Privacy Policy
XYZ Company respects the privacy of every individual who visits and uses this website and is committed to safeguarding their privacy.
This Privacy Policy applies to information that we collect about you when you use our website. This policy explains what information we gather about you, what we use that information for and who we give that information to. It also sets out your rights in relation to any information that we may hold about you.
By using this site or/and our services, you consent to the Processing of your Personal Data as described in this Privacy Policy.
XYZ Company may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from Todays Date.
This Privacy Policy applies to information that we collect about you when you use our website. This policy explains what information we gather about you, what we use that information for and who we give that information to. It also sets out your rights in relation to any information that we may hold about you.
By using this site or/and our services, you consent to the Processing of your Personal Data as described in this Privacy Policy.
XYZ Company may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from Todays Date.
Table Of Contents
Definitions Used In This Policy.
Data Protection Principles We Follow.
Data Subject Rights.
Who Is Collecting The Data.
What Data We Collect About You.
What We Do With The Personal Data We Collect.
Will The Data Be Shared With Any Third Parties. How Will This Data Be Used.
How We Secure Your Data.
Special Category Data.
Children.
How Long Will The Data Be Stored For.
How Can The Data Subject Raise Concerns & Complaints.
Definitions Used In This Policy.
Data Protection Principles We Follow.
Data Subject Rights.
Who Is Collecting The Data.
What Data We Collect About You.
What We Do With The Personal Data We Collect.
Will The Data Be Shared With Any Third Parties. How Will This Data Be Used.
How We Secure Your Data.
Special Category Data.
Children.
How Long Will The Data Be Stored For.
How Can The Data Subject Raise Concerns & Complaints.
Definitions Used In This Policy
Personal Data: any information relating to an identified or identifiable natural person
Processing: any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data Subject: a natural person who’s Personal Data is being processed.
Child: a natural person under 16 years of age.
We/us (either capitalised or not): XYZ Company
Personal Data: any information relating to an identified or identifiable natural person
Processing: any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data Subject: a natural person who’s Personal Data is being processed.
Child: a natural person under 16 years of age.
We/us (either capitalised or not): XYZ Company
Data Projection Principles We Follow
We promise to follow the following data protection principles:
Processing is lawful, fair, transparent: Our processing activities have lawful grounds. We always consider your rights before processing personal data. We will provide you information regarding processing upon request.
Processing is limited to the purpose: Our processing activities fit the purpose for which personal data was gathered.
Processing is done with minimal data: We only gather and process the minimal amount of personal data required for any purpose.
Processing is limited with a time period: We will not store your personal data for longer than needed.
We will do our best to ensure the accuracy of data.
We will do our best to ensure the integrity and confidentiality of data.
We promise to follow the following data protection principles:
Processing is lawful, fair, transparent: Our processing activities have lawful grounds. We always consider your rights before processing personal data. We will provide you information regarding processing upon request.
Processing is limited to the purpose: Our processing activities fit the purpose for which personal data was gathered.
Processing is done with minimal data: We only gather and process the minimal amount of personal data required for any purpose.
Processing is limited with a time period: We will not store your personal data for longer than needed.
We will do our best to ensure the accuracy of data.
We will do our best to ensure the integrity and confidentiality of data.
Data Subjects Rights
The Data Subject has the following rights:
Right to information: meaning you have the right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
Right to access: meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
Right to rectification: meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
Right to erasure: meaning in certain circumstances you can request for your Personal Data to be erased from our records.
Right to restrict processing: meaning where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
Right to object to processing: meaning in certain cases you have the right to object to Processing of your Personal Data, for example in the case of direct marketing.
Right to object to automated Processing: meaning you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
Right to data portability: you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another.
Right to lodge a complaint: in the event that we refuse your request under the rights of access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us.
Right for the help of supervisory authority: meaning you have the right for the help of a supervisory authority and the right for other legal remedies such as claiming damages.
Right to withdraw consent: you have the right to withdraw any given consent for Processing of your Personal Data.
