KenwayHall Ltd client privacy notice
This privacy notice tells you what to expect us
to do with your personal information.
·
What information we collect, use,
and why
·
Lawful bases and data protection
rights
·
Where we get personal information
from
·
How long we keep information
07753 832169
dataprotection@kenwayhall.co.uk
We collect or use the following information to provide
and improve products and services for clients:
·
Names and contact
details
·
Addresses
·
Transaction data
(including details about payments to and from you and details of products and
services you have purchased)
·
Usage data
(including information about how you interact with and use our website,
products and services)
·
Information
relating to compliments or complaints
·
Records of
meetings and decisions
We collect or use the following personal
information for the operation of client or customer accounts:
·
Names and contact
details
·
Addresses
·
Purchase or
service history
We collect or use the following personal
information for information updates or marketing purposes:
·
Names and contact
details
·
Purchase or
account history
We collect or use the following personal
information for dealing with queries, complaints or claims:
·
Names and contact
details
·
Purchase or
service history
·
Customer or
client accounts and records
·
Financial
transaction information
·
Correspondence
Under UK data protection law, we must have a
“lawful basis” for collecting and using your personal information. There is a
list of possible lawful bases in the UK GDPR. You can find out more about
lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your
data protection rights which are in brief set out below. You can find out more
about your data protection rights and the exemptions which may apply on the
ICO’s website:
·
Your right of
access - You have the
right to ask us for copies of your personal information. You can request other
information such as details about where we get personal information from and
who we share personal information with. There are some exemptions which means
you may not receive all the information you ask for. You can read more about this right here.
·
Your right to
rectification - You have
the right to ask us to correct or delete personal information you think is
inaccurate or incomplete. You can read more about this right here.
·
Your right to
erasure - You have
the right to ask us to delete your personal information. You can read more about this right here.
·
Your right to
restriction of processing - You have
the right to ask us to limit how we can use your personal information. You can read more about this right here.
·
Your right to
object to processing - You have
the right to object to the processing of your personal data. You can read more about this right here.
·
Your right to
data portability - You have
the right to ask that we transfer the personal information you gave us to
another organisation, or to you. You can read more about this right here.
·
Your right to
withdraw consent – When we
use consent as our lawful basis you have the right to withdraw your consent at
any time. You can read more about this right here.
If you make a request, we must respond to you
without undue delay and in any event within one month.
To make a data protection rights request, please
contact us using the contact details at the top of this privacy notice.
Our lawful bases for collecting or using personal
information to provide and improve products and services for clients
are:
·
Legitimate
interests – we’re collecting or using your information because it benefits you,
our organisation or someone else, without causing an
undue risk of harm to anyone. All of your data protection rights may apply,
except the right to portability. Our legitimate interests are:
o We collect information in order to
provide and improve services to clients.
Our lawful bases for collecting or using personal
information for the operation of client or customer accounts are:
·
Legitimate
interests – we’re collecting or using your information because it benefits you,
our organisation or someone else, without causing an
undue risk of harm to anyone. All of your data protection rights may apply,
except the right to portability. Our legitimate interests are:
o We collect personal information where it
is necessary to operate a client account.
Our lawful bases for collecting or using personal
information for information updates or marketing purposes are:
·
Legitimate
interests – we’re collecting or using your information because it benefits you,
our organisation or someone else, without causing an
undue risk of harm to anyone. All of your data protection rights may apply,
except the right to portability. Our legitimate interests are:
o We use personal information to make
people aware of our services.
Our lawful bases for collecting or using personal
information for dealing with queries, complaints or claims are:
·
Legitimate
interests – we’re collecting or using your information because it benefits you,
our organisation or someone else, without causing an
undue risk of harm to anyone. All of your data protection rights may apply,
except the right to portability. Our legitimate interests are:
o We collect personal information so that
we can respond effectively to queries or complaints.
·
Directly from you
·
Publicly
available sources
We only hold personal information for as long as
is necessary for the purposes for which we collected it.
If you have any concerns about our use of your
personal data, you can make a complaint to us using the contact details at the
top of this privacy notice.
If you remain unhappy with how we’ve used your
data after raising a complaint with us, you can also complain to the ICO.
The ICO’s
address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
15 October 2024