DATE LAST UPDATED: August 15, 2023
Who Is the ‘Controller’?
What Is Our Lawful Basis?
The Personal Data We Process and Why We Use It
We only collect the personal data necessary to carry out our business for the purposes set out in the next section headed “Why we use your information”. We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.
Solely Automated Decision-Making
We do not perform solely automated decision-making, including profiling, when processing your personal data.
Transfer of Your Personal Data
To the extent your personal data is transferred to countries outside of the European Union, European Economic Area and/or United Kingdom such transfers will only be made in accordance with the EU and UK Privacy Laws. For further information about the safeguards used, please contact [email protected].
Retention of Your Personal Data
We will keep your personal data only for as long as is reasonably necessary for the purposes set out in the “Why we use your information” section of the Privacy Notice, unless a longer retention period is required by law. We will not keep more personal data than we need for those purposes. For further information about how long we will keep your personal data for, please contact [email protected].
Your Rights Under EU and UK Privacy Laws
To the extent that the EU and UK Privacy Laws apply to you, you may have a right of access to the personal data that we hold about you and to some related information, and there are a number of ways you can control the way in which and what personal data we store and process about you as set out below.
- Access. You have the right to ask for a copy of the personal data that we hold and process about you.
- Correction. You have the right to ask us to correct inaccurate personal data and to complete incomplete personal data we hold about you.
- Deletion. You have the right to ask us to delete your personal data in certain circumstances. Please note that this may not always be possible due to legal obligations.
- Restrictions on use. You have right to request that we stop processing your personal data (other than storing it), if: (i) you contest the accuracy of it (until the accuracy is verified); (ii) you believe the processing is against the law; (iii) you believe that we no longer need your personal data for the purposes for which it was collected, but you still need your personal data to establish or defend a legal claim; or (iv) you object to the processing, and we are verifying whether our legitimate grounds to process your personal data, override your own rights.
- Objection. You have the right to object to our processing of some or all your personal data in certain circumstances including: (i) for direct marketing; (ii) for research or statistical purposes; or (iii) where processing is based on legitimate interests.
- Portability. You have the right to ask that we transfer the personal data that we hold and process about you on the legal ground of contractual necessity to another organisation or to you, in certain circumstances (including where we have the technical means to do so).
Please contact us if you wish to exercise any of the rights set out above. In the event you do contact us, we may need to verify your identity to allow us to prevent disclosure of your information to an unauthorised person. Please note that if you request erasure, object to our processing of your personal data or request the restriction of our processing of your personal data we may not be able to provide our services.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive to help us cover the costs of locating the information you have requested.
We normally respond to requests within one month. Occasionally it may take us longer, if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You have the right to make a complaint at any time with regards to how your personal data has been processed by us under:
- the EU GDPR, please contact your local supervisory authority in particular in the EU Member State of your habitual residence, place of work, or place of the infringement, concern or complaint.
- the UK GDPR and/or Data Protection Act 2018, please contact the UK Information Commissioner’s Office – https://ico.org.uk/global/contact-us
We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO or other relevant supervisory authority, so please contact us at [email protected] in the first instance.