The Data Subject has the following rights:
Right to information: meaning you have the right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
Right to access: meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
Right to rectification: meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
Right to erasure: meaning in certain circumstances you can request for your Personal Data to be erased from our records.
Right to restrict processing: meaning where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
Right to object to processing: meaning in certain cases you have the right to object to Processing of your Personal Data, for example in the case of direct marketing.
Right to object to automated Processing: meaning you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
Right to data portability: you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another.
Right to lodge a complaint: in the event that we refuse your request under the rights of access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us.
Right for the help of supervisory authority: meaning you have the right for the help of a supervisory authority and the right for other legal remedies such as claiming damages.
Right to withdraw consent: you have the right to withdraw any given consent for Processing of your Personal Data.
Who Is Collecting The Data?
XYZ Company is acting as the data controller with respect to the personal data of the website visitors and service users.
XYZ’s Company Description. Our registered address is Registered Address.
If you have any questions about this Privacy Policy, you can get in contact by contacting:
Contact Details.
XYZ Company is acting as the data controller with respect to the personal data of the website visitors and service users.
XYZ’s Company Description. Our registered address is Registered Address.
If you have any questions about this Privacy Policy, you can get in contact by contacting:
Contact Details.
What Data We Collect About You
Visitors to our website can browse without entering any personal data. We only collect data about you if we have a reason to do so, for example, to provide our Services, to communicate with you, or to make our Services better.
We collect data in three ways: if and when you provide it to us, automatically through operating our Services, and from outside sources.
Data You Provide To Us
You will only need to provide such information when you are completing a contact form, requesting a call back, requesting a demo, signing up to a newsletter, subscribing to our service, making a purchase, making a booking, or other requests in connection with the services we offer.
That personal information is typically name, job title, company name, address, postcode, email, mobile number, landline number, any other contact details, demographic information such as preferences and interests, payment details, and other basic information which is necessary for us to deal with your query, call back, demo request, newsletter subscription, purchasing a product/service, making a booking, or other request and is only used in connection with our business.
We ask for basic information from you in order to set up your account. For example, we require individuals who sign up for a XYZCompany.com account to provide a Name and email address, that’s it.
When you purchase from us, to allow us to enter into a contract or fulfil contractual obligations, we may collect the following information: name, date of birth, phone number, email address, address, billing address, company name (if applicable), VAT number (if applicable). If you don’t provide this information, you won’t be able to purchase from us or enter into a contract with us. In these instances, we process your personal data because it is necessary for the performance of a contract with you, or in order to take steps at your request to enter into a contract., to identify you, to provide you a service or to send/offer you a product, and to communicate either for sales or invoicing.
Data Automatically Collected About You
Log Information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, such as the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services.
Information from Cookies & Other Technologies: A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Pixel tags (also called web beacons) are small blocks of code placed on websites and emails. XYZ Company uses cookies and other technologies like pixel tags to help us identify and track visitors, usage, and access preferences for our Services, as well as track and understand email campaign effectiveness and to deliver targeted ads. If you have consented to their use we will collect IP address, geographical location of where you accessed our website, information about how you use/interact with our website and information about your computer or other electronic device (tablet and browser type). For more information on our use of cookies, click here.
Information From Our Partners
We gather information from our trusted partners with confirmation that they have legal grounds to share that information with us. This is either information you have provided them directly with or that they have gathered about you on other legal grounds. See the list of our partners below.
Publicly Available Information
We might gather information about you that is publicly available.
Visitors to our website can browse without entering any personal data. We only collect data about you if we have a reason to do so, for example, to provide our Services, to communicate with you, or to make our Services better.
We collect data in three ways: if and when you provide it to us, automatically through operating our Services, and from outside sources.
Data You Provide To Us
You will only need to provide such information when you are completing a contact form, requesting a call back, requesting a demo, signing up to a newsletter, subscribing to our service, making a purchase, making a booking, or other requests in connection with the services we offer.
That personal information is typically name, job title, company name, address, postcode, email, mobile number, landline number, any other contact details, demographic information such as preferences and interests, payment details, and other basic information which is necessary for us to deal with your query, call back, demo request, newsletter subscription, purchasing a product/service, making a booking, or other request and is only used in connection with our business.
