful basis and provide a straightforward way to opt out. You can unsubscribe using the link in a marketing message or contact us at any time.

Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. We may continue processing where another lawful basis applies.

14. Changes to this notice

We may update this Privacy Notice from time to time to reflect changes in our services, practices or legal obligations. The latest version will be published on this page with its revision date. Where a change is significant, we may also notify you by another appropriate method.

Please tell us if your personal information changes during your relationship with us so that we can keep it accurate and current.

15. Questions and complaints

We would appreciate the opportunity to resolve any concern about how we use your personal information. Please contact our DPM first. You also have the right to raise a concern with the Jersey Office of the Information Commissioner.