All Things Business is a product of All Things Management Ltd. This privacy statement describes how All Things Management Ltd protects and makes use of the information you give the company when you use our website, products and services.
We are committed to ensuring that your personal data is kept confidential, and that it is only collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
We confirm our compliance with The Data Protection Act 1998 and the new legislative conditions as required by The General Data Protection Regulation (“the Regulation”).
What Information will we collect?
Personal data may be collected, stored and used when visiting our website, requesting a copy of our publication, or placing an order. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
1) Information you provide
a) When visiting our website
If you choose to contact us through our website, information you provide such as your name, email address or telephone number and any other information you choose to provide us with will also be stored.
b) Publication requests
When requesting details of, or a copy of our publication, details that you provide us with. We may require you to provide us with contact information, such as your name, company name, email address, business address and telephone number.
2) Information we collect
a) When visiting our website
Cookies do not provide us with access to your computer or any information about you, other than that which you choose to share with us.
However, please note that doing this may affect how our website functions. Some pages and services may become unavailable to you.
For what purpose will we process your data?
Your data will be processed for Specified, Explicit and Legitimate Purposes. We collect and process the personal data detailed above, and the purposes for which we process personal data will be informed to data subjects at the time that their personal data is collected.
We may, from time to time, use your personal data for reporting and for making improvements to our services; in such instances we will always ensure an individual cannot be identified.
Your personal data may be transferred to our trusted third party processors, this will be for purposes such as: Enabling payments, hosting of our servers, project management tools and customer relationship management system.
Our trusted third party processors are contractually bound by us to keep your information confidential and used only for specified, explicit, and legitimate purposes.
Some messages from us are service-related and necessary for customers. You agree that we can send you non-marketing emails or messages, such as those related to transactions, your account, security, or product changes.
If we intend to use any data provided by yourself for marketing purposes, we will always make this clear and offer an ‘opt out’ should you wish not to receive such information.
If you have agreed that we can use your information for marketing purposes, you can change your mind easily, via one of these methods:
- Send an email to: email@example.com
- Write to us at: All Things Management Ltd, 3A Green Lodge Barn, Roman Road, Northampton, NN7 4HD.
We will never lease, distribute or sell your personal data to a third party without requesting your prior permission. We will only transfer your data to other third parties without informing you separately beforehand in the exceptional cases where we are either legally required on important public interest grounds, or for the establishment, exercise or defence of legal claims.
Legal Basis for processing personal data
Our legal basis for collecting and using the personal data described above will depend on the personal information concerned and the specific context in which we collect it. However, we will generally only collect personal information from you where either;
- We need the personal information to perform a contract with you, the processing is in our legitimate interest and not overridden by your rights you have given your consent to do so.
- We have a legitimate interest in operating our services, for example when responding to your queries and providing you with information, improving our services, undertaking marketing.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not.
Where will your personal data be processed?
Protecting personal data from access, loss or alteration is of the utmost importance to us.
Sometimes we will need to share your personal data with third parties and suppliers outside the European Economic Area (EEA), this will be for purposes such as: Enabling payments, project management tools and our customer relationship management system.
Where your personal data is transferred outside the EEA, it will only be transferred to countries that have been identified as providing adequate protection for EEA data, where approved transfer mechanisms are in place to protect your personal data, i.e., by ensuring the entity is Privacy Shield certified (for transfers to US-based third parties). If you wish for more information about this please contact firstname.lastname@example.org.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long will we hold your data?
The length of time we keep your personal data depends on what it is and whether we have an ongoing business need to retain it - for example, to provide you with a service or to comply with applicable legal, tax or accounting requirements.
Data will be retained for as long as your account is active and for a period of time afterwards where we have an ongoing business need to retain it, in accordance with our data retention policy. Following that period, we’ll make sure it’s deleted or anonymised.
Data subject rights
It’s your personal data and you have certain rights relating to it. When it comes to marketing communications, you can ask us not to send you these at any time – just follow the unsubscribe instructions contained in the marketing communication, or send your request to email@example.com.
You also have rights to:
- know what personal data we hold about you, and to make sure it’s correct and up to date
- request a copy of your personal data, or ask us to restrict processing your personal data or delete it
- object to our continued processing of your personal data
You can exercise these rights at any time by sending an email to firstname.lastname@example.org.
If you’re not happy with how we are processing your personal data, please let us know by sending an email to email@example.com. We will review and investigate your complaint, and get back to you within a reasonable time frame. You can also contact the Information Commissioner’s Office on 0303 123 1113. They will be able to advise you how to submit a complaint.
This privacy statement was last updated: 25th May 2018
If you have any questions about this privacy statement, or would like any further information regarding your data, please email firstname.lastname@example.org or write to:
All Things Management Ltd, 3A Green Lodge Barn, Roman Road, Northampton, NN7 4HD.
Contact: Nicola Harding - 01604 866961