We ask for basic information from you in order to set up your account. For example, we require individuals who sign up for a XYZCompany.com account to provide a Name and email address, that’s it.
When you purchase from us, to allow us to enter into a contract or fulfil contractual obligations, we may collect the following information: name, date of birth, phone number, email address, address, billing address, company name (if applicable), VAT number (if applicable). If you don’t provide this information, you won’t be able to purchase from us or enter into a contract with us. In these instances, we process your personal data because it is necessary for the performance of a contract with you, or in order to take steps at your request to enter into a contract., to identify you, to provide you a service or to send/offer you a product, and to communicate either for sales or invoicing.
Data Automatically Collected About You
Log Information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, such as the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services.
Information from Cookies & Other Technologies: A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Pixel tags (also called web beacons) are small blocks of code placed on websites and emails. XYZ Company uses cookies and other technologies like pixel tags to help us identify and track visitors, usage, and access preferences for our Services, as well as track and understand email campaign effectiveness and to deliver targeted ads. If you have consented to their use we will collect IP address, geographical location of where you accessed our website, information about how you use/interact with our website and information about your computer or other electronic device (tablet and browser type). For more information on our use of cookies, click here.
Information From Our Partners
We gather information from our trusted partners with confirmation that they have legal grounds to share that information with us. This is either information you have provided them directly with or that they have gathered about you on other legal grounds. See the list of our partners below.
Publicly Available Information
We might gather information about you that is publicly available.
What We Do With The Personal Data We Collect
We use your Personal Data in order to:
Legal Bases for Collecting and Using Information
A note here for those in the European Union about our legal grounds for processing information about you under EU data protection laws, which is that our use of your information is based on the grounds that:We use your Personal Data on legitimate grounds and/or with your consent.
We might process your Personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered. To do this, we will ensure that:We will inform you of any further Processing and purposes.
We use your Personal Data in order to:
Legal Bases for Collecting and Using Information
A note here for those in the European Union about our legal grounds for processing information about you under EU data protection laws, which is that our use of your information is based on the grounds that:We use your Personal Data on legitimate grounds and/or with your consent.
We might process your Personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered. To do this, we will ensure that:We will inform you of any further Processing and purposes.
- Provide our service to you. Your data is used to process your contact queries, newsletter subscription, service subscription, purchase, booking.
- Improve the website experience for our users.
- To monitor and analyse trends and better understand how users interact with our Services, which helps us improve our Services and make them easier to use.
- To communicate with you, for example through an email, about offers and promotions offered by us, solicit your feedback, or keep you up to date on our products/services.
- Fulfill an obligation under law or contract.
- The use is necessary in order to fulfill our commitments to you under our Terms of Service or other agreements with you; or
- The use is necessary for compliance with a legal obligation; We will Process your Personal Data in order to fulfil obligation rising from law and/or use your Personal Data for options provided by law; or
- The use is necessary in order to protect your vital interests or those of another person; or
- We have a legitimate interest in using your information, for example, to send out personalised offers, to administer and analyse our client base (purchasing behaviour and history) in order to improve the quality, variety, and availability of products/services offered/provided; and to conduct questionnaires concerning client satisfaction. As long as you have not informed us otherwise, we consider offering you products/services that are similar or same to your purchasing history/browsing behaviour to be our legitimate interest.
- You have given us your consent, for example, before we place certain cookies on your device and access and analyse them later on, as described in our Cookie Policy. When you send us an enquiry, subscribe to our newsletter, subscribe to our service, purchase from us, or book an appointment with us, you can opt in to receive marketing communications in relation to our products and services by ticking the relevant boxes. Any details that you give to us via this website or in any other way may be added to our database. We will then send you the relevant marketing communications, such mailings may include details of our products and services, newsletters, updates and invitations, for the purposes we have asked your consent for, until such time that you remove your consent. In these instances, processing is performed on the basis of your consent.
