This policy applies to Sidcup Partners Ltd on and from 25 May 2018
2 What data do we collect and where from? 2.1 We collect some data directly from you when you enquire or book for a networking event or sign up for the newsletter also for delivery and services from us or when you supply us with quotes for services that we require (Account Data) . We also hold data from Capita the collecting agency for the BID Levy This data includes the following: your full name
your email address
Your phone number
your postcode and address
The rateable value of your premises
The amount of BID levy that you pay
If you are supplying us with goods or services we keep your bank account details so that we can pay you.
2.2 We also collect information that you voluntarily provide to us when you contact us with queries, complaints, comments or praise.
2.3.1 We do not share your details with any other companies without your permission. Examples of data we would share with your permission include:
- Delivery address for couriers, entertainers or suppliers
- Details of suppliers (with contact details )attending events that we book are shared with our clients
3 What do we use personal data for? 3.1 It is important that you understand how and why we use the personal data that we collect about you. This section sets out the different purposes for which we process personal data and which types of personal data we need for each purpose.
3.2 Managing your account and providing customers with our services or booking services and goods with suppliers.
4 How do we keep personal data secure?
4.1 Files are kept in a locked cabinet within a lockable office.
4.2 Customer and supplier data is stored on password protected computers in password protected files and in the case of suppliers in our bank accounts.
4.3 We may need to keep your data after account closure for limited purposes, for example if we need your data in order to respond to any complaints or claims that customers make or disputes with suppliers. If this is the case, we will only keep the data for as long as we need to in order to fulfil those purposes.
- What rights do you have? 5.1 You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more information, for example to help us to locate the personal data that your request relates to.
5.2 We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further information. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond. If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.
5.3 A right to access your information You also have a right to ask us to send you a copy of your Account Data and all other personal data that we hold about you. A request to exercise this right is called a “subject access request” and must be made in writing to firstname.lastname@example.org
If we have compelling legitimate grounds to carry on processing your personal data, we will be able to continue to do so. Otherwise, we will cease processing your personal data.
5.8 What if you have a complaint? You have a right to complain to the Information Commissioner’s Officer (ICO), which regulates data protection compliance in the UK, if you are unhappy with how we have processed your personal data. You can find out how to do this by visiting www.ico.org.uk.
Policy updated on 25 May 2018