Privacy Notice for Stresswise Customers - 24th May 2018.
This privacy notice covers:
Why we use your personal information
We process your personal data for the following purposes:
If we plan to introduce further processes for the use of your information, we will provide information about that purpose prior to such processing.
The legal basis for processing
Under Data Protection Law, there are various grounds which are considered to be a ‘legal basis for processing’.
The legal basis for processing should be determined by the Data Controller.
Where we are the Data Processor, the legal basis is determined by the Customer. Typically, the legal basis in this scenario is:
‘processing is necessary for the performance of a task carried out in the public interest’
Where we are the Data Controller, the legal basis for processing is based on:
‘processing is necessary for the purposes of legitimate interests pursued by the controller’
It should be noted that in some circumstances this legal basis may vary, however, we always operate in full compliance with Data Protection Law and will only process data with a fair and reasonable legal basis for doing so.
What personal information we process
In order to carry out these services we process the following information:
Your name or the company / business name – as provided by you.
Your address or the company / business address – as provided by you.
Contact phone number - mobile and / or landline – as provided by you.
Contact email (either personal or work) – as provided by you.
Payment details – as provided by you to WorldPay.
How we process your personal information
We use your personal information, only to the extent required to carry out the services for you.
We have introduced appropriate technical and organisational measures to protect the confidentiality, integrity and availability of your personal information during storage, processing and transit.
Your rights under Data Protection Law
Right to Access
You have the right of access to your personal information that we process and details about that processing.
Right to Rectification
You have the right to request that information is corrected if it’s inaccurate.
Right to Erasure (Right to be Forgotten)
You have the right to request that your information is removed; depending on the circumstances, we may or may not be obliged to action this request.
Right to Object
You have the right to object to the processing of your information; depending on the circumstances, we may or may not be obliged to action this request.
Right to Restriction of Processing
You have the right to request that we restrict the extent of our processing activities; depending on the circumstances, we may or may not be obliged to action this request.
Right to Data Portability
You have the right to receive the personal data which you have provided to us in a structured, commonly used and machine readable format suitable for transferring to another controller.
Right to lodge a complaint with a supervisory authority
If you think we have infringed your privacy rights, you can lodge a complaint with the relevant supervisory authority. You can lodge your complaint in particular in the country where your live, your place of work or place where you believe we infringed your right(s).
Note: We may need to request additional information to verify your identity before we action your request.
Sharing personal information with third parties
We use trusted service providers to help deliver our service. Our suppliers are subject to appropriate safeguards, operating in accordance with our specific instructions and limitations, and in full compliance with Data Protection Law.
These service providers include:
We may also have access to your personal information as part of delivering the service. If we need to change or add additional third parties, we will always update our Privacy Notice accordingly. We will only disclose your information to other parties in the following limited circumstances
How long we may keep your personal information
We will only retain information for as long as is necessary to deliver the service safely and securely. We may need to retain some records to maintain compliance with other applicable legislation – for example finance, taxation, fraud and money laundering law requires certain records to be retained for an extended duration, in some cases for up to seven years.
Changes to our Privacy Notice
This policy will be reviewed regularly and updated versions will be posted on our websites.
Contact details for our Data Protection Officer
We have appointed Jodie Wedgwood as a Data Protection Officer (DPO); their contact details are as follows:
Data Protection Officer, Stresswise, PO Box 625,Weston, CREWE, CW1 9JN.
We're committed to protecting your privacy. We will only use the information that we collect about you lawfully (in accordance with the Data Protection Act 1998).
We collect information about you for two reasons: to process your order and, to provide you with the best possible service.
We don't and won't supply your details to any other organisation whatsoever.
The type of information we will collect about you includes:
We use the personal information you give us for the following purposes:
The personal information that we hold will be held securely in accordance with our internal security policy and the law.
We will never collect sensitive information about you without your explicit consent.
The information we hold will be accurate and up to date. You can check the information that we hold about you by emailing us. If you find any inaccuracies we will delete or correct it promptly.
If we intend to transfer your information outside the EEA (European Economic Area) we will always obtain your consent first.
We may use technology to track the patterns of behaviour of visitors to our site. This can include using a "cookie" which would be stored on your browser. You can usually modify your browser to prevent this happening. The information collected in this way can be used to identify you unless you modify your browser settings.