- the link between purposes, context and nature of Personal Data is suitable for further Processing;
- the further Processing would not harm your interests; and
- there would be appropriate safeguard for Processing.
Will The Data Be Shared With Any Third Parties? How Will The Information Be Used?
We will not share your Personal Data with strangers. Personal Data about you is in some cases provided to our trusted partners for the purposes of delivering our services, fulfilling any contracts we enter with you, where required by law or to enforce our legal rights. We only work with processing partners who are able to ensure adequate level of protection to your Personal Data.
Third Party Communications
Any personal information that you provide to us is processed and held on our computer systems and we do not provide your details to third parties for any marketing or promotional purposes, except where you have given your consent.
Analytics
The servers hosting our website may automatically record certain information about you when you use the website, including details of your domain name, IP address, operating system and browser and we may use this information to understand who has seen which pages; the purpose of this is to improve our website. We may use cookies or other similar text files or programs when you visit certain parts of this website. A cookie is a small file that is sent to your browser. It helps us understand your use of this website and enables you to access, navigate and use the services provided on the website. For information about blocking the use of cookies, please refer to the help facility on your internet browser. Please note that if you block cookies you may not be able to access certain sections of this website.
Service Providers
Only when necessary to deliver our services and run our business, we share your information with various providers who will act as data processors. This group includes vendors that help us provide our Services to you (like payment providers that process your credit and debit card information, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you:Hyperlinks
Our website may contain hypertext links to external websites; we are not responsible for and accept no liability in relation to these websites or their contents. You should read any applicable privacy policy on any such website.
Sharing your information for legal reasons
XYZ Company will share your information when required to do so in order to comply with a common law or statutory obligation. For example, this may include information surrounding criminal acts or threats to public security.
Aggregated or De-Identified Information
We may share information that has been aggregated or reasonably de-identified, so that the information could not reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services and we may share a hashed version of your email address to facilitate customized ad campaigns on other platforms.
We will not share your Personal Data with strangers. Personal Data about you is in some cases provided to our trusted partners for the purposes of delivering our services, fulfilling any contracts we enter with you, where required by law or to enforce our legal rights. We only work with processing partners who are able to ensure adequate level of protection to your Personal Data.
Third Party Communications
Any personal information that you provide to us is processed and held on our computer systems and we do not provide your details to third parties for any marketing or promotional purposes, except where you have given your consent.
Analytics
The servers hosting our website may automatically record certain information about you when you use the website, including details of your domain name, IP address, operating system and browser and we may use this information to understand who has seen which pages; the purpose of this is to improve our website. We may use cookies or other similar text files or programs when you visit certain parts of this website. A cookie is a small file that is sent to your browser. It helps us understand your use of this website and enables you to access, navigate and use the services provided on the website. For information about blocking the use of cookies, please refer to the help facility on your internet browser. Please note that if you block cookies you may not be able to access certain sections of this website.
Service Providers
Only when necessary to deliver our services and run our business, we share your information with various providers who will act as data processors. This group includes vendors that help us provide our Services to you (like payment providers that process your credit and debit card information, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you:Hyperlinks
Our website may contain hypertext links to external websites; we are not responsible for and accept no liability in relation to these websites or their contents. You should read any applicable privacy policy on any such website.
Sharing your information for legal reasons
XYZ Company will share your information when required to do so in order to comply with a common law or statutory obligation. For example, this may include information surrounding criminal acts or threats to public security.
Aggregated or De-Identified Information
We may share information that has been aggregated or reasonably de-identified, so that the information could not reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services and we may share a hashed version of your email address to facilitate customized ad campaigns on other platforms.
- Email marketing providers via Mailchimp, a fully gdpr compliant platform, see their privacy policy here.
- Ecommerce providers via woocommerce ecommerce platform, a fully gdpr compliant platform, see their privacy policy here.
- Weebly Hosted Platform, a fully gdpr compliant platform, see their privacy policy here.
