COLLIER & CATCHPOLE LTD
In order to comply with its contractual, statutory and management obligations and responsibilities, Collier & Catchpole Ltd (the “Company”) is required to process personal data relating to its employees, some customers and some suppliers (including “sensitive” personal data), as defined in the General Data Protection Regulation (the “Regulation”). All such data will be processed in accordance with the provisions of the Regulation.
Company and contact details
The Company is a Data Controller and Data Processor for personal data and the Company’s registered office is located at:
11 London Road
Essex CO3 0NT
Telephone: 01206 715500
The contact for any matters relating to this policy is:
Emma Marshall (Financial Controller, [email protected])
or, in her absence,
Tim Rowbottom (Managing Director, [email protected])
The Company is registered with the Information Commissioner’s Office (the “ICO”) and has informed the ICO that it is a data controller and processor. The ICO notification is renewed annually. A copy of the ICO registration is held within the Company.
Personal data collected and held
The data collected from individuals includes or may include full name, home address, contact telephone numbers, e-mail addresses, bank account details, National Insurance numbers, etc. This data is collected from application forms and contact made with the Company by telephone, e-mail or post. The Company will never collect any unnecessary personal data.
Links to third party websites
The Company’s website may contain links from its content to other websites of relevant interest. The Company does not have any control over third party websites and cannot be responsible for the protection and privacy of any information provided by individuals whilst visiting such sites as they are not governed by this privacy statement.
Purpose for holding personal data
The reasons for holding this information are for employment, contracts of sale, contracts of purchase, accounts management, marketing, etc. Where individuals have consented to the Company using personal data for marketing or promotional purposes, this consent can be withdrawn at any time by contacting the Company. Individuals will need to consider how the exercising of their rights might impact on the ability of the Company to carry out its legal or legitimate duties.
Storage of personal data
Personal data will be stored physically and electronically, with appropriate security for each method.
Legal basis for processing personal data
The Company considers that it has a legitimate interest in this personal data but will seek explicit consent where appropriate (which should be freely given, informed, specific and revocable).
Sharing of personal data
The Company will not share personal data with any party that does not have a legitimate or explicit right to see it. The Company will never share personal data to a third party for marketing purposes.
Transfer of personal data outside of the EEA
The Company will not transfer personal data outside the European Economic Area.
Retention of personal data
The Company will only retain personal data for as long as it is relevant but, to comply with any legal or regulatory guidance (such as HMRC retention rules), the Company will retain personal data beyond its immediate use if required.
Right of access to personal data
Individuals have the right of access to any personal data held by the Company. To exercise this right, individuals must contact the Company and the Company will respond without delay and within 30 days. Such requests will be recorded on the data protection file.
Right to rectification of data that is inaccurate or incomplete
Individuals have the right to rectify any personal data that is inaccurate or incomplete. To exercise this right, individuals must contact the Company and the Company will consider such a request and may ask for suitable evidence to effect a rectification. If the request is valid, the rectification will take place within 30 days. Parties with whom the data has been shared will be advised of the rectification. Such requests will be recorded on the data protection file.
Right “to be forgotten”
Individuals have the right to request to have personal data erased under certain circumstances. To exercise this right, individuals must contact the Company. This is not an absolute right and the Company may ask for suitable evidence to support the request. If the request is valid, the erasure will take place within 30 days. Parties with whom the data has been shared will be advised. Such requests will be recorded on the data protection file.
Right to block or suppress processing of personal data
Individuals have the right to request the restriction of personal data under certain circumstances. To exercise this right, individuals must contact the Company. This is not an absolute right and the Company may ask for suitable evidence to support the request. If the request is valid, the restriction will take place within 30 days. Parties with whom the data has been shared will be advised. Such requests will be recorded on the data protection file.
Right to data portability
Individuals have the right to data portability which allows the individual to obtain and reuse their personal data for their own purposes across different services. The right only applies to information an individual has provided to a data controller. Such requests will be recorded on the data protection file.
Personal data breach
The Company will report certain types of personal data breach to the relevant supervisory authority (and within 72 hours of becoming aware of the breach, where feasible). If the breach is likely to result in a high risk of adversely affecting individuals’ rights and freedoms, the Company will also inform those individuals without undue delay. The Company will keep a record of any personal data breaches, regardless of whether it is required to notify.
An individual who wishes to complain about how their personal data has been processed may present their complaint to the Company verbally or in writing. An individual may also register their complaint with the ICO. If an individual wants to complain about how their complaint has been handled, or appeal against a decision, the individual should contact the Company.
Questions about this policy should be addressed to Emma Marshall at the Company.