Last Updated May 20, 2022
Welcome to the website (the “Site”) of L.P.W. Technology Limited trading as Carpenter Additive (“Carpenter,” “we,” “us,” or “our”). Carpenter Additive is part of a global leader in high-performance specialty alloy-based materials and process solutions for critical applications in the aerospace, automotive, defence, energy, industrial, medical, and consumer electronics markets. On the Site, we make available for purchase our non-custom metal powders (“Products”).
This Privacy Policy explains what personal data we collect when you order Products through the Site, how we use and share that data, and your rights and choices with regards to your data. This Privacy Policy does not apply to information collected through your use of the www.carpenteradditive.com website, which is subject to a separate privacy policy available on that website.
Before using the Site or submitting any personal data to Carpenter, please review this Privacy Policy carefully and contact us if you have any questions.
- Our data protection obligations to you
Carpenter is committed to ensure that your privacy is protected and will only process your personal data in accordance with applicable privacy laws, including, without limitation, the General Data Protection Regulation (“GDPR”) and the GDPR in such form as is incorporated into the laws of the United Kingdom.
- The data controller
For the purposes of data protection legislation, Carpenter is the controller of your personal data collected in connection with this Privacy Policy. Our registered office is at 54 Portland Place, London, England, W1B 1DY. We are registered as a controller with the Information Commissioner’s Office (registration number ZA308541).
You can contact our Data Protection Officer by post at Dennis Road, Widnes WA8 0GU, England or by sending an email to webprivacy@cartech.com.
- How we collect or obtain personal data about you
Personal data includes any information relating to an identified or identifiable person. We collect personal data about you when you provide it to us, such as when you create an account, place an order for the Products through the Site, or when you contact us directly by email, phone, via social media or in writing.
We also collect information about your use of our Site through cookies and similar technologies. Our cookies policy sets out more of the information on how we use cookies and similar technologies to collect information about you. You can access our cookies policy via this link Cookie Policy
- Personal data we collect
We collect the following categories of personal data from you:
- Account data, including your name, email address, company name, physical address, and phone number
- Payment and transactional data, including name, payment card information, bank account number, billing information, and your transaction history. This information is collected by our payment provider, Stripe, and Carpenter does not have access to payment card numbers. In addition to this Privacy Policy and our Terms of Sale, information related to your payments or purchases is also processed according to Stripe’s services agreement and privacy policy.
- Order information, including Products ordered, delivery address information, shipping charge.
- Communications that we exchange with you when you contact us with questions or feedback.
- Device data, including information about your computer or device (e.g. your IP address and browser type, MAC address, manufacturer, operating system).
- Usage data, which includes information about how you use our Site (e.g. which pages you have viewed, the time you viewed them and what you clicked on). For more information, please read our cookies policy at this link: shop.carpenteradditive.com/cookies-policy.
- How we use personal data
To the extent we collect personal data from you, as described in this Privacy Policy, we use such information for the purposes, and rely on the legal bases, listed below. Note, that in certain circumstances detailed below, we will process your personal data on more than one legal basis depending on the specific purpose for which we are using your personal data.
Where your personal data is required in order to enter into a contract with you or to comply with a statutory obligation (in order to be able to send you an invoice for products and services you wish to order from us, for example), if you do not provide your personal data we will not be able to enter into a contract with you or to provide you with those products or services.