- Youtube: Whilst we have made all reasonable efforts to display only appropriate YouTube videos through the embedded YouTube player, we are not responsible for any YouTube content accessed from our website. After a selected video clip plays, YouTube may suggest related videos, which can be played in the embedded video player. In virtually all cases, these will be directly related to the subject of the selected video. Occasionally, YouTube users may erroneously assign key words to a video. It is therefore possible that an unrelated video could be displayed. Again, we are not responsible for this content. If you are concerned about this possibility, you should avoid viewing YouTube videos from the embedded player on this website.
- IT service providers
- Booking providers
- Payment information: XYZ Company does not store credit/debit card details nor does it share financial details with any third parties. However, it may (in appropriate circumstances) use certain other companies to provide services to you, such as a credit card processing company or a Direct Debit service. These companies do not retain, share, store or use personal information for any purposes other than to provide this service to XYZ Company.
- Payment processing providers via paypal, a fully gdpr compliant platform, see their privacy policy here.
How We Secure Your Data
XYZ Company respects your data and have put in place suitable physical, electronic and managerial procedures to safeguard against such risks as loss or unauthorised access, destruction, use, modification or disclosure of data. We use safe protocols for communication and transferring data (such as https). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks.
XYZ Company respects your data and have put in place suitable physical, electronic and managerial procedures to safeguard against such risks as loss or unauthorised access, destruction, use, modification or disclosure of data. We use safe protocols for communication and transferring data (such as https). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks.
Special Category Data
XYZ does not collect special category data as a matter of course.
However, visitors to the website may on occasion supply health-related information in relation to delivery of services. For example, visitors may share such information should they require reasonable adjustments on health grounds for the attendance at an event, or where an emergency deferral to an alternative booking date is necessary. Dependent on the type of application, this information may be received directly from the you. The information is retained only as long as is necessary and is processed solely for this purpose.
XYZ does not collect special category data as a matter of course.
However, visitors to the website may on occasion supply health-related information in relation to delivery of services. For example, visitors may share such information should they require reasonable adjustments on health grounds for the attendance at an event, or where an emergency deferral to an alternative booking date is necessary. Dependent on the type of application, this information may be received directly from the you. The information is retained only as long as is necessary and is processed solely for this purpose.
Children
We do not intent to collect or knowingly collect information from children. We do not target children with our services.
We do not intent to collect or knowingly collect information from children. We do not target children with our services.
How Long Will The Data Be Stored For?
We will keep hold of your data for no longer than necessary. The length of time we retain it will depend on any legal obligations we have (such as tax recording purposes), the nature of any contracts we have in place with you, the existence of your consent or our legitimate interests as a business.
We save your billing information and other information gathered about you for as long as needed for accounting purposes or other obligations deriving from law, but not longer than seven years.
Contact submis
We will keep hold of your data for no longer than necessary. The length of time we retain it will depend on any legal obligations we have (such as tax recording purposes), the nature of any contracts we have in place with you, the existence of your consent or our legitimate interests as a business.
We save your billing information and other information gathered about you for as long as needed for accounting purposes or other obligations deriving from law, but not longer than seven years.
Contact submis
How Can The Data Subject Raise Concerns And Complaints?
We will take all reasonable steps to keep your personal information accurate and, where necessary, up to date. If you believe that any of the information that we hold about you is incorrect, please contact us. You also have a right to request a copy of the personal information that we hold about you; if you would like a copy of that information, again, please contact us.
If you have concerns or questions over the collection, storage or processing of your data, or any questions on our use of the information or want to contact us with respect to this policy, you are encouraged in the first instance to contact a member of staff to discuss and resolve any issues, or please send an email to us at email.com or a letter by post to us at registered address.
We will take all reasonable steps to keep your personal information accurate and, where necessary, up to date. If you believe that any of the information that we hold about you is incorrect, please contact us. You also have a right to request a copy of the personal information that we hold about you; if you would like a copy of that information, again, please contact us.
If you have concerns or questions over the collection, storage or processing of your data, or any questions on our use of the information or want to contact us with respect to this policy, you are encouraged in the first instance to contact a member of staff to discuss and resolve any issues, or please send an email to us at email.com or a letter by post to us at registered address.