accordance with the UK General Data Protection Regulations (GDPR). Personal data,
or personal information, means any information about an individual from which that
person can be identified.
We may collect personal information about you in the following ways:
Data you give to us: –
This includes details about race or ethnicity, religious or philosophical beliefs, sex life,
sexual orientation, political opinions, trade union members hip, information about your
health, genetic and biometric data, and information about criminal convictions and
However, we will only process these special categories of personal data in the following
We use your personal information:
A legitimate interest is when we have a business or commercial reason to use your information which, when balanced against your rights, is justifiable.
We may share your personal information with any of the following organisations, for the
purposes of providing the services which you have requested from us. Please note we
would never sell or widely distribute your personal data:
You can find details of how these third parties use your personal information by looking
at their privacy policies, all of which should be available o n the relevant websites, or on
We may also share your personal information if we are under a duty to disclose or share
your personal data in order to comply with any legal obligation, or in order to enforce or
This includes exchanging information with other companies and organisations for the
purposes of fraud protection and credit risk reduction.
Our website may include links to third party websites, plug-ins and applications. Clicking
on those links or enabling those connections may allow third parties to collect or share
data about you. We do not control these third-party websites and are not responsible
for their privacy statements. When you leave our website, we encourage you to read the
privacy notice or policy of every website you visit.
If we transfer your personal information outside the EEA we have to tell you. We will
only send your data outside the EEA to:
We have put in place appropriate security measures to prevent your personal data from
being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition, we limit access to your personal data to those employees, agents,
contractors and other third parties who have a business need to know. They will only
process your personal data on our instructions and they are subject to a duty of
We will keep your personal information for as long as you are our client and/or we
believe you will be interested in our services.
We will only retain your personal data for as long as necessary to fulfil the purposes we
collected it for, including for one or more of the following reasons:
Where you have asked us not to send you direct marketing, we keep a record of that
fact to ensure we respect your request in future.
We may use your personal information to tell you about relevant services.
We will only use your personal information to send you marketing messages if we have
either your consent or a legitimate interest to do so.
You can ask us to stop sending you marketing messages at any time – you just need to
contact us, or use the opt-out links on any marketing message sent to you.
You have certain rights which are set out in the law relating to your personal
information. The most important rights are set out below:
Getting a copy of the information we hold
You can ask us for a copy of the personal information which we hold about you. This is
known as a data subject access request.
Telling us if information we hold is incorrect
You have the right to question any information we hold about you that you think is wrong
Telling us if you want us to stop using your personal information
You have the right to:
You can withdraw your consent to us using your personal information at any time. If
you withdraw your consent, we may not be able to provide you with certain services.
Where we rely on our legitimate interest
In cases where we are processing your personal data on the basis of our legitimate
interest, you can ask us to stop for reasons connected to your individual situation. We
must then do so unless we believe we have a legitimate overriding reason to continue
processing your personal data.
Request a transfer of data
You may ask us to transfer your personal information to a third party.
Please let us know if you are unhappy with how we have used your personal
information by contacting Chris McNeillie, Director at firstname.lastname@example.org