We currently collect and process the following information:
Most of the personal information we process is provided to us directly by you for one of the following reasons:
We use the information that you have given us in order to provide you with the products and services you have purchased from us; to inform you of legitimate business information that is relevant to your relationship with us, and to provide you with updates regarding our products and services that may be of interest to you.
We do not share your information outside our organisation without your consent unless legally obliged to do so.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting firstname.lastname@example.org
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a vital interest.
(e) We need it to perform a public task.
(f) We have a legitimate interest.
Your information is securely stored. We keep all physical and digital records for three years following the end of our contractual agreement. We will then dispose your information by shredding (physical records) and deleting digital records (including emails and automatic back ups). We engage the services of IT specialists to ensure the secure storage and deletion of digital records.
Under data protection law, you have rights including:
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at email@example.com if you wish to make a request.
If you have any concerns about our use of your personal information, you can make a complaint to us at firstname.lastname@example.org.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk