Privacy Notice
About this Privacy Notice
We provide this privacy notice to help you understand how we collect and use your personal information. It relates to the personal information we collect from trade customers, site visitors and end-user consumers of our products. If you are an applicant applying for a job at CDA we have a separate applicant privacy notice that you should read; for our own staff we have a separate internal privacy notice.
If you have any queries or concerns about this privacy notice, or how we process your personal information, please contact our Data Compliance Officer:
By email: data.privacy@cda.co.uk
By post:
The Data Compliance Officer
The CDA Group Ltd
Harby Road
Langar
NG13 9HY
We regularly review this privacy notice and may make changes from time to time. You should check this page occasionally to ensure that you are familiar with any changes. The reference of the current version you are reading is available at the bottom of this notice.
Who We Are
The organisation responsible for processing your personal information is The CDA Group Limited (CDA). This means that we are a data controller under the UK General Data Protection Regulation (also known as the UK GDPR). Our registration number with the Information Commissioner’s Office is Z4998550.
Our address is:
The CDA Group Ltd
Harby Road
Langar
NG13 9HY
CDA is a UK-based manufacturer of kitchen appliances, sinks and taps and is a wholly owned subsidiary of the Amica Group based in Wronki, Poland.
In the UK CDA manufactures and distributes products under three brand names: CDA, Amica and Matrix.
Our Online Services
CDA operates three UK websites: cda.co.uk, matrixappliances.co.uk, and amica-international.co.uk.
In Ireland, CDA operates amica-international.ie.
We operate a B2B e-commerce site on the Tradeplace platform.
Where we provide links to external websites, this privacy notice does not cover how that organisation may handle your personal data and we are not responsible for their content. You should read their privacy notice for details of how they handle your personal data.
Cookies
A cookie is a small text file that is placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently. They also provide information to the owners of the site. Visit our cookies page to find out what cookies we use and why.
What Information We Collect About You
We may collect and process the following information about you:
- Name, including title, initial, first name and last name
- Address and postcode
- Contact details including email address and phone number
- Appliance details, including make, model and serial number
- Vehicle registration number
- Images captured by CCTV
How We Collect Your Information
Most of the personal information we hold about you is that which we collect directly from you, for example when:
- You register your appliance for warranty purposes
- You enter into a commercial agreement with us
- You request appliance advice, servicing or repairs by telephone, email and chat and from forms submitted on our websites
- You arrange home delivery services
- You order parts or user manuals from us and we arrange delivery services
- You make a phone call into our business and the call is recorded
- You redeem sales promotions and gift claims, or enter competitions
- You place purchase orders for our products or services
- You make enquiries or raise concerns with us
- You contact us to report a problem or make a complaint
- You visit us in person and are recorded in CCTV images taken by cameras located around our sites and on our vehicles
- You visit our offices and check in at reception
- You log in to our guest Wi-Fi system
Where Else We Obtain Your Information
Generally, we collect personal data from an individual but we may obtain it from other sources such as:
- Retailers who ask us to arrange delivery of products and services
- Our warranty registration partners who share your information with us to update our product registration records and to facilitate efficient servicing and repairs under the terms of the warranty
How We Use Your Information
We use your personal information for a number of different purposes as described here.
- Managing your account
- Processing orders and returns
- Producing operational information
- Administering appliance registrations and guarantees
- Administering and providing appliance servicing and repairs and recording the outcome of these
- Providing notices, certificates and work records relating to the goods and services we have provided
- Recording any legal/statutory notices we may have issued or supplied, including Gas Safe Certificates, Warning Notices, ‘At Risk’ notices and ‘Not to Current Standard’ labelling
- Recording CCTV images for security monitoring and fraud prevention, and to allow us to investigate incidents
- Managing visitors to our site and offices
- Controlling Internet content provided through our guest Wi-Fi
- Processing orders on our Tradeplace e-commerce platform
- Administering promotions, gift claims and competitions
- Administering problems and complaints
- Assessing financial and insurance risks, including by carrying out credit reference checks and credit scoring assessments
- Requesting product reviews related to the products you have registered with us
- Contacting you to carry out customer satisfaction surveys related to your registered products and the services we provide you
- Contacting you to offer our repair and e-shop services when you have registered your product with us
- Marketing appliance extended warranty and insurance products by either CDA or Domestic & General (our extended warranty partner)
Our Legal Bases for Processing Your Information
There are a number of legal reasons for which we process your data. These are:
Contractual when we need the information to perform the contract for goods or services you have requested/ordered, including payment, delivery, etc.
