Who we are
CTVS Group operates automated retail infrastructure in the United Kingdom. For the personal data described in this notice, CTVS Group is the data controller.
What we collect
If you send us an enquiry, we collect the name, organisation, email address, telephone number and location details you choose to give us, together with the content of your message.
Our sited units do not collect personal data. Payment is handled entirely by a PCI DSS compliant payment provider, and no cardholder data reaches us. Telemetry from a unit reports sales volume, stock position and fault state. It does not identify individuals.
Our website sets no advertising or analytics cookies. See our cookie policy.
Why we use it
To answer your enquiry, to arrange and carry out a site survey, and to manage a siting agreement if one follows. The lawful basis is legitimate interests for responding to a business enquiry, and contract where an agreement is in place.
Who we share it with
Our hosting and enquiry handling providers, acting on our instructions under contract. We do not sell personal data and we do not share it for marketing.
How long we keep it
Enquiries that do not lead to an agreement are deleted within 24 months. Records relating to an agreement are kept for the life of that agreement and for six years afterwards, which is the ordinary limitation period.
Your rights
You have the right to ask for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it, and to data portability where it applies. Contact us through the enquiry form and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this notice changes materially we will update the review date below.