Privacy Policy - S&G Response

Get in touch: 01625 417758

info@sandgresponse.co.uk

OUR PRIVACY POLICY

Your privacy on www.sandgresponse.co.uk

Note: if you are not a Customer or potential Customer of S&G Response only those sections relating to our website are relevant to you.

Last updated on: 17^th December 2021

1. Introduction
S&G Response takes data protection seriously and is committed to respecting and protecting your personal data. Your personal data is data which by itself or with other data available to us can be used to identify you.

This Privacy Notice explains how we will collect, store and use any personal data you provide via our website, email or networks and when you otherwise communicate with us (including in the course of the services we provide or the running of our business).

By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.

If you have any questions you can contact us at:

Telephone – 01625 417 758
Post – FAO: Risk and Compliance Department, S&G Response, St Ann’s House, Parsonage Green, Wilmslow, Cheshire, SK9 1HG

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

This Privacy Notice may change from time to time and, if it does, the up-to-date version will be available on our website and becomes effective immediately.

Please take the time to read this Privacy Notice, which contains important information about the way in which S&G Response processes personal data.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO so please contact us in the first instance.

For the purposes of this Privacy Notice, “Data Protection Legislation” is defined as, for the periods in which they are in force, the European Data Protection Directive 95/46/EC, all laws giving effect or purporting to give effect to the European Data Protection Directive 95/46/EC (such as the Data Protection Act 1998) or otherwise relating to data protection (to the extent the same apply) and, from 25 May 2018, the General Data Protection Regulation (Regulation (EU) 2016/670) (“GDPR”) or any equivalent legislation amending, supplementing or replacing the GDPR.

2. The data we may collect about you
We may collect, or be provided with, and process information about you, your personnel and clients through various means, including:

In the course of carrying out work for you (or your business), in which case we will process any of your client personal data provided to us as a Data Processor as defined in the Data Protection Legislation;

Via our website (for example, on our ‘Contact Us’ page);
By email or other electronic correspondence;
By telephone;
Networking (e.g. conferences, customer events and/or other meetings or events either hosted or attended by us);
Otherwise through providing our services or operating our business.

The personal data you give to us may include:

Your name and title;
Contact information, including telephone number, postal address and email address;
Information relating to your location, preferences and/or interests;
Photographic identification;
With respect to your clients, their personal data including special categories of personal data;
The content of any enquiry submitted over our website;
Any other personal data we collect (such as the customer and client reference numbers which may be assigned to you) in the context of providing our services or in the course of operating our business.

Each time you visit our website, we may automatically collect the following information:

Web usage information (e.g. IP address);
Information about your visit, including the full uniform resource locators (URLs) clickstream to, through and from our website.

We may ask you for information when you report a problem with our website.

If you contact us, we may keep a record of that correspondence or conversation.

The personal data described above may relate to any of the following categories of person:

Our customers and your clients;
Our prospective customers;
Those who submit enquiries through our website or whose details are otherwise entered into our marketing management system.

3. Cookies

What are cookies?

A cookie is a small non-executable text file that is placed on your computer when you browse a website. Our website uses two kinds of cookies; first party ’session cookies’ which retain information for the duration of your visit, for example if you’re completing more than one form you only need to provide your information once; and first party ‘persistent cookies’ which remain on your computer after your visit and help us monitor what parts of the site you visit so that we can keep improving our website in accordance with your preferences. Our cookies don’t hold any personal or confidential information about you. Most browsers are set to automatically accept cookies.

Understanding the way you interact with our site is very important to us which is why we monitor site traffic using cookies and use the information to enhance our site’s overall design, layout and functionality.

Our website uses the following types of cookies:

Session cookies: These cookies are used to retain information for the duration of your visit, for example if you’re completing more than one form you only need to provide your information once.

Sandgresponse.co.uk tracking cookies: These cookies are used to recognise repeat visitors to the site and record specific browsing information (e.g. how you arrive, pages you view, options you select, information you enter and paths you take).

A user identification cookie: This holds a unique (32-character) reference which identifies this visitor each time that they return to our site. This cookie is held for a 10-year duration. Unless users upgrade their browsers (which clears their cookies) within this time. This identifies you as a user only and does not identify you personally.

Distinguishing cookie: This cookie allows us to distinguish one user from another but this cookie is not responsible for identifying the individual.

Traffic source cookie: Stores the traffic source or campaign that explains how the you reached our site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics.

