Privacy Statement

HOW TO CHANGE YOUR PREFERENCES

You can visit our website to contact us to change your preferences at any time. This includes also exercising your rights under GDPR, as follows:

• ● right to access to your personal data
• ● right to erasure [‘right to be forgotten]
• ● right to object to processing of personal data
• ● right to restrict the processing of personal data
• ● right of portability [to transfer your data to another platform]
• ● right to rectification [your data to be corrected]

We take your rights seriously and will always reply promptly and professionally.

HOW WE OPERATE

We operate in line with the principles of EU GDPR and UK GDPR and follow Data Protection guidelines. We are committed to protecting your personal rights and allow all users to change or withdraw their consent options at any time. We will also advise you on how to complain to the relevant authorities, namely the Information Commissioner's Office.

WHO THIS PRIVACY POLICY APPLIES TO

This policy relates to users/visitors of our websites, users of our services, anyone that contacts us, and all other third parties. Registration may be required and if you are not willing to register you may not be able to use all the services on this site. Processing of your data is required in order to offer you these services. This policy applies to individuals who have registered with GDPRLOCAL as either a customer, affiliate, user, administrator, or in any other capacity.

We respect the rights of all data subjects. We endeavor to act in a compliant manner and will always respond quickly and professionally to any request.

WHAT THIS POLICY APPLIES TO

This section describes the lawful basis for processing your data and applies to the information about yourself that you choose to provide us with or that you allow us to collect. We exercise our rights under the consent lawful basis as you are free at any time to register to use this service and consent to receive information from us or at any time to choose to stop using this service and remove your consent. We will always respect your decision to remove consent.
The information we collect and use includes:

As a customer/potential customer:
- information we collect when you visit our sites
- information we collect about you from our third party data providers
- information you provide during the registration process,
- information you provide when you use our services,
- information you provide documents, spreadsheets, or other material
- information we collect about how you use the website,
- information given and stored as part of our ongoing relationship
- information we collect on visits and all other interactions and exchanges.

CHANGING YOUR PREFERENCES AND OPTING OUT AT A LATER DATE

Once you have given your data and/or implied or explicit consent, you can however still control whether you continue to receive communications or see such advertisements from us. The simplest way to remove amend your preferences and withdraw consent is to contact us directly, however you can also remove consent depending on the channel of communication:

Post: You can withdraw your consent for postal marketing from anyone by adding your details to the Mail Preference Service. For more details, please go to www.mpsonline.org.uk

E-mail or SMS (text message): You can unsubscribe from receiving e-mail or SMS marketing communications from any individual third party by using the instructions in any email communication such a third party sends you (usually an 'unsubscribe' or 'STOP' link).

Telephone calls: To withdraw your consent for live or automated calls from anyone you can add your name to the Telephone Preference Service which is maintained at this website address: www.tpsonline.org.uk

You can also opt out at any time from communications via any of the methods described above by emailing us at: [email protected]

Social media and online: You can configure your advertising preferences on social media by accessing your settings or preference options on the relevant platform. If you no longer want to receive personalised advertising on any website you visit, you can usually opt out directly through the Privacy Policy of the particular website you are accessing. You can also opt out of such advertising by visiting the IAB opt-out platform at www.youronlinechoices.com. Please note that this and other platforms allow you to opt out of interest-based advertising delivered by registered members.

HOW WE STORE AND PROCESS YOUR DATA

Your account data will be collected, stored, and processed primarily in the EU. Where we transfer data outside the EU, we will ensure we take all reasonable administrative and technical precautions to protect that data. Your data will be stored for three years after our last interaction, in order to provide updates and offers that may be of interest to you. We use recognised third parties to provide lead generation services, help with advertising, operate our business, take payment, manage our company accounts, and provide banking services, and other common business functions. We will store transaction, payment, and order data for up to 7 years or for as long as required by UK financial and company regulations. These third parties may operate outside the EU.

OUR OBLIGATIONS

We are a data controller in relation to the information that you provide us with. As a result, we are legally responsible for how that information is handled.

We will always endeavor to comply with both the EU GDPR and UK GDPR GDPR [2018], ePrivacy Directiveand PECR in the way we use and share your personal data. Among other things, this means that we will only use your personal data:
- fairly and lawfully,
- as set out in the legislation and this policy,
- to the extent necessary for these purposes.

We will process your personal data ourselves as the data processor. We will take reasonable precautions to safeguard the personal information that you supply.

Where we use data processors or share your data with joint controllers, we will ensure appropriate safeguards and contracts, terms, and data sharing agreements are in place including SCCs.

If you have any requests concerning your personal information or any queries about our privacy policy, website, or service, please contact us using the details given above. We are friendly and professional and will always help.

ANALYSIS AND DERIVATIVE DATA PRODUCTS

Sometimes your data will be used for analysis purposes or to build data products. In these instances, the information is aggregated and wherever possible anonymised in line with the Information Commissioner’s code of practice. Again, these products are of a marketing nature.

THIRD PARTIES

We do not routinely share your data with any third party, and we never sell data. We use carefully selected third parties to manage/operate our business and develop new business.

SOURCE OF YOUR DATA

We do not buy marketing lists however we do use third parties and online services to help identify potential customers and support our business development activity.

For example:
1. We use tracking software to identify companies that visit our site.
2. We use email verification systems to identify contacts at those companies.
3. We use LinkedIn to contact representatives of those companies and connect with them.
4. We use Mailchimp to send email to those contacts.
5. We store data on our CRM systems such as HubSpot
6. We use information to run our advertising campaigns
7. We use Sopro.io as our marketing partner to identify companies that may be interested in our products and services.

This approach is GDPR and PECR compliant.

Where we use third parties, we ensure these companies comply with all regulations and keep your data safe. This includes ensuring they implement best practice security measures to prevent the loss of, or unauthorised access to your personal information. Where valid, appropriate, verified, and subject to legal obligations, third parties are also expected to complete rectification or erasure requests within 72 hours of receipt.

SECURITY

We will report any breaches or potential breaches to the appropriate authorities within 24 hours, and to anyone affected by a breach within 72 hours. If you have any queries or concerns about the data usage, please contact us.

LEGITIMATE INTERESTS

In some cases, we collect, store, and process your data under the GDPR lawful basis of Legitimate Interest. Where this is the case, we have completed appropriate balancing assessments to protect the rights of the data subjects.

CONTACTING US, EXERCISING YOUR RIGHTS.

If you have any questions or comments about this Privacy Policy, wish to exercise your information rights in connection with the personal data you have shared with us or wish to complain, please contact The Data Protection Officer at GDPRLOCAL. Where valid, appropriate, verified, and subject to legal obligations, we will complete objection, rectification or erasure requests within 30 days of receipt by us. We will process SARs within 30 days, SAR responses are usually free, but we reserve the right to charge for excessive or unfounded requests. We fully comply with data protection legislation and will assist in any investigation or request made by the appropriate authorities.

This policy may be updated from time to time – where material changes occur, we will contact you on the email address provided. You have the right to remove consent at any time. You also have the right to complain – if you remain dissatisfied you should contact the ICO at: ico.org.uk.