This privacy policy tells you about the information we collect from you when you engage with our websites or services. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.
Who are we?
We are Hodder+Partners.
Our address is:
S.G.I. Studios
1 Kelso Place Manchester M15 4LE
United Kingdom
You can contact us by post at the above address, or via email at mail@hodderandpartners.com or by telephone on +44 (0)161 832 9842.
What personal data do we collect?
We collect, store and process certain personal information about our employees, clients, suppliers, consultants, contractors and other third parties.
Information may be gathered over the telephone, by email, post, face to face, and through our social media accounts such as Twitter and LinkedIn.
The data we collect can include
- full contact details such as name, address, telephone numbers, email addresses
- financial account details
The information that we collect in relation to recruitment and staff is detailed separately in our Employee and Job Applicant Privacy Policies.
We do not collect personal identifying information through our website and we do not use cookies or other similar technology to record your interaction with our website. As part of our security measures however, the (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website from which you are engaging with us may be recorded.
In addition, our website contains links to other websites and third party content, eg. Youtube or Google Maps. Hodder+Partners’ privacy policy applies only to our website – when you visit other websites different privacy policies apply and cookies from third parties may be stored on your computer.
If you wish to restrict or block the use of 3rd-party cookies on your computer, you can do this through your browser settings, as well as delete cookies already stored on your computer.
For further information on cookies and how you can control how these are used, you can visit www.allaboutcookies.org.
Where else may we get data from?
Associated partners
From time to time we may collect data through third parties. In such circumstances we are reliant on the third party supplier’s assurances that they have the appropriate legal basis for processing and transferring this data.
Where is my information stored?
Your information may be held on paper, electronically or in any other media. Files are generally stored in our office but they may be taken out of the office in order to perform our contractual duties, as well as part of our disaster recovery policy. Electronic data is stored locally on our server and in our archives as well as in some cases on remote servers that are located in the UK or European Economic Area.
What do we do with your information?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- to enter into a contract to provide services;
- to register a new client or contact;
- to process payments and invoices;
- to manage payments, fees and charges;
- to manage our relationship with clients via email, telephone and post;
- to send communications such as event and awards invitations, letters and Christmas cards;
- to respond to communication from you through direct correspondence through this website and/social media;
- to facilitate any social media sharing functionality and authentication;
- to resolve complaints and data access requests in accordance with data protection law;
- for the facilitation of any legal obligations or defend any court actions that we may have.
Who we might share your data with?
We treat personal data confidentially. It will be shared internally within Hodder+Partners as well as with companies and organisations we work with if the data is necessary for specific, explicit and legitimate purposes.
We may forward your personal data to third party companies who wish to use your services.
Hodder+Partners may be required to share your personal information with certain public, legal or regulatory authorities where there is a legislative obligation to do so.
Hodder+Partners do not sell, trade, or rent the personal data that has been collected to others.
Automated processing and profiling
As a responsible company, we do not use automatic decision making or profiling.
Legitimate Interest
Hodder+Partners will process your data when it is in our legitimate interest to do so and in doing so it does not override any of your data protection rights. Our legitimate interests include:
- fulfilling our duties to our clients, colleagues, and other stakeholders.
- ensuring the security and integrity of our services and ensuring that our systems such as websites and applications work properly;
- selling and supplying services to our clients;
- protecting clients, employees and other individuals and maintaining their safety, health and welfare;
- the promotion, marketing and advertising our products and services;
You have the right to object to the processing of your data under legitimate interest should you feel that such legal basis is not warranted or feel that it overrides any of the rights that you may have.
Data Security
Hodder+Partners will take reasonable security measures against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data.
Hodder+Partners will put in place procedures and technologies to maintain the security of all personal data from the point of collection to the point of destruction.
The EU General Data Protection Regulation (GDPR) provides you with the following key rights:
- The right of access – this enables you to receive further information about the personal data we hold about you as well as to obtain a copy of that data.
- The right to rectification – this enables you to have any incomplete or inaccurate personal data that we hold about you corrected.
- The right to erase – in limited circumstances you can ask us to delete personal data we hold about you, for example where it is no longer required for the purposes for which it was collected/processed.
- The right to restrict processing – in limited circumstances you can ask us to suspend the processing of your personal data.
- The right to data portability – in limited circumstances you can ask us to transfer your personal data to another organisation.
- The right to object – this enables you to object to us processing your personal information in limited circumstances.
You can find more information about these rights from the UK regulator’s website at www.ico.org.uk. To exercise any of these rights please send a request to the contact details below.
How long do we keep your information for?
Hodder+Partners will not keep personal data longer than is necessary for the purpose or purposes for which they were collected or as otherwise permitted by the GDPR. Hodder+Partners will take all reasonable steps to destroy, or erase from its systems, all data which is no longer required. For more information on our data retention periods please contact us on the details above.
You can also ask us to give you a copy of the information and to stop using your information for a period of time if you believe we are not doing so lawfully.
To submit a request by email, post or telephone, please use the contact information provided above.
Rights
In addition to the above you have the following rights under GDPR:
- The right to ask what personal data is held free of charge
- The right to ask to update and correct any out of date or incorrect personal data that we hold free of charge.
- The right to erasure of personal data where consent is the only legal basis for processing and that consent has been withdrawn.
- The right to data portability in the sense that personal data provided directly by the data subject is exportable in an open format like CSV where the legal basis for processing is based on either contract or consent.
- The right to restrict or object to the processing of your personal data where:
- You contest the accuracy of the personal data and the accuracy needs to be verified;
- You object to the processing under legitimate interest grounds and consideration needs to be made whether GTI’s legitimate interest overrides that of the individuals;
- The processing was unlawful and you request restricted processing over erasure.
You can withdraw consent at any time where consent has been relied upon. If consent is the sole legal basis for processing, we will stop processing the data after the consent is withdrawn. The data will then be placed in a restricted processing mode until you have asked to exercise your right to erasure or the personal data falls outside stated retention period (whichever comes first).
Our communications with you
We will periodically communicate with you by email, post, telephone or device notifications for the purposes of delivering our services to you. The legal purpose for which is under the legitimate interest provision under both GDPR and the Privacy and Electronic Communications Regulations (PECR).
However, should you be concerned about the content of these communications (such as unwanted marketing communications or simply want to change the way we communicate with you please contact us by telephone, email or letter at the details provided above.
Your right to complain
If you have a complaint about our use of your information you can do so with the relevant supervisory authority within the EU to which you are a resident, whom may refer the complaint to the UK supervisory authority.
Complaints in the UK can be made to the Information Commissioner’s Office via their website at ico.org.uk/make-a-complaint or write to them at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Date:
24 May 2018