Google Analytics Cookies:

S&G Response uses Google Analytics cookies to store information, such as what time a visit occurred, whether the visitor has been to the site before, and what site referred the visitor to the web page. The cookies report website trends. They do not identify individual visitors. A different set of cookies is used for each website, and visitors are not tracked across multiple sites. In addition to disabling cookies users can also install the Google Analytics Opt-out Add-on, which prevents Google Analytics from collecting information about website visits. To find out more visit https://www.google.com/analytics/learn/privacy.html

Facebook Pixel cookies:

S&G Response uses Facebook Pixel cookies to store information about your visit to our site. We use this information to show you different content on Facebook that may fit your needs.

You can block or delete cookies by changing your browser settings – please refer to your browser’s ‘help’ functionality for advice or to find out more you can visit https://www.allaboutcookies.org/manage-cookies/index.html.

4. How we use your information
We may use your information for the following purposes:

To respond to any query that you may submit to us;
To manage our relationship with you (and/or your business), including by maintaining databases of customers and other third parties for administration, accounting and relationship management purposes;
To complete our contractual obligations to you;
Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests;
Where we need to comply with a legal or regulatory obligation (for example any relevant anti-money laundering law or regulation);
To send you any relevant information on our services and events that may be of interest to you using the email and/or postal address which you have provided, but only if you have given us your consent to do so or we are otherwise able to do so in accordance with applicable Data Protection Legislation. You can withdraw your consent to marketing activity at any time using the unsubscribe link located in any of our marketing emails or by emailing us at unsubscribe@sandgresponse.co.uk;
To determine what is most effective about our website, and to help identify ways to improve it, and to tailor it to be more effective;
To comply with any other professional, legal and regulatory obligations which apply to us or policies that we have in place;
As we consider necessary to prevent illegal activity or to protect our interests.

5. Legal grounds for processing your information

We will rely on the following legal bases under Data Protection Legislation for processing your personal data:

Performance of, or entry into, a contract;
Compliance with a legal obligation to which we are subject;
We have a legitimate interest in doing so as a services provider;
Where processing of ‘special category data’ is necessary in the context of the establishment, exercise or defence of a legal claim, or where there is substantial public interest in doing so;
In certain circumstances, where we have express consent to do so. Where we collect consent, we will explain that it may be withdrawn at any time in accordance with the information we provide at that time;

We will process your client’s personal data as a Data Processor in accordance with the terms of the contractual arrangements in place between us.

6. Sharing your information
We may share your details with third parties instructed by us in accordance with your instructions to enable us to fulfil our contractual obligations to you and/or your clients in the course of business.

We will only share your personal data in compliance with Data Protection Legislation.

We may disclose your information to third parties when:

You specifically request this or it is necessary to provide our services to you, for example disclosure to expert medical providers;
We consider other companies’ products and services in our group of companies may interest you;
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation.

We will not sell your information.

7. Storage and retention of your personal data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We will procure that any third parties we engage to provide services in satisfaction of any contract between us will keep your data and that of your clients stored on their systems for as long as is necessary to provide the services to you, and to comply with applicable legal requirements.

We will not store your information for longer than is reasonably necessary or required by law, and/or as needed for the duration of our contractual relationship.

Following the completion of any contract between us, we may also need to retain your personal data for legal and regulatory purposes, including

Pursuing any outstanding payments, and
For HMRC audit purposes following payment of an invoice.

8. Sending your information outside of the EEA

If we need to share your personal data with a recipient outside the European Economic Area (“EEA”) we will ensure we do so in compliance with Data Protection Legislation and having obtained your consent, where appropriate.

9. Your information rights

Data Protection Legislation gives you the right to access information held about you.

We will aim to respond to any requests relating to your rights without undue delay and in any case within one month of receipt of your request. With respect to your clients we will, as you are the Data Controller, notify you if we directly receive a request relating to their rights.

We may ask you to confirm your identity so that we can validate a request. If you would like to make a request, please email or write to the DPO using the contact details provided above.

You have the right to:

Request access to your personal data and check that we are lawfully processing it.
Request correction of the personal data that we hold about you if you consider that it is inaccurate.
Request the transfer of your personal data to you or to a third party.
Request erasure of your personal data. This includes where you have been successful in exercising your right to object to processing (see below). However we may not be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Request restriction of processing of your personal data. This may be the case if you want us to establish the data’s accuracy or where our use of the personal data is unlawful but you do not want us to erase it.
Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms.

Where you exercise your rights to request erasure, or request a restriction in the processing of your personal data or to object to processing of your personal data, we may still need to keep basic contact information about you if you are already or will shortly be an active customer as we will require this for contractual purposes.

10. Third Party Websites

This policy applies only to this website and not to other websites to which we provide links. We also enter into agreements with commercial partners whose websites may be co-branded or framed by us and which you may visit directly through our website. These websites are not subject to our privacy policy. You are advised to read the privacy policy of such other websites.