Under current data protection legislation we have legal grounds to process your personal data are as follows: · In order to perform a contract for a product or service to which you are a party, or to undertake the necessary process before entering into a contract with you for that product or service. · We have your explicit consent to the processing of your personal data for one or more specific purposes, namely 1) electronic marketing by us where you have given us consent and/or 2) to process your Special Category Personal Data described above. You can still receive our services without providing marketing consent. · It is a necessary requirement as part of our legitimate business interests, unless our interests are overridden by the interests, rights or freedoms of individuals affected (such as you). A number of factors are considered to determine this, such as our correspondence and conversations at the time you provided the data, your expectations from the processing of the data, the type and nature of the data, and the impact of us processing your data. Our legitimate interests include processing your data to promote and improve product and services provided by us and to develop a better understanding our customers’ interests and our knowledge of the market in which we operate and for the day to day administration and the technical aspects of our service and products. · In rare circumstances and to comply with legal obligations. · In order to protect your interests or the interests of a 3rd party; and/or · Where it is required for official purposes or is in the public interest. Why is your information required and how will we use it? Your personal information will be held and used in the following ways: · To provide you with our products and services for which we are obligated. · We may be required to share your information with others to provide a product or service for which we are obligated to you or where acting as agent for a third party on your behalf. · As part of our regulatory and statutory and obligations, including [identity verification, prevention of money laundering and fraud and for the assessment your credit worthiness. · We may communicate and have contact with you during the course of providing our product and services, for example dealing with your requests and enquiries. · Your data may provide statistics that can be analysed to plan for future products and services and help manage our business. · Where we have your permission to do so or if you are an existing customer your data will be used to provide you, or to enable third parties to provide you with information about goods or services we believe may be of interest or relevant to you. where we choose to contact you by electronic means (including e-mail or SMS) with information about our own goods and services similar to those which you have already obtained from us or negotiated to obtain from us. You can unsubscribe from marketing messages at any time. · Your usage of our website, app and other online services will be tracked and maybe used to improve these services. · You may be notified of changes to our products or services · Your data will be used to ensure our website, app and other online services are presented to you in the relevant format for your device or computer. How long is your data stored with us Your personal data will be retained for different periods depending on the product or service we provide you. This may be a longer period than that for which we need to hold your data to provide those services, i.e. where we are under regulatory or statutory duties to hold your data for a longer period or need to retain it in the event of a legal claim or complaint. Who do we share your personal information with As part of our daily business activity we may pass your data to service providers in order for us to deliver the services you expect from us. These include but are not limited to other companies providing you a service linked to our own, cloud computing host providers and technical support service providers. We will also pass your details where necessary to your legal services and possibly the legal services of other parties to your transaction. We may also disclose your personal information to third parties: · Your personal data will be disclosed to any prospective buyer or seller in the event that we buy or sell any business assets. · Should we sell our company the personal data held by us will be considered part of the sale and transferred to the 3rd party acquiring the business. · If there is a legal duty or regulatory obligation with which we must comply or to protect the rights, property, or safety of our company, our customers, or others we will disclose or share your personal data. This includes exchanging information with other companies and organisations for the purposes of credit risk reduction and fraud protection Prior consent will be obtained from you before we share your information with third parties for marketing related purposes. Data and information security Your data will be held on secure servers which may or may not be located in the EEA (European Economic Area). All reasonable operational and technological measures have been put in place to safeguard your data, our content and our systems from any unauthorised access. Wherever possible any identifiable information will be secured, encrypted or minimised. Parts of our system may be accessible by our customers and users. This access will be password protected. If you have been given a username and password which enables you to access certain parts of your data on our systems it is your responsibility to keep it confidential. Under no circumstances should you disclose or share it with anyone. User rights Accessing and updating your information. It is your right to request a copy of the personal data and information we hold about you. This is known as a data subject access request. It is also your right to request that information we hold about you which may be incorrect, or which may have changed since you first told us, is updated or removed. There is no charge for this service. Please send requests to Mr Nick Christofides at firstname.lastname@example.org – Data Protection Officer] Deletion of your information and data
It is your right to ask us to delete or remove personal data where there is no good reason for us continuing to store and process it. It is your right to ask us to delete or remove your personal information and data where you have successfully exercised your right to object to processing (see below), where we no longer have your consent for us to process it (as explained below), where we may have processed your information unlawfully or where we are required to delete your personal information and data to comply with local law. Note, however, that it is not always possible to comply with your data and information deletion request for specific legal reasons which will be notified to you, if applicable, at the time of your request. Withdrawing your consent. It is your right at any time to withdraw any consent you have given us to process your personal information and data. Please note if you withdraw your consent it will not affect the lawfulness of any processing of your personal data we have carried out before you withdrew your consent. Your consent preferences can be changed at any time by contacting us at email@example.com Restricting or objecting to our use of your data and information It is your right to ask us to suspend the use of your data and information in certain scenarios, or object to our processing your information and data where we are relying on a legitimate interest ground (or those of a third party) and you believe it impacts on your fundamental freedoms and rights, or where your data and information is being processed for direct marketing purposes. Each case will be investigated and in some cases where you object, we may demonstrate that we have compelling legitimate grounds to process your data and information which override your freedoms and rights. Often your data is essential to the supply and delivery of a service provided by us to you. Please note that if you want us to restrict or stop processing your data and information this may impact on our ability to provide that product or service. Depending on the extent of your request we may be unable to continue providing you with our service. Questions, concerns or any other enquiry relating to the way we process and use your data and information is being used can be sent to Mr Nick Christofides at firstname.lastname@example.org . The moving of your data and information to another organisation If your data and information is processed by automated means where consent for us to use your data and information has been provided by you or where we used the information to perform a contract with you, it is your right to request that a copy of your personal data and information be sent to you or to another organisation, for example when you are dealing with a different service provider. These requests are free of charge. If you would like us to move, copy, or transfer your data and information please let us know by email to email@example.com . We will respond to you within one month after assessing whether this is possible, taking into account the technical compatibility with the other organisation in question. Complaints about the use of your personal data and information. Complaints regarding the use of your personal data and information will be investigated. If you wish to raise a complaint on how we have handled your personal data and infomation, you can contact us to have the matter investigated by writing to Mr Nick Christofides at firstname.lastname@example.org – Data Protection Officer. If you believe we are not handling or processing your personal data and information in accordance with the law or if you are not satisfied with our response to a data information complaint or request you can complain to the UK data protection regulator, the Information Commissioner’s Office. Further details can be found at www.ico.org.uk or 0303 123 1113.