For general purposes of the Website we rely upon Article 6.1(b) of the GDPR to process your personal data. Article 6.1(b) of the GDPR states that we may process data if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. If you wish to instruct us we may rely on other reasons which are set out in our client privacy policy, which will be provided to you with our terms and conditions of business.Your Rights Under the GDPR you have a number of important rights free of charge. In summary, those include rights to
- access to your personal data and to certain other supplementary information that this Privacy Policy is already designed to address
- require us to correct any mistakes in your personal data which we hold
- require the erasure of personal data concerning you in certain situations
- receive personal data concerning you which you have provided to us and have the right to transmit such data to a third party in certain situations.
- object at any time to processing of personal data concerning you for direct marketing
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you· object in certain other situations to our continued processing of your personal data
- otherwise restrict our processing of your personal data in certain circumstances
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the GDPR.If you would like to exercise any of those rights, please:
- email, call or write to our Data Protection Officer
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill), and
- let us know the information to which your request relates.
We will delete your proof of identity once we have dealt with your request.Keeping Your Personal Information Secure
We comply with the requirements of the Cyber Essentials Scheme.
We have appropriate security measures in place to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.