This website privacy notice (“privacy notice”) tells you how we use your personal information (personal data).
- Contact details
- What personal data we collect, use, and why
- Lawful bases and data protection rights
- Where we get your personal data from
- How we protect your personal data
- Cookies
- How long we keep your personal data
- Who we share your personal data with
- How to complain
Contact details
Telephone: 07368 534427
Email: [email protected]
What personal data we collect, use, and why
We may collect or use the following information to provide you with our services:
- Names and contact details
- Purchase or account history
- Payment details (including card or bank information for transfers and direct debits)
- Health information (for example information relating to health conditions)
- Health and safety information
- Website user information (including user journeys and cookie tracking)
- Records of meetings and decisions
- Information relating to compliments or complaints
We may collect or use the following information to provide you with our services:
- Racial or ethnic origin
- Religious or philosophical beliefs
- Health information
- Sex life information
- Sexual orientation information
We may collect or use the following information for service updates or marketing purposes:
- Names and contact details
- Marketing preferences
- Location data
- Purchase or viewing history
- IP addresses
- Website and app user journey information
- Records of consent, where appropriate
We collect or use the financial transaction information to comply with legal requirements.
We may collect or use the following personal information for dealing with queries, complaints or claims:
- Names and contact details
- Payment details
- Purchase or service history
- Customer or client accounts and records
- Information relating to health and safety
- Correspondence
We may also collect the following information for dealing with queries, complaints or claims:
- Racial or ethnic origin
- Religious or philosophical beliefs
- Health information
- Sex life information
- Sexual orientation information
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal data. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
- Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
- Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your personal data
Our lawful bases for collecting or using personal data to provide you with our services are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use your personal data so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legal obligation – we have to collect or use your personal data so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
- Legitimate interests – we’re collecting or using your personal data because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
- to enable us to run our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise; and
- to administer, operate and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support reporting and hosting of data.
In the event we use your personal information for service updates or marketing purposes, we will rely on the following lawful bases:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Legitimate interests – we’re collecting or using your personal data because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
- to study how clients use our services, to develop them, to grow our business and to inform our marketing strategy;
- to carry out direct marketing, develop our products/services and grow our business;
- to study how clients use our services and to help us improve and develop our services; and
- to define types of clients for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy.
Our lawful bases for collecting or using personal information for legal requirements are:
- Legal obligation – we have to collect or use your personal data so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to ensure we can provide clients and website users with the requested information or quotes for our services.
Where we get your personal data from
- Directly from you
- Publicly available sources
- Suppliers and service providers
How we protect your personal data
We do not transfer your personal data outside the UK.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Cookies
Cookies are small files saved to the website user’s computer hard drive that track, save and store information about the website user’s interactions and usage of the website. This allows the website, through its server to provide the website users with a tailored experience within this website.
This website uses the _ga cookie to store and count page views. This cookie (provided by Google) expires after 2 years and is used for statistical purposes. Where applicable this website uses a cookie control system allowing the website user on their first visit to the website to allow or disallow the use of cookies on their computer / device. This complies with recent legislation requirements for websites to obtain explicit consent from website users before leaving behind or reading files such as cookies on a website user’s computer / device.
How long we keep your personal data
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
Who we may share your personal data with
Data processors
Microsoft
We use Microsoft Outlook for the purpose of communicating with our clients by email.
Black Creative Media
Provides web design services.
Others we may share your personal data with
- Organisations we need to share information with for safeguarding reasons;
- Professional or legal advisors;
- Relevant regulatory authorities;
- External auditors or inspectors; and/or
- Organisations we’re legally obliged to share personal data with.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated 21st November 2024