We are committed to protecting your privacy and processing your personal data in accordance with the Data Protection Act (DPA) 1998 up to the 24th May, 2018 and the General Data Protection Regulations (GDPR) on and from 25th May, 2018 (Data Protection Legislation). This policy explains how the information we collect about you is used and kept securely. It is also your right to access your information under Data protection Legislation.
The following is a broad description of the way this Company processes personal information.
Reasons / Purpose for processing information
We process personal information to enable us to promote our goods and services, to maintain our accounts and records and to support and manage our staff.
Type of information processed
- Personal details
- Financial details
- Employment and education details
- Goods or services provided
We also process sensitive classes of information that may include
- Physical or mental health details
- Racial or ethnic origin
- Religious or other beliefs of a similar nature
Who the information is processed about
We process information about our:
- Customers and Clients
- Suppliers and services providers
- Advisors, consultants and other professional experts
Who the information is shared with
We sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary we are required to comply with all aspects of the General Data Protection Act (GDPA 2018). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.
Where necessary or required we share information with:
- Family, associates and representatives of the person whose personal data we are processing
- Current, past and prospective employers
- Educators and examining bodies
- Central government
- Credit reference agencies
- Suppliers and service providers
- Financial organisations including B&CE and The People’s Pension
- Our insurers
How we manage your data and keep it secure
- Personal records are stored in a secure cabinet.
- Data is stored on office computers which are password protected and secure servers
How long will the data be kept
We only ever retain personal information for as long as is necessary and we have retention policies in place to meet these obligations. We are required under some laws or regulations to retain your personal data for a set period of time for example, the maximum legally obliged retention period for certain health and safety related matters is 40 years.
Where there is no legal obligation we will hold your data for 2 years, unless you opt out within this time.
By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.
How we will share your data
We do not share or disclosure any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement.
What are your rights over your personal data?
You have the right to access any personal information that we process about you and to request information about:
- What personal data we hold about you
- The purposes of the processing.
- The categories of personal data concerned.
- The recipients to whom the personal data has/will be disclosed to.
- How long we intend to store your personal data for.
- If we did not collect the data directly from you, information about the source.
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
If you would like your personal data to be removed or the use to be amended, you have the right to request:
- your personal data to be erased (deleted) from our records;
- the use / processing of your personal data to be restricted in accordance with data protection laws;
Lodging A Complaint
If you are not happy with this notice, believe we have processed your data in an unfair or unjust way or are non-compliant with the relevant data protection laws and you wish to raise a complaint, please contact us and we will carefully consider your complaint and respond to you.
You also have the right to lodge a complaint with the supervisory authority (the Information Commissioners Office).
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Tel: 0303 123 1113 (local rate) or 01625 545 745.
Leyland Painting Services