Legal Ease Copy is part of Deborah Stuttard Communications.
Deborah Stuttard Communications (sole trader) is committed to protecting the privacy of its customers and website visitors. I understand the importance you place on the privacy and security of information which personally identifies you, and I take this privacy seriously. This policy sets out the basis on which any personal data I collect from you, or that you provide to me, will be processed.
- The Data Controller is Deborah Stuttard Communications whose registered office is: 19 Lanark Street, Glasgow, G1 5PY
- The designed Appointed Person is Deborah Stuttard
- I am registered on the Information Commissioner’s Office Register of Data Controllers under registration number ZA359375.
ACTING AS A DATA PROCESSOR
Deborah Stuttard Communications acts as a Data Processor; processing personal data on behalf of clients (the Data Controller). To meet my responsibilities as a Data Processor, a written contract is in place between me and each Data Controller to ensure both parties understand their obligations and liabilities.
The purposes and reasons for processing this personal data include:
- Providing marketing, advertising and public relation services to my clients
- Undertaking research on behalf of my clients
- Using research undertaken by my clients to provide marketing, advertising and public relation services.
As a Processor, I will only act on the documented instructions of a Controller. As such, the Data Controller remains responsible for ensuring their processing complies with the Act, whether they do it in-house or engage me as a Data Processor. All data provided to me as a Data Processor will fall under the Data Controller’s Privacy Notice. It remains The Data Controller’s obligation to make sure that any consents have been achieved and that the data provided complies with this Notice.
However, this does not negate my direct responsibilities as a Data Controller.
ACTING AS A DATA CONTROLLER
THE INFORMATION THAT I COLLECT
Deborah Stuttard Communications processes your personal information to meet its legal, statutory and contractual obligations and to provide you with services. I will never collect any unnecessary personal data from you and do not process your information in any way, other than already specified in this policy.
The personal data that I collect from you may include your:
- Business Email
Business Telephone Number
- Mobile Telephone Number
- Skype Address
- Bank Account Details.
I do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data that enables an individual to be uniquely identified, medical records, sex life or sexual orientation.
I collect this information in the following ways:
- Online enquiry form
- Purchase Orders
- Telephone and email business enquiries.
I request consent from individuals in writing to process their personal data. This consent is specific to the contract in place. Where you have consented to me providing you with promotional offers and marketing, you are free to withdraw this consent at any time. You can do this by using any of the details provided here.
SHARING AND DISCLOSING YOUR PERSONAL INFORMATION
Deborah Stuttard Communications takes your privacy very seriously. I will never disclose, share or sell your data without your consent unless required to do so by law or under the terms of a contract between us.
Currently, Deborah Stuttard Communication uses the following third-party systems to process/store personal information:
Deborah Stuttard Communications also manages a number of social media accounts. These are covered by the terms and conditions and privacy notices of each of these platforms. No information will be extracted from social media – either as a Data Controller or Data Processor – and used for any undeclared email marketing or data processing activities.
The purposes and reasons for processing your personal data include:
|Purpose for processing data||Legal basis|
|Collecting and storing personal data to respond to a sales enquiry
|Collecting and storing personal data in the performance of a contract, or to provide services
|Collecting and storing personal data to provide reports on services provided
|Collecting and storing your personal data as part of my legal obligation for business accounting and tax purposes.
|To process and respond to complaints||Legal Obligation|
|To bill for services and obtain payment||Contract|
|To communicate with you about updates, news, and events that are relevant to your interests and in line with your preferences.||Consent|
You are not obligated to provide your personal information to Deborah Stuttard Communications. However, as this information is required for me to provide you with services/legitimate interests, I will not be able to offer services without it.
All personal data held and used by Deborah Stuttard Communications shall be:
- Processed lawfully, fairly and in a transparent manner in relation to the individual
- Collected for specified, explicit and legitimate purposes
- Not further processed in a manner that is incompatible with those purposes
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
- Accurate and, where necessary, kept up to date; every reasonable step is taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay
- Kept in a form which permits identification of the individual for no longer than is necessary for the purposes for which the personal data is processed
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
You have the right to access any personal information that Deborah Stuttard Communications processes about you and to request information about:
- What personal data I hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long I intend to store your personal data for
- The source of this personal Information if I did not collect the data directly from you.
If you believe that I hold any incomplete or inaccurate data about you, you have the right to ask me to correct and/or complete the information. I will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing in accordance with data protection laws, as well as to object to any direct marketing from me and to be informed about any automated decision-making that I use.
If I receive a request from you to exercise any of the above rights, I may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.
Deborah Stuttard Communications takes every reasonable measure and precaution to protect and secure your personal data. I work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction.
Where I outsource IT provision, I will only engage those companies that can satisfy the requirements laid down in legislation regarding the safe and secure processing of personal data. Wherever possible, I use systems that only store personal data within the UK. However, where I choose to use methods outside of this, I ensure that appropriate safeguards are in place to protect this personal data.
Deborah Stuttard Communications is insured against Breach of Confidentiality. This covers me if I unintentionally, through negligence, disclose any clients sensitive information to a third party without my client’s permission; this includes legal fees and compensation costs.
HOW LONG I KEEP YOUR DATA
Deborah Stuttard Communications only ever retains personal information for as long as is necessary. Where you have consented to me using your details for direct marketing, I will keep such data until you notify us otherwise and/or withdraw your consent. I will review all data annually to meet these requirements. At the very most, personal data will be destroyed after six years.
NOTIFICATION OF A DATA BREACH
As soon as I am aware of a personal data breach that may result in physical, material or non-material damage to individuals, I will notify the ICO without delay and where feasible, within 72 hours after having become aware of it.
MAKING A COMPLAINT
I only process your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how I have handled your information, you have the right to lodge a complaint with us and/or the supervisory authority.
19 Lanark Street
Information Commissioners Office
Wycliffe House, Water Ln, Wilmslow, SK9 5AF