WHAT IS THE PURPOSE OF THIS DOCUMENT?
Powell & Co is committed to protecting the privacy and security of your personal information.
This privacy notice describes how we collect and use personal information about you during and after your working relationship with us, in accordance with the General Data Protection Regulation (GDPR).
WHAT THIS MEANS FOR YOU
- Further protection of your personal data;
- Standardisation of the European data protection; and
- Adoption of data protection in line with technology changes
Powell & Co is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
1. DATA PROTECTION PRINCIPLES
We will comply with data protection law. This says that the personal information we hold about you must be:
- Used lawfully, fairly and in a transparent way.
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
- Relevant to the purposes we have told you about and limited only to those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have told you about.
- Kept securely.
2. Information About Us
2.1 Our VAT number is GB831 6205 55
2.2 Debbie Coles is responsible for all aspects of Data Protection and Privacy and their contact details are firstname.lastname@example.org
2.3 We are a member of The Steel Construction Certification Scheme
3. What Does This Policy Cover?
This Privacy notice applies to how we manage your personal data collected from the website and/or during the sales process and account management purposes. Our website may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.
4. Your Rights
4.1 As a data subject, you have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:
- The right to be informed;
- The right of access;
- The right to rectification;
- The right to erasure (also known as the ‘right to be forgotten’);
- The right to restrict processing;
- The right to data portability;
- The right to object;
- Rights with respect to automated decision-making and profiling.
4.2 If you have any cause for complaint about Our use of your personal data, please contact Us using the details provided above and We will do Our best to solve the problem for you. If We are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.
4.3 For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.
5. What Data Do We Collect?
Depending upon your reasons for give us Your personal data, We may collect some or all of the following personal data;
5.2 date of birth;
5.4 business/company name
5.5 job title;
5.7 contact information such as email addresses and telephone numbers;
5.8 demographic information such as post code, preferences, and interests;
5.9 financial information such as credit / debit card numbers;
5.10 bank account information;
5.12 IP address;
5.13 web browser type and version;
5.14 operating system;
5.15 a list of URLs starting with a referring site, your activity on Our Site, and the site you exit to;
6. How Do We Use Your Data?
61. All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under the GDPR at all times.
6.2 Our use of your personal data will always have a lawful basis, either because it is necessary for Our performance of a contract with you, because you have consented to Our use of your personal data (e.g. by subscribing to emails), or because it is in Our legitimate interests. Specifically, We may use your data for the following purposes:
6.2.1 Providing and managing your Account;
6.2.2 Supplying Our products AND/OR services to You (please note that We require your personal data in order to enter into a contract with you);
6.2.3 Personalising and tailoring Our products AND/OR services for you;
6.2.4 Replying to emails from you;
6.2.5 Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by emailing email@example.com)
6.26 Market research;
6.27 Gathering feedback to enable Us to continually improve Our service and your customer experience;
6.3 You will not be opted in to any marketing database, should you wish to received information about our services and to join our mailing list you will have to complete relevant consent form on our Website.
6.4 ou have the right to withdraw your consent to Us using your personal data at any time, and to request that We delete it.
7. How and Where Do We Store Your Data?
7.1 We only keep your personal data for as long as We need to, are legally entitled to and/or for as long as We have your permission to keep it.
7.2 Your data will only be stored within the European Economic Area (“the EEA”).
7.3 Data security is very important to Us, and to protect your data We have taken suitable measures to safeguard and secure data.
8. Do We Share Your Data?
8.1 Subject to section 8.2, We will not share any of your data with any third parties for any purpose without your permission.
8.2 In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal obligations, a court order, or a governmental authority.
9. How Can You Control Your Data?
9.1 When you submit personal data to Us, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details.
10. How Can You Access Your Data?
You have the right to ask for a copy of any of your personal data held by Us (where such data is held). Please refer to our Subject Access Request Policy for more information.
11. Contacting Us
If you have any questions about this Privacy Notice, please contact Us by email at firstname.lastname@example.org, by telephone on 01568 708 819, or by post at Longmoor, Shirlheath, Kingsland, Herefordshire, HR6 9RG. Please ensure that your query is clear, particularly if it is a request for information about the data We hold about you.
We may change this Privacy Notice from time to time (for example, if the law changes). Any changes will be updated on Our website and you will be deemed to have accepted the terms of the privacy notice unless You tell us otherwise.