Legal Obligation should we be legally required to process your information in relation to our supplying a product or service.
Legitimate Interest to enable us to:
- Provide you with goods and services and manage your account and your relationship with us
- Protect our financial position and provide appropriate levels of credit for our customers
- Facilitate security, incident investigation and fraud prevention
- Contact you by post, email, phone, SMS or messaging apps to carry out customer feedback surveys and appliance reviews to help us improve our products and services
- Contact you by post, email, phone, SMS or messaging apps to provide you with information relating to products or services which we believe would be of interest, benefit or utility to you
Consent where you have given us consent to process your personal information or to share your personal information with a third party.
Automated Decisions and Profiling
We do not use personal information for automated decision-making or profiling.
Who We Share Your Data With
Where relevant given the nature of the products and services provided to you, we may also share your information with the following categories of and specified third parties:
- Outsourced repair agents who carry out appliance repair and installation services on our behalf
- Partners who administer and deliver promotional goods and services that you sign up to
- Logistics, delivery and courier service providers who deliver products, parts and documents on our behalf
- Extended warranty and insurance provider Domestic & General (Domestic & General Insurance PLC and Domestic & General Services Limited) who act as data controllers for the purposes of promoting, selling and administering appliance extended warranty, breakdown or accidental damage cover, and for managing service requests made under such policies
- Reevoo, Feefo, Trustpilot and other review websites who may contact you and invite you to review the products and services we provide
- Security service partners that access CCTV and visitor records
- Tradeplace e-commerce platform for processing orders and deliveries
- Third parties if we have a duty to comply with any legal obligation, or in order to enforce or apply our terms of use, our terms and conditions of supply or other agreements; or to protect the rights, property, or safety of The CDA Group Ltd, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- Your information may be processed within the EEA on SAP's cloud servers
- Your information will be processed within the systems of the Amica Group, our parent company
Credit Reference and Affordability Checks
To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.
-
Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority
FCA Firm Reference Number: 742313 -
TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority
FCA Firm Reference Number: 805757
The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.
Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:
-
Creditsafe Privacy / Transparency Notice:
Transparency Notice | Customers & Suppliers -
TransUnion CRAIN (Credit Reference Agency Information Notice):
https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference -
TransUnion Bureau Privacy Notice:
https://www.transunion.co.uk/legal/privacy-centre/pc-bureau
Processing Outside of the EU
The personal information that we collect from you will not be transferred or processed outside of the EU.
How Long Your Information Is Kept For
We keep personal information only for as long as it is needed for the purpose for which it was collected, or where we need to keep it to meet legal, regulatory, tax, accounting, warranty, product safety, contract, complaint handling or claims management requirements.
We maintain a data retention schedule which sets out how long different categories of personal information are kept and what happens at the end of the retention period, such as deletion, secure archiving, anonymisation or restricted access.
Examples:
- Appliance registration, warranty and service information is normally retained for up to 15 years where this is needed for warranty, service, product safety or recall purposes
- Call recordings are normally retained for 12 months unless they are needed for a complaint, investigation, dispute or legal reason
- CCTV images and visitor records are normally retained for 30 days unless they are needed to investigate an incident or crime
- Promotion and gift claim fulfilment information is normally retained for 12 months to allow us to deal with related queries
- Financial, account management, order and tax-related records may be retained for up to 6 years, or longer where required by law or where needed for claims, audit or dispute purposes
Some personal information may be held in operational systems, ERP systems, archives, backups or Group systems. Where this applies, access may be restricted and the information will be retained only where there is a valid business, legal, technical, regulatory, product safety, warranty or claims-related reason to do so.
Your Rights
You have the following rights relating to your personal information:
- To require that we cease processing your personal information if the processing is causing you damage or distress
- To require us not to send you marketing communications
- To require us to erase your personal information
- To withdraw the consent you have given us to process your information
- To require us to restrict or object to our data processing activities in relation to your personal data
- To receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal information to another data controller
- To require us to correct the personal information we hold about you if it is incorrect
Please note that these rights are not absolute and may be limited by data protection and other legislation, and we may be entitled or obligated to refuse requests where exemptions apply.
If you would like to exercise any of the data privacy rights relating to your personal information that we hold, please contact our Data Compliance Officer using the information provided at the top of this notice.
If you are not satisfied with how we are processing your personal information you have the right to make a complaint to the UK’s Information Commissioner’s Office (ICO): www.ico.org.uk. The ICO can also provide you with more information on your rights under data protection legislation.