|
Type of Personal Data |
Purpose |
Legal Basis |
|
Account data |
To create and maintain your account. |
Performance of a contract |
|
Account data |
To communicate with you about the Products, respond to your inquiries, send you announcements, updates, security alerts, support, delivery requirements and administrative messages |
Performance of a contract Legitimate interests in (i) providing you the information that you request, (ii) keeping our services, network and information systems secure, and (iii) sending you information on our own products and services that may be of interest to you and informing our marketing strategy Consent, for sending marketing communications regarding other products and services that may be of interest to you |
|
Account data |
To comply with our legal and regulatory obligations and requests, including reporting to and/or being audited or investigated by national and international regulatory bodies, comply with court orders and to exercise and/or defend our legal rights. |
Legal obligation |
|
Payment and transactional data |
To authorize Stripe to process your transactions with us
|
Performance of a contract |
|
Order information |
To process your orders To comply with our legal and regulatory obligations and requests, including reporting to and/or being audited or investigated by national and international regulatory bodies, comply with court orders and to exercise and/or defend our legal rights. |
Performance of a contract Legal obligation |
|
Communications |
To communicate with you in relation to updates to the Site, your purchase(s) of our Products or services, and in response to enquiries we receive from you To retain the record of transactions/relationships, and for training, quality assurance, and administration purposes |
Performance of a contract Legitimate interests in improving the overall experience of our prospects and customers, and running and managing our business effectively |
|
Device data |
To administer and protect our Site, preventing and detecting security threats, fraud or other criminal or malicious activities. |
Legitimate interests in (i) enhancing user experience; (ii) improving the Site and developing new features and services; (iii) optimizing our marketing efforts; keeping the Site, network and information systems secure |
|
Usage data |
To administer, run and improve our Site, including personalising our website experience for you |
Legitimate interests in better understanding our customers’ and potential customers’ preferences and tailoring our Site, products and services to their needs and preferences
Consent, in relation to cookies and other similar technologies where required under the applicable law |
- Sharing of personal data
We may share your personal data with the following categories of recipients:
- staff members in order to facilitate the provision of goods or services to you;
- our affiliated entities to support internal administration;
- third party service providers, to perform business functions on our behalf such as IT software providers that host our Site and store data on our behalf, and third party research providers who will capture your feedback on transactions to improve our services;
- professional advisers including consultants, lawyers, bankers and insurers who provide us with consultancy, banking, legal, insurance and accounting services;
- HM Revenue and Customs, regulators, courts, and other authorities who require reporting of processing activities in certain circumstances, or other parties where it is reasonably necessary for the establishment, exercise or defense of a legal or equitable claim; and
- third parties who we may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may seek to acquire other business or merge with them. If a change happens to our business then the new owners my use your personal data in the same way as set out in this privacy policy.
- How long we store your personal data
We will only retain your personal data for as long as is necessary for fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the following:
- the purpose(s) for which we are processing your personal data, such as whether it is necessary to continue to store that information to perform our obligations under a contract with you or for our legitimate interests;
- whether we have any legal obligation to continue to process your information, such as any record-keeping obligations imposed by applicable law; and
- whether we have any legal basis to continue to process your personal data, such as your consent.
- Securing your personal data
We take appropriate technical and organisational measures to help secure your personal data and help protect it against unauthorised or unlawful use or processing as well as against the accidental loss or destruction of, or damage to, your personal data.
Transmission of information (including personal data) over the internet is not entirely secure, and if you submit any information to us over the internet (whether by email, via our website or any other means), you do so entirely at your own risk.
- Transfers of your personal data to other countries
We hold your personal data within the UK, but we may need to transfer your personal data to our parent company Carpenter Technology Corporation in the United States for administrative and operational purposes in connection with processing and administering orders for the Products. The United States may have data protection laws less stringent than or otherwise different from the laws in effect in Europe. We have implemented standard contractual clauses to ensure that your personal data is protected in connection with such transfers.
- Your rights
You may have the right to: (a) request access to your personal data we hold about you; (b) request we correct any inaccurate personal data we hold about you; (c) request we delete any personal data we hold about you; (d) restrict the processing of personal data we hold about you; (e) object to the processing of personal data we hold about you; (f) receive any personal data we hold about you in a structured and commonly used machine-readable format or have such personal data transmitted to another company; and/or (g) withdraw your consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. In certain circumstances we reserve the right to charge a reasonable fee to comply with your request.
We may ask you for additional information to confirm your identity and for security purposes, before disclosing information requested to you. We will process any request in line with any local laws and our policies and procedures.
Please note if you refuse to provide certain data or ask for us to delete your personal data, we may no longer be able to provide certain services to you. There may be occasions where we are unable to delete or update your personal data for legal obligations or for compelling legitimate interest.
Please send any requests relating to the above to our Data Protection Officer at Dennis Road, Widnes WA8 0GU, England, or emailing us at webprivacy@cartech.com specifying your name and the action you would like us to undertake.
You also have the right to lodge a complaint about how we process your personal data with the supervisory authority in your country, which, for the purposes of the UK, is the Information Commissioner’s Office (ICO), the contact details of which are available here: https://ico.org.uk/global/contact-us/.
- Links to other websites
The Site may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over these other websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites; and such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy notice applicable to the websites concerned.
- Changes to the privacy policy
The Site and our business may change from time to time. As a result we may change this Privacy Policy at any time. When we do we will post an updated version on this page, unless another type of notice is required by the applicable law. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
- Contact us
If you have any questions about our Privacy Policy or information practices, please feel free to contact us at our designated request address: webprivacy@cartech.com.