If you have any concern or question about:
- how we handle personal data;
- you want to delete or revise any personal information that we hold; or
- you have any other query on any privacy and security matter;
please contact our Data Protection Officer:
Owner and Data Controller: Stephanie Evans (ICO Registration Number: ZA510476)
Address: 7 Allwoods Close, Alcester, Warwickshire, B49 5EL
Telephone: 07908 226633
This policy describes how we will collect and use personal data about you.
1. WHAT INFORMATION DO WE PROCESS, AND WHY?
Most of the information we process comes from you. We process it so we can reply to you, and when you contact us again we know what you asked before, what you were sent, and what you told us.
Typically, we collect names, contact details, how we came across you, and background information from you or published by you on social media or freely accessible on the internet, on why you might be interested in our products or services or a relevant contact for our business.
If we email you individually using our own email system, or respond to an email sent to us at any of our business email addresses, a copy of that email will also be stored.
If you make an enquiry via our website, we will keep details of that enquiry and response for our data retention period.
If you buy something from us, we will collect information from you at the point of sale.
We will collect your email address, phone number and postal address so we can provide what we have contracted to, invoice you and keep proper records of our business relationship.
We process your data to support the delivery the goods and services you have bought. We keep records of the goods/services provided to you, and information you give us, so we can support you when needed and advise you of any additional services you may need.
2. NEWSLETTERS AND AUTOMATED EMAILS
We monitor who opens what in our newsletter lists, and pre-set sequences of information we send you. We do this, so we can see if content is popular and generate more of it, or if it is not read.
There may be sub-routines that trigger if you click on links or articles. These are designed to offer you more information about things you are interested in.
You can unsubscribe from these sequences at any time.
Existing customers may receive emails about specific offers relating to things you have already purchased. You can unsubscribe from these at any time.
3. DATA SHARING – 3RD PARTIES
We have an outsourced support team for our own business which may include Virtual Assistants, Web Designers, IT support, Sales and Marketing, Accounting and more. They have limited access to your data, where the service they provide to us means they need it.
For example, if our IT support wants to check the functionality of a laptop or back up, they may need temporary access to information that may include something about you.
For example, if we invoice you, our Accountant needs to process the information in the invoice.
Your information/advice is held in the strictest confidence. Our team are all contracted to strict confidentiality clauses.
4. WHERE IS YOUR DATA LOCATED?
Like most small businesses, we do not have any tailor-made software – we use mainstream packages for everything from our customer records, to email, to accounting.
This means that some of your data may be held in the EEA, and some may be held in services in the USA (with suitable data privacy shields) or elsewhere. We have picked mainstream suppliers with appropriate security standards.
5. RETENTION PERIOD
Your information will be kept for the length of time set out in our retention period which is the minimum duration in accordance with any applicable statutory retention periods .
We need to keep customer information long enough to satisfy HMRC and our insurers. We keep information on prospective customers long enough to make our sales enquiry system effective.
If you subscribed to a newsletter or updates list, you will remain on the list(s) you joined until you unsubscribe from that list.
In this Policy, there are words and phrases that have a specific meaning or that we are using in a special way. They are:
“personal data” – any information about an identifiable living human being.
“process” – we “process” your personal data when we do anything with it, which might include: collecting, recording, organising, storing, adapting, altering, retrieving, using, combining, disclosing, or deleting it.