Privacy Notice & Cookies. We want you to know that when you use our organisation you can trust us with your information. We are determined to do nothing that would infringe your rights or undermine your trust. This Privacy Notice describes the information we collect about you, how it is used and shared, and your rights regarding it.
We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that we hold and process. Our registered address is 153 Upper Newtownards Road, Belfast BT4 3HX and our Company registration number is NI026898.
All of the information that we hold about you is provided to us by yourself when you seek to use our services.
To the extent permissible under applicable law, we collect information about you and any other party whose details you provide to us when you:
- register to use our website, applications or services (including free trials); this may include your name (including business name), address, email address and telephone number. We may also ask you to provide additional information about your business and your preferences;
- complete online forms (including call back requests), take part in surveys, post on our message boards, post any blogs, enter any competitions or prize draws, download information such as white papers or other publications or participate in any other interactive areas that appear on our website or within our application or service;
- interact with us using social media;
- contact us offline, for example, by telephone, sms, email or post.
Our lawful basis for processing your information
The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a Lawful Basis for doing so. The Lawful Bases identified in the GDPR are:
- Consent of the data subject.
- Performance of a contract with the data subject or to take steps to enter into a contract.
- Compliance with a legal obligation.
- To protect the vital interests of a data subject or another person.
- Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
Examples of legitimate interests include:
- Where the data subject is a client or in the service of the controller;
- Transmission within a group of undertakings for internal administrative purposes;
- Processing necessary to ensure network and information security, including preventing unauthorised access;
- Processing for direct marketing purposes, or to prevent fraud; and
- Reporting possible criminal acts or threats to public security.
Our Lawful Basis is performance of a contract with the data subject and our Legitimate Interests are where the data subject is a customer or an employee of the controller, and processing for direct marketing purposes.
We use your information to:
Provide goods, services, quotations, and information to you;
Process or support payments for goods and services;
Communicate with you about products, services, promotions, studies, surveys, news, updates and events; which may be useful to you based on your use of our applications and services
Process promotions/competitions, including prizes, and send you information about our services and those of our business partners;
Investigate or address legal proceedings relating to your use of our services/products, or as otherwise allowed by applicable law.
We do not use automated decision-making in the processing of your personal data.
We collect and process both personal data and special categories of personal data as defined in the GDPR. This includes:
- Phone number.
- Payment or bank details.
- Location details.
- Device IP address.
- Phone number.
- Payment or bank details.
- Date of birth.
- Family & next-of-kin details.
- Religion (only in Northern Ireland, required for FEC form).
We may share your personal data with:
- Partners, including system implementers and developers.
- Our legal advisors in the event of a dispute or other legal matter.
- Law enforcement officials, government authorities, or other third parties to meet our legal obligations.
- Any other party where we ask you and you consent to the sharing.
Transfers to third countries and international organisations
We do not transfer any personal data to third countries or international organisations.
We retain your personal data while you remain a customer or an employee, unless you ask us to delete it. Our Retention and Disposal Policy (copy available on request) details how long we hold data for and how we dispose of it when it no longer needs to be held. We will delete or anonymise your information at your request unless:
- There is an unresolved issue, such as claim or dispute;
- We are legally required to; or
- There are overriding legitimate business interests, including but not limited to fraud prevention and protecting customers' safety and security.
The General Data Protection Regulation gives you specific rights around your personal data. For example, you have to be informed about the information we hold and what we use it for, you can ask for a copy of the personal information we hold about you, you can ask us to correct any inaccuracies with the personal data we hold, you can ask us to stop sending you direct mail, or emails, or in some circumstances ask us to stop processing your details. Finally, if we do something irregular or improper with your personal data you can seek compensation for any distress you are caused or loss you have incurred. You can find out more information from the ICO’s website http://ico.org.uk/for_the_publ... and this is the organisation that you can complain to if you are unhappy with how we deal with you.
Accessing and Correcting Your Information
You may request access to, correction of, or a copy of your information by emailing us at firstname.lastname@example.org or by writing to our Data Protection Representative at Pinnacle, 153 Upper Newtownards Road, Belfast BT4 3HX.
You may opt out of receiving emails and other messages from our organisation by following the instructions in those messages.
- Validate users;
- Remember user preferences and settings;
- Determine the frequency of accessing our content;
- Measure the effectiveness of advertising campaigns; and
- Analyse site visits and trends.
Cookies provide us with the data that we can use to improve our service to you. Cookies themselves do not personally identify users although they do identify a user’s IP address.
Strictly Necessary Cookies
|CRAFT_CSRF_TOKEN||This cookie is used by Cloudflare to identify trusted web traffic.||Session Cookie|
|OptanonAlertBoxClosed||This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.||364 Days|
|OptanonConsent||This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.||364 Days|
|_gat||This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes._ga||Session Cookie|
|_gid||This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited._gid||Session Cookie|
|_ga||This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners._ga||729 Days|
|_fbp||Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers||89 Days|
How to disable cookies
You may if you wish restrict or block cookies, however if you disable cookies you may find this affects your ability to use certain parts of our website, applications or services.
For more information on cookies and how to accept, delete or reject cookies then go to http://www.youronlinechoices.com/uk/faqs website.
Updates to our Privacy Notice
We will always update this Privacy Notice on our website, so please refer to it when you visit the website (the “last updated” reference tells you when we last updated our Privacy Notice).