What is the purpose of this notice?
To describe how we collect and use personal data about you in accordance with the General Data Protection Regulation (GDPR).
What we need
Indicator – FL Memo Limited of Calgarth House, 39-41 Bank Street, Ashford, Kent TN23 1DQ, will be what’s known as the “Controller” of the personal data you provide to us. We only collect basic personal data about you which does not include any special categories of personal information about you (known as Special Category Data). This does however include name, address, e-mail, telephone number, financial information (payment information such as a debit/credit card).
Why we need it
We need to know your basic personal data in order to provide you with our services, process your orders, provide you with marketing information, tell you about our other products which might be of interest. We will not collect any personal data from you we do not need to provide and oversee this service to you.
What we do with it
We only ever use your personal data where it is necessary:
- to enter into, or perform, a contract with you
- to comply with a legal duty
- for our own (or a third party’s) legitimate interests, provided your rights don’t override these.
- with your consent
In any event, we’ll only use your information for the purpose or purposes it was collected for (or for closely related purposes).
We may process personal information for certain legitimate business purposes, which include some or all of the following:
- where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customers
- to identify and prevent fraud
- to enhance the security of our network and information systems
- to better understand how people interact with our websites
- to provide postal communications which we think will be of interest to you
- to determine the effectiveness of promotional campaigns and advertising.
Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of the rights the GDPR provides, at all times.
When we process your personal data for our legitimate interests, we will make sure that we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate business interests do not automatically override your interests - we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You have the right to object to this processing if you wish, and if you wish to do so please click here email@example.com Please bear in mind that if you object this may affect our ability to carry out tasks above for your benefit.
Where we keep it
We are based in the UK and we store our data within the EU. Some organisations which provide services to us may transfer personal data outside of the EU, but we will only allow them to do if your data is adequately protected. We will take the necessary measures to ensure this.
For example, some of our systems use Microsoft products. As a US company, it may be that using their products results in personal data being transferred to or accessible from the US. However, we will allow this as we are certain personal data will still be adequately protected (as Microsoft is certified under the USA’s Privacy Shield scheme).
How long we keep it for
We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored depends on the information in question and what it is being used for. For example, if you ask us not to send you marketing e-mails, we will stop storing your e-mails for marketing purposes (though we’ll keep a record of your preference not to be e-mailed).
We continually review what information we hold and delete what is no longer required. We never store payment card information. We will not retain your data for any longer than necessary and the longest time that we will hold your data will be six years following the last contact with you.
What we would also like to do with it
We would, however, like to use your name and e-mail address to inform you of our future offers and similar products. This information is not shared with third parties and you can unsubscribe at any time via phone, e-mail or on our website.
What are your rights?
We want to ensure that you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- the right to confirmation as to whether we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as a data subject access request)
- the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a legitimate reason)
- the right to have inaccurate data rectified
- the right to object to your data being used for marketing or profiling; and
- where technically feasible, you have the right to personal data you have provided to us which we process automatically based on your consent or the performance of a contract. This information will be provided in a common electronic format.
Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.
The Company's data protection officer has responsibility for data protection compliance within the business. You should contact them if you have any questions about the operation of this policy or you need further information about the data protection legislation, or if you have any concerns that this policy is not being or has not been followed. They can be contacted as follows: Duncan Callow, Calgarth House, 39-41 Bank Street, Ashford, Kent TN23 1DQ, 01233 653507.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection issues.
IP addresses and cookies
We may collect information about your computer, including, where available, your IP address, operating system and browser type for system administration. For the same reason we may obtain information about your usage of our website by the use of a cookie file which is stored on the hard drive of your computer. You have the choice to accept or reject cookies when filling out forms. This will in no way enable us to launch programs or access personal files on your computer.
You are not obliged to accept cookies and may modify your browser so that it will not accept cookies. The browser you use to surf the web not only allows you to see the cookies that you have but also allows you to control their use.
You can control them by allowing them, deleting them individually or deleting all of them. You can also set your browser to not accept cookies altogether. If this option is selected, you should be aware that many websites will not function properly or at all. It may be possible to set your browser to not accept cookies and ask for your consent before each cookie is set on your device. This gives you control over what is set on your device, however it has the drawback of slowing down your browsing experience.
There are different levels of control too. You are able to prevent just third party cookies being deployed, effectively opting out of behavioural advertising, and even to block specific companies whose cookies you do not wish to deploy, instead of selecting all companies.
Please consult your browser's help menu for more specific information on managing your cookies.