Privacy Notice

• Informed: You have the right to be informed about how we handle your personal data. This privacy statement provides this information, and we will always make this clearly accessible whenever we collect personal information from you.

• Access: You have the right to ask for a copy of the personal data we hold about you and the purposes for which we are using it. On receipt of such a request we will endeavour to respond to you as soon as possible and within

  one calendar month. We will confirm the personal data being processed, but this does not necessarily mean providing copy documents with non-personal information, within which your personal data might be contained.

• Rectification: You have the right to request that we amend any personal data which is incorrect or requires updating.

• Erasure: You have the right to request that we delete any personal information pertaining to you. We will assess any deletion request on a case-by-case basis and will endeavour to respond to you as soon as possible, and

  within one calendar month. Please note this is not an absolute right and there may be circumstances in which we can justifiably retain information about you.

• Object: You have the absolute right to object to receiving direct marketing from us.  You also have the right to raise an objection about how we are handling your personal data.

• Restriction: You have the right to request that we restrict or suppress your personal data, so we would only store it but not use it.

• Portability: You have the right to obtain and reuse your personal data for your own purposes across different services. Due to the nature of our business and the limited nature of the personal data we handle, we do not

  believe this right is likely to apply.

We do not conduct any automated decision-making or profiling.

Where we rely upon your consent to process data, you have the right to withdraw that consent and to do so please contact us using the information above. In order to fulfil a data subject rights request, we may need to ask you for proof of identity, depending on the circumstances. If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as taking account of any

disability).

If you have any concerns about the manner in which we have collected and used your personal data, please contact us and we will do our best to help. If you are unhappy with the way in which we have handled your personal data you have the right to raise a complaint with the UK’s Information Commissioner’s Office.

How long we store your personal data for

We will only keep a copy of your personal information for as long as is reasonably necessary for the purpose for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Data for a longer period in the event of a complaint, or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through

other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for the purposes of statistical analysis and business planning.

In some circumstances, we will anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

How we protect your personal data

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We always hold your Personal Data securely and to prevent unauthorised disclosure or access to your Personal Data, we have implemented strong security safeguards including operating our website over the https protocol. We also follow stringent procedures to ensure we work with all Personal Data in line with current data protection legislation.

Who we may share your personal data with

We share personal data with the following categories of third parties. We never share or sell your data to anyone outside the group for their own marketing use.