Fair Processing Notice

1. When you contact us:

We process your personal data (name, phone number, email and message) when you make an enquiry using our ‘Contact us’ form or if you call or email us.

We keep email enquiry details for 12 months to enable us to contact you. The legal basis that we rely on to process your personal data is consent when you choose to contact us and legitimate interest to hold your data for 12 months for business purposes.

2. Website visitors:

We will collect your IP address when you visit our website. An IP address, or simply an “IP,” is a unique address that identifies a device when it is accessing the internet.

We use Google Analytics to collect standard internet log information and details of visitor behaviour patterns. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. We will only use Google Analytics cookies if you consent to receiving them.

We use a cookies tool on our website to gain consent for the optional cookies that we use. Cookies that are necessary for functionality, security and accessibility are set and are not deleted by the tool.

Our purpose is to maintain and monitor the performance of our website. The legal basis that we rely on to process your personal data is either your consent for any optional cookies and legitimate interest to maintain the integrity of our website.

We hold the IP address for 30 days.

3. When you are a client:

In order to provide our services, we collect and process your personal data. We process information about you when you begin using our services and we process it on an on-going basis.

We will process the following:

• name, address, phone number, email;
• billing information;
• a record of the information that you provide to us;
• the date on which you started using our services; and
• the date on which you ceased to use our services.

We need to process personal data about our clients in order to provide an effective and high-quality service and to fulfil our legal obligations.

We will process your data to:

• provide you with the services or information that you have asked for;
• keep a record of your relationship with us;
• send you correspondence and communicate with you;
• meet our legal obligations;
• respond to or fulfil any requests, complaints or queries that you may have; and
• understand how we can improve our services or information.

We will process your data using the legal basis of contract, legal obligation and legitimate interest.

We process the following data because we have a contract:

• name, address, phone number, email;
• a record of the information that you provide to us;
• the date on which you started using our services; and
• the date on which you ceased to use our services.

We need to hold your data for seven years due to HMRC requirements and this is a legal obligation.

Marketing

We will send helpful information and marketing communications to our current clients using the legal basis of legitimate interest and contract for our DPO clients.

We will also send marketing information to someone who downloads any of our information papers using the legal basis of legitimate interests. The Privacy and Electronic Communications Regulations permit marketing to someone who has entered into ‘negotiations for sale’ and downloading a ‘gated product’ where you have to fill out your details to receive it falls within the definition.

We will continue to send you communications either until you opt out or we see that you are no longer opening our emails.

We will always give you the opportunity to opt-out and will hold your email address in a suppression list so that we don’t email you again by accident. This is also a legitimate interest.  We hold emails in our suppression list for 5 years, after which they are deleted.