Updated November 2018
Central Research Laboratory (Hayes) Ltd is committed to protecting and respecting your privacy.
This privacy notice explains how we collect personal data about you when you visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure. It also outlines how you can get in touch with us if you have any data protection related queries.
We may change the policy notice from time to time so please check this page occasionally to ensure that you are happy with any changes. This Fair Processing Notice was last updated on 16 May 2018.
Please note: the pages on this website are published by Central Research Laboratory (Hayes) Ltd.
As data processors acting on behalf of Central Research Laboratory (Hayes) Ltd and Campaign Monitor are required to comply with this notice. Any information collected by them will be dealt with in accordance with the contents of this notice. .
Overview of processing
Central Research Laboratory (Hayes) Ltd process data in order to circulate News alerts by email to anyone who actively opts-in to receive such information. They also process data on behalf of Central Research Laboratory (Hayes) Ltd in order to manage our relationship with you which will include: to administer and protect our business and this website; to deliver relevant website content to you; and use data analytics to improve our website, marketing and experiences. More information on the use of your personal data for analytics and marketing can be found below, and in most cases you have the right to opt out of such processing.
Campaign Monitor stores personal data on behalf of Central Research Laboratory (Hayes) Ltd to enable us to circulate Central Research Laboratory news, publications and events by email to anyone who actively opts-in to receive such information. If you have opted in, you can choose to opt out at any time by contacting us.
1. Important information and who we are Purpose of this privacy notice
This notice gives you information on how Central Research Laboratory (Hayes) Ltd, and its data processor: Campaign Monitor, collect and process your personal data through your use of this website, including any data you may provide through this website when you sign up to receive Central Research Laboratory newsletters, news, publications and events.
This website is not intended for children and we do not collect data relating to children.
Central Research Laboratory (Hayes) Ltd is the controller and responsible for your personal data (collectively referred to as Central Research Laboratory (Hayes) Ltd, ‘we’, ‘us’ or ‘our’ in this privacy notice).
If you have any questions about this privacy notice, including requests to exercise your legal rights, please contact Mat Hunter using the details set out below:
Controller: Central Research Laboratory (Hayes) Ltd Mat Hunter:
Email address: firstname.lastname@example.org
Postal address: Central Research Laboratory, The Shipping Building, The Old Vinyl Factory, 252-254 Blyth Road, Hayes, UB3 1HA
We are registered with the Information Commissioner’s Office as a Data Controller and our registration number is:
This website contains links to third-party websites. Clicking on those links may allow third parties to collect or share data about you including placing cookies on your
device for their own purposes such as targeted advertising. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
Found out more about these cookies in our Cookie Notice.
2. The data we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you. This includes:
- Contact Data includes email address
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this
- Usage Data includes information about how you use our
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences. You have a right to withdraw your consent for marketing at anytime by getting in touch with
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
3. How is your personal data collected?
We use different methods to collect data from and about you, including through:
- Direct interactions: You may give us your Contact Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- subscribe to the newsletters, news, publications and events circulated by Central Research Laboratory (Hayes) Ltd;
- request marketing to be sent to
Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies. Please see our cookie notice for further details.
- Third parties or publicly available sources. We receive personal data about you from third parties e.g. analytics providers such as Google based outside the
4. How we use your personal data?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where it is necessary for our legitimate interests (or those of a third-party) and your interests and fundamental rights do not override those
- Where we need to perform the contract we are about to enter into or have entered into with
- Where we need to comply with a legal or regulatory
Below we outline the types of lawful basis that we will rely on to process your personal data.
Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email. You have the right to withdraw consent to marketing, at any time, by contacting us using the details provided at the beginning of this notice.
Purpose for which we will use your personal data
Whenever we process personal data, we must have a lawful basis for doing so. Depending on why we collect your personal data, we my process your personal data for more than one lawful basis.
We have set out in the table below a description of all the ways we plan to use your personal data, and which of the lawful basis we rely on to do so. We have also identified what our legitimate interests are where appropriate.Please contact us using the details provided at the beginning of this notice if you need details about what lawful basis we are using.
You have the right to object to direct marketing. We have established the following personal data control mechanisms to meet these rights.
• Third-party marketing
We will get your express opt-in consent before we share your personal data with any company outside Central Research Laboratory (Hayes) Ltd for marketing purposes.
• Opting out
You can ask us, our processors (Campaign Monitor) to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us, at any time, using the details provided at the beginning of this notice. You can also disable any third party cookies being placed on your browser. Some cookies are required for the funct
1. Disclosure of your personal data
In order to provide a service to you, we will share elements of your personal data with the parties set out below for the purposes set out in the table above. Disclosure of your personal data will be proportionate for the purposes required and in all cases will be governed by a formal agreement between ourselves and the data processor:
- External Third Parties: Service providers acting as data processors based the United Kingdom who provide IT and system administration services. Service providers acting as processors based the United Kingdom who provide communication services.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
2. International transfers
We do not transfer your personal data outside the European Economic Area (EEA).
7. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
8. Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us using the details provided at the beginning of this notice.
9. Your rights
The Data Protection Act gives you rights around how we manage your personal data. Your rights include the right to access your data, to object to an organisation processing your data and in some cases transfer or erase your personal data where there is no longer a need to process it for the original purpose that you provided it. If you would wish to exercise your information rights, you can contact us using the details at the beginning of this notice.
You can find more information about your information rights by contacting the Information Commissioners Office via ico.org.uk.