When was the data protection law changed?
The data protection law was changed on the 25th May 2018 when the General Data Protection Regulation (GDPR) was put into effect in the United Kingdom and across Europe.
How we collect your personal information
We collect, store and transfer personal information about you in the following ways:
The data that we collect when you use our services
|Cause and Action||Data Type||Our lawful basis for processing including our legitimate interest (if applicable)|
Details of communications with us through telephone, letter, email or social media. This includes sending you appropriate, personalised communications by post in relation to product, service and business updates.
We will keep record of our conversations with you, detailing how and when you contact us including any comments and complaints you may make.We may make note of information you have provided to advise any future communication we may have.
|Your business name, full name, postal address, email address and copies of your contact with us.||
This is down to our contractual obligations to you and our valid interest of providing you with the best service and understanding how we can improve our business, products and services based on your feedback.
This information can also protect our business from fraud and other illegal activities.
|Keeping you in the loop about relevant products and services, through newsletters.||Your business name, full name, email address, postal address and business name.||
This is dependent on your prior consent. If we do not have this information, we cannot contact you.If we do have this information, you can inform us at any time when you no longer want to receive newsletters.
|Overseeing our relationship, including informing you about changes to our terms and privacy notices||Business name, full name, postal address and email address.||We would not include any promotional content in this case. Therefore, we do not require initial consent when sent by postal or email address. If we do not use your personal information for these purposes, we are unable to comply with our legal obligations.|
|To help improve our services, we will send you feedback and surveys requests.||Business name, full name, postal address, email address, marketing and usage data.||We will not include any promotional content in these messages, and do not require prior consent when sent by postal or email address. We have a legitimate interest to do so as it contributes to making our products or services more relevant to you.|
|To operate and safeguard our business and this website. This includes system maintenance troubleshooting, testing, support, data analysis, reporting and hosting of data).||Your identity, contact and technical data.||
This is essential to fulfil our valid interests (to run the business, provision of administration and IT services, network security and to prevent fraud).Mandatory to comply with legal obligations.
|Improving our website, products/services, customer relationships, marketing and experiences by using data analytics.||Technical and usage data||This is essential to our legitimate interests (to define types of customers for our products and services, to keep out website up-to-date and relevant, to progress our business and to advise our marketing strategy).|
|To make recommendations to you about our products and services that may be of interest to you.||Business name, full name, postal address, email address, profile data and technical usage.||This is essential to our legitimate interests (to develop our products/services and expand our business).|
Change of Purpose
Your personal information will only be used for the purposes of which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is aligned with its original purpose.
If we need to use your personal information for another purpose, we will notify you and we will explain the legal basis allowing us to do this.
Be aware that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
You can ask us, or third parties, at any point to stop sending you marketing messages. Please do this by contacting our DPO at fulfilmentcrowd Ltd, Matrix Park, Western Avenue, Chorley, Lancashire PR7 7NB.
Sharing your personal information
We could share your personal information with trusted third parties in order to make our products and services available to you. We also distribute data when the law requires, for example to respond to a legal process, or to maintain security, to protect our customers and their rights.
All third parties are required to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specific purposes and in accordance with our instructions.
Failing to offer personal information
When the law or a contract we have with you requests us to collect personal data, you fail to provide this data when asked, we may not be able to execute the contract that we have or are about to enter with you. We would then be unable to deliver our services to you. In this case, we may then have to cancel a service you have with us, which we would inform you at the time.
Transferring your personal information outside of the European Economic Area (EEA)
Sometimes, it is necessary for us to share your data outside of the EEA to deliver services and products to you. Usually, this occurs when you or our service providers are based outside of the EEA. These transfers much fulfil definitive rules under data protection laws. We ensure that the transfer is compliant with data protection law and all personal data will be secure when this happens.
Our website includes links to third-party websites, applications and plug-ins. Enabling those connections or clicking these links allow third parties to gather and distribute information about you. We do not control these third-party websites and are not responsible for their privacy policies. We encourage you to read the privacy notice of every website you visit upon leaving our website.
We have put appropriate security measures in place to prevent your personal information being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees and third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
Procedures have been put in place to deal with any suspected personal information breach. We promise to notify you and any applicable regulator (including the ICO) of a breach where we are legally required to do so. You can view our attendant policies here
Information Security Policy
Data Management Policy
Information Security Incident Management Policy
How long do we keep your personal information?
Your personal information will only be withheld for as long as is necessary to fulfil its original purposes, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Pinning down the appropriate retention period for personal information includes an analysis of the amount, nature and sensitivity of your personal information, the potential risk of harm from unlawful use or exposure of your personal information, the cause(s) for which we process your personal information and whether we can achieve those purposes through different methods, and the applicable legal requirements. In some situations, we will anonymise your personal information (so that it cannot be related to you) for investigation or statistical purposes. In this case, we may use this information indefinitely without further notice to you.
Using your personal information helps us to inform you about relevant services and any up-coming offers, but we can only send you marketing messages you have given permission or shown valid interest. To be removed from our marketing database, all you need to do is follow the opt-out links within the marketing messages we send to you. Alternatively, you can contact our DPO, fulfilmentcrowd Ltd, Matrix Park, Western Avenue, Chorley, Lancashire PR7 7NB.
Opting out of marketing messages does not apply to any personal data administered as a result of purchasing our services, or any other transaction between us.
What are your rights?
These are your rights:
If you wish to exercise any of the above rights, please contact us; DPO, fulfilmentcrowd Ltd, Matrix Park, Western Avenue, Chorley, Lancashire PR7 7NB.
Making a complaint
Please do not hesitate to contact us if you are unhappy with how we have used your personal information, DPO, fulfilmentcrowd Ltd, Matrix Park, Western Avenue, Chorley, Lancashire PR7 7NB.
Another right you carry is to complain to the Information Commissioner’s Office, whose contact details can be found at https://ico.org.uk/. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first case.