Data Protection Act/GDPR
Keeping your data safe and increasing transparency are important to us, and we’re committed to the changes under the new GDPR law effective on 25 May 2018
We take the responsibility of looking after personal data in our possession seriously. ‘Personal data’ in this context means data relating to a living individual who can be identified from that data, or can be identified from that data taken together with other information that we hold or we may be likely to obtain. The personal data we use can be divided into two key types:
- Personal data related to our customers or prospective customers. For example placing an advert, entering a competition, attending an event, making a complaint or visiting our website.
- Personal data that has been provided to us by our customers for the purposes of auditing
We may send you marketing information about our products and services by post, email or telephone subject to your selected contact preference. If you wish to change your how marketing messages are sent or wish to stop receiving them please contact us.
We will take specific steps (as required by applicable data protection laws) to ensure we take appropriate security measures to protect your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.
How long we retain personal information can vary significantly based on context of the Services we provide and on our legal obligations. The following factors typically influence retention periods:
- How long is the personal information needed to provide our Services? This includes such things as maintaining and improving the performance of our products, keeping our systems secure, and maintaining appropriate business and financial records. This is the general rule that establishes the baseline for most of our data retention periods.
- Have you provided consent for a specified retention period? If so, we will retain data in accordance with your consent.
- Where our processing of your personal data is based on your consent you have the right to withdraw your consent at any time.
After it is no longer necessary for us to retain your personal information, we will dispose of it in a secure manner.
Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a “data subject access request”). This right also means you can obtain information about how we process your personal information.
You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us to keep your personal information accurate and up to date. We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details or telephone number.
Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.
Subject to certain conditions, you are entitled to have your personal data erased (also known as the “right to be forgotten”). For example where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful.