Privacy Notice – How we use your personal data
The first part of the notice is information we need to tell everybody. Nyela Information Governance Consultants Ltd is the controller for the personal information we process, unless otherwise stated. You can contact us via email: firstname.lastname@example.org or telephone: +44(0)345 034 1105
This privacy notice also tells you what to expect us to do with your personal information when you contact us or use one of our services.
Why we use personal information?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- You have made an enquiry to us.
- You wish to attend, or have attended, an event.
- You have engaged us to provide services to you.
Why we are able to process your information?
If you have indicated that you would be interested in engaging AKD to work with you then we will process your contact details to get in touch with you. We will process any other personal data provided in the course of enquiry and the engagement for the purpose of informing our work, advice and or guidance provided during the engagement.
The legal basis we are relying on to process your personal data is Legitimate Interests, which allows us to process personal data when it is necessary to pursue or legitimate interest of providing a business service to you and we will only use your personal data in ways that you would reasonably expect and which have a minimal privacy impact.
If the provision of services to you requires us to process the personal data of other individuals, i.e. your customers, on your behalf, the legal basis we will rely on will be the relevant legal basis that you rely upon as the Data Controller or Legitimate Interests.
How long we store it for?
We will retain personal information provided as part of enquiries, until our work with you is complete. Contact details, such as telephone numbers and email addresses will be retained for a further 2 years after the end of engagement.
Financial records will be retained in line with legislative requirements set out by HMRC. Whether there are other recipients of your personal information We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us, i.e. email hosting. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct. Your data protection rights
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information. As we are processing your personal data for our legitimate interests, as stated above, you have the right to object to our processing of your personal data.
There may be legitimate reasons why we may refuse your objection, which will depend on why we are processing it. For more information on all of your rights, please see ‘Your rights as an individual’.
We strive for excellence when it comes to processing your personal information. If you have queries or concerns, please contact us at email@example.com and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to the UK supervisory authority. Please follow this link to see how to do that.