35percent Ltd is committed to protecting its staff, partners’, clients’ and contacts’ personal information.
35percent Ltd is a limited company.
The registered address is 35percent Ltd, Old Farmhouse, Hyde, Chalford, Stroud, Gloucestershire GL6 8NZ
This Data Privacy Notice relates to personal information allowing an individual to be identified directly or indirectly that is obtained and stored by 35percent Ltd and for which 35percent Ltd is the Data Controller.
Individuals can update or withdraw their consent at any time, for individual channels of communication, or for all channels, by contacting 35percent Ltd via e-mail to rebecca@35percent.co.uk
In the event that 35percent Ltd needs to contact or enter into correspondence with individual clients or contacts regarding administrative issues that do not fall into the GDPR definition of ‘direct marketing’, the use of an e-mail address or telephone number provided by the individual is permissible for the specific purpose of resolving the issue.
35percent Ltd captures and stores personal information as follows:
Subject access
Individuals have the right to request at any time the information 35percent Ltd holds about them, as subject access requests. Such requests should be submitted by contacting rebecca@35percent.co.uk
Depending on the nature of the request, 35percent Ltd may seek a form of identification to verify the identity of the person making it. The information will be supplied within 30 calendar days of the request or the verification, whichever is the later.
Rectification
If individuals believe the information 35percent Ltd holds about them is incorrect or incomplete, they have the right to ask the organisation to correct it. 35percent Ltd must respond within one month of the request being received. Requests can be made by contacting rebecca@35percent.co.uk
Objection
Individuals have the right to ask 35percent Ltd to stop processing their personal data. In this situation, 35percent Ltd can continue to store the data to ensure the request can be respected in the future, but all processing must cease, unless there is a legal purpose. Requests can be made by contacting rebecca@35percent.co.uk
Portability
Where they have given consent to 35percent Ltd processing their data, individuals have the right to ask 35percent Ltd to provide their personal details to another organisation via commonly used open format such as a CSV file. Requests can be made by contacting rebecca@35percent.co.uk
Erasur
eIndividuals have a right to have personal data erased and to prevent processing by 35percent Ltd in the following circumstances:
Erasure requests can be made by contacting rebecca@35percent.co.uk
Compensation
If individuals believe they have suffered damage because 35percent Ltd has behaved in breach of Data Protection law, they are entitled to claim compensation.
This right can only be enforced through the courts.
The law allows 35percent Ltd to defend a claim for compensation on the basis that the organisation took all reasonable care in the circumstances to avoid the breach, that is, by complying with Data Protection legislation when processing data.
Querying automated decisions
Individuals can ask 35percent Ltd not to make automated decisions based on their personal data; expect to be advised if the organisation may use automated processes to make such decisions; and challenge the results of automated decisions they believe them to be inaccurate.
Questions and requests regarding automated decisions can be submitted by contacting rebecca@35percent.co.uk
35percent Ltd ensures that there are appropriate controls in place to protect personal details provided to the organisation.
Online forms are encrypted and the organisation’s database is held on secure servers.35percent Ltd’s database is only accessible by approved members and is stored securely as required by GDPR.
Cookies are small text files stored on computer by the websites individuals visit. They are standard across all websites and help website owners deliver a better experience to their users.
Further details about managing cookies on all types of devices can be found here: www.aboutcookies.org.
The cookies 35percent Ltd uses on its website are as follows:utma, utmb, utmx, utmz cookies– these cookies enable the function of Google Analytics, software that we use to help analyse anonymous visitor information such as pages visited, time spent on site, browser usage etc. The data can only be viewed by relevant staff at 35percent Ltd.
atuvc cookie – this cookie gives intergration with social media accounts, using AddThis (www.addthis.com), for those users that choose to share content on their social media networks
35percent Ltd’s website may at times contain hyperlinks to websites owned and operated by other organisations. These websites have their own Privacy Policies, including policies on their use of cookies. These individual policies will govern the use of any personal information submitted or collected by cookies when individuals visit these websites. 35percent Ltd cannot accept any responsibility or liability for the privacy practices of third-party websites and the use of such websites is at individuals’ own risk.
Suppliers
35percent Ltd sometimes uses external companies to process personal data on 35percent Ltd’s behalf, for example to produce direct marketing materials.
In these circumstances, with reference to GDPR, 35percent Ltd is the Data Controller and these suppliers are Data Processors.
The security practices of supplier companies are checked before 35percent Ltd appoints them and then on a regular basis. 35percent Ltd puts contracts in place that set out the organisation’s expectations and requirements, especially regarding how suppliers store and process the personal data provided by 35percent Ltd.
Third party marketing
35percent Ltd will only use personal information within the organisation for the purposes for which it was obtained.
35percent Ltd will not, under any circumstances, share personal data with any third party organisations for their use or sell it to them for their own marketing purposes, and individuals will not receive marketing communications from any other companies, charities or other organisations as a result of providing their details.
Legal requests
35percent Ltd will comply with legal requests where disclosure is required or permitted by law and a written request is received, for example, to government bodies for tax purposes or law enforcement agencies for the prevention and detection of crime.
The length of time personal information will be retained
35percent Ltd will hold personal information on its systems for as long as it is necessary for it to carry out the relevant activity requested by the individual and as in line with the consent given.
The personal information of individuals who are no longer engaged with 35percent Ltd will be held for no longer than 12 financial years. This period meets 35percent Ltd’s statutory obligation to retain information for contracts signed as deeds.
If an individual asks 35percent Ltd to cease contact, a record of the request will be kept along with the individual’s personal details to enable 35percent Ltd to comply with the request over time, but this period will be no longer than the 12 financial years stated above.
Any questions about this Privacy Policy should be addressed as follows:
The UK’s data protection authority is the Information Commissioner’s Office (ICO).The ICO’s website is www.ico.org.uk
The organisation can be contacted at: https://ico.org.uk/global/contact-us/
This Privacy Policy may be updated from time to time. The latest version will always be available at www.35percent.co.uk
If changes are made to 35percent Ltd’s Privacy Data Notice and Privacy Policy in the future, a prominent notice will be posted on 35percent Ltd’s website