b) This Policy (together with our website Terms and Conditions [https://www.the-hsqe-partnership.co.uk/terms-and-conditions], and any other documents referred to in it) sets out the basis on which we (HSQE Partnership), company number 11005320 with a registered address of 2 Mannin Way, Lancaster, England, LA1 3SU and email address of email@example.com will process any personal data we collect from you, or which you provide to us, in the course of using our site [https://www.the-hsqe-partnership.co.uk/]. For the purpose of the Data Protection Act 2018 (“DPA’18”) we are the data controller.
a) When you use our site, there are a number of ways in which you provide personally identifiable information and other data to us. By using our site, you consent to us collecting and processing this data, on the terms and for the reasons which are explained below.
The personal data of all visitors to our site is processed under the General Data Protection Regulation (“GDPR”) and DPA’18 on the lawful basis of legitimate business interest.
Information we may collect about you:
a) Your full name, address, email address, telephone number, or other information you provide when signing up for an account on the site or using our contact form.
b) Your IP addresses.
c) Your Internet Service Provider (“ISP”).
d) Any referring or exit pages taking you to or from our site.
e) Your login information.
f) Your web browser type and version.
g) Your time zone and location.
h) Date/time stamp.
i) Click stream data.
j) Any browser plug-ins and versions used on your browser.
k) Your operating system.
l) Your platform/device details.
m) Information we collect when you interact with our content on the site or on third-party sites or platforms, such as social networking sites. This may include information such as “Likes”, profile information gathered from social networking sites or interacted with our content.
n) To enhance your user experience or help improve and measure our effectiveness, HSQE Partnership may embed code from third party sites. Examples of such parties may include Facebook, Twitter, Google, and others. These third parties may collect information about including IP addresses through cookies in ways HSQE Partnership does not control.
How your information is being used:
a) Ensure that content from our site is presented in the most optimised and effective manner for you and for your computer.
b) To diagnose or fix technology problems.
c) To control unauthorised use or abuse of the site and our products and services, or otherwise detect, investigate or prevent activities that may violate our policies or be illegal.
d) Carry out our obligations arising from any interaction entered into between you and us.
e) Allow you to participate in interactive feature of our service, when you choose to do so.
f) Notify you about changes to our service.
g) To deliver support and respond to your inquiries.
h) Administer our Site including data analysis, testing, traffic monitoring, research, statistical and survey purposes.
i) HSQE Partnership may provide general statistical information to third parties but such information will not allow anyone to be personally identified.
a) All information you provide to us is stored on our UK based secure servers and encrypted using 256-bit Transport Layer Security (“TLS”) encryption,
b) We take your privacy seriously, and will take all reasonable steps to protect your personal data, but please be aware that any data which you send to our Site is sent at your own risk.
e) We operate a data retention period of 7 years from the date of our last interaction with a user. 7 years after the date of our last interaction with a user all of the data provided by the user during all of their interactions with us will be reviewed and securely deleted.
g) No method of transmission over the Internet, method of electronic storage or other security methods are one hundred percent secure. Therefore, while we strive to use commercially acceptable means such as firewalls, password-protected databases with limited physical or electronic access, and encryption to protect your personally identifiable information against unauthorised use, disclosure or modification, we cannot guarantee its absolute security.
h) By using the site or otherwise providing personally identifiable information to us, you are consenting to have your personally identifiable information transferred to and processed in the United Kingdom or any other country in which Data Controller or its parents, subsidiaries, affiliates and service providers maintain facilities.
i) Under DPA 2018 and GDPR the personal data of customers is processed under the GDPR and DPA’18 on the lawful basis of the performance of a contract. Information collected from customers is required for the provision of goods and services from the e-commerce function of our site and is processed under the basis of the contract created for the provision of goods and services to the customer.
Children under 13:
a) This site is not intended for use by anyone under the age of 13 nor does Group Hug knowingly collect or solicit personally identifiable information from anyone under the age of 13. If you are under 13, you may not attempt to send any information about yourself to us, including your name, address, telephone number, or email address.
Access to information:
a) Subject Access Requests
You have the right under the DPA 2018 to access the information which we hold about you. If you wish to exercise this right, please send your request to firstname.lastname@example.org.
b) Right to be Forgotten
You have the right under the DPA 2018 to have all of the information that we hold about you deleted in line with our statutory and legal responsibilities. If you wish to exercise this right, please send your request to email@example.com.
c) Right to Data Portability
You have the right under the DPA 2018 to request a copy of all of the information that we hold about you. If you wish to exercise this right, please send your request to firstname.lastname@example.org.
d) Right to Data Rectification
You have the right under the DPA 2018 to request the amendment or updating of all of the information that we hold about you. If you wish to exercise this right please send your request to email@example.com.
Notices and Revisions
b) Should you not be satisfied with our process, conduct or response to a request you may have made you have the right to complain to the Information Commissioner’s Officer (ICO).
Information Commissioner’s Office
0303 123 1113