Enterprise Exchange privacy policy
Introduction
Enterprise Exchange is committed to protecting the privacy and security of your personal information. We take care to protect the privacy of our customers and users of our service that communicate (online or offline) with us including at events, over the phone, website and social media platforms.
We have therefore developed this privacy policy to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information.
In the course of our work we will come into contact with or use confidential information about associates, directors, employees, clients or suppliers, for example their names and home addresses who are for the purpose of this document referred to as Data Subjects.
Data Protection Legislation which means the Data Protection Act 2018 which incorporates the General Data Protection Regulation (GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the General Data Protection Regulation which is the governing legislation that regulates data protection across the EEA. This includes any replacement legislation coming into effect from time to time.
The legislation contains principles affecting not only personally identifiable information held on computers but also certain manual records containing personal data, for example associates, directors, employees, clients or suppliers’ personnel files that form part of a structured filing system.
The data protection principles
There are seven data protection principles that are central to the Legislation. In brief, the principles say that personal data must be:
The information we collect and when
We only collect information that we know we will genuinely use and in accordance with the Data Protection Legislation. The type of information that we will collect on you, and you voluntarily provide to us on this website, forms or as part of our service includes:
We may, in further dealings with you, extend this information to include your purchases, services used, subscriptions, records of conversations and agreements and payment transactions etc.
How we use your information
Who we might share your information with
We may share your personal data with other organisations in the following circumstances:
How we keep you updated on our products and services
We will send you relevant offers and news about our services in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you register with us, we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.
If you wish to amend your marketing preferences, you can do so by contacting us on the details at the bottom of this policy.
Your rights over your information
Rights to access your personal information
Under the Legislation, data subjects have the right to receive a copy of the personal data that the Company holds about them. Including:
If you wish to access a copy of any personal data being held about you, you must submit a request for this and by contacting Enterprise Exchange on the details provided below.This is sometimes termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 30 days from when your identity has been confirmed.
We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.
If you would like to exercise this right, please contact us as set out below.
Right to Correction Your Personal InformationIf any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it.
If you would like to exercise this right, please contact us as set out below.
Right to Stop or Limit Our Processing of Your DataYou have the right to object to us processing your personal information if we are not entitled to use it any more, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.
If you would like to exercise this right, please contact us as set out below.
For more information about your privacy rightsThe Information Commissioner's Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public.
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
How long we keep your information for
We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary.
Different categories of data will be retained for different periods of time, depending on legal, operational and financial requirements. Any data which the Company decides it does not need to hold for a particular period of time will be destroyed after approximately one year. Data relating to unsuccessful job applicants will only be retained for a period of one year.
Giving your reviews and sharing your thoughts
You may be able to share information through social networks like Facebook and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this, your personal information may be visible to the providers of those social networks and/or their other users. Please remember it is your responsibility to set appropriate privacy settings on your social network accounts, so you are comfortable with how your information is used and shared on them.
Security
Data security is of great importance to Enterprise Exchange and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.
We take security measures to protect your information including:
How to contact us
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:
By email: info@enterpriseexchange.org.uk
By post: 87 London Road, Cowplain, Waterlooville PO8 8XB
Thank you for taking the time to read our Privacy Policy.
Enterprise Exchange
This Policy was last updated on 13th March 2019
V2.0
Enterprise Exchange is committed to protecting the privacy and security of your personal information. We take care to protect the privacy of our customers and users of our service that communicate (online or offline) with us including at events, over the phone, website and social media platforms.
We have therefore developed this privacy policy to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information.
In the course of our work we will come into contact with or use confidential information about associates, directors, employees, clients or suppliers, for example their names and home addresses who are for the purpose of this document referred to as Data Subjects.
Data Protection Legislation which means the Data Protection Act 2018 which incorporates the General Data Protection Regulation (GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the General Data Protection Regulation which is the governing legislation that regulates data protection across the EEA. This includes any replacement legislation coming into effect from time to time.
The legislation contains principles affecting not only personally identifiable information held on computers but also certain manual records containing personal data, for example associates, directors, employees, clients or suppliers’ personnel files that form part of a structured filing system.
The data protection principles
There are seven data protection principles that are central to the Legislation. In brief, the principles say that personal data must be:
- Processed fairly and lawfully and must not be processed unless certain conditions are met in relation to personal data and additional conditions are met in relation to sensitive personal data.
- Obtained only for one or more specified and lawful purposes and must not be processed in any manner incompatible with those purposes.
- Adequate, relevant and not excessive in relation to the purposes for which it is processed. The Company will review files on a regular basis to ensure they do not contain a backlog of out-of-date or irrelevant information and to check there is a sound business reason requiring information to continue to be held.
- Accurate and, where necessary, kept up-to-date.
- Not kept for longer than is necessary.
- Appropriate technical and organisational measures must be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, data.
- Have appropriate measures and records in place to be able to demonstrate compliance with the legislation.
The information we collect and when
We only collect information that we know we will genuinely use and in accordance with the Data Protection Legislation. The type of information that we will collect on you, and you voluntarily provide to us on this website, forms or as part of our service includes:
- Your name
- Address
- Telephone number(s)
- Email address
- Survey responses
- IP address
- Cookies
We may, in further dealings with you, extend this information to include your purchases, services used, subscriptions, records of conversations and agreements and payment transactions etc.
- You are under no statutory or contractual requirement or obligation to provide us with your personal information; however we require at least the information above in order for us to deal with you as a prospective client, customer or service user in an efficient and effective manner.
- The legal basis for processing your data is based on your specific consent, performance of a contract, compliance with a legal obligation or our legitimate interest that we will have stated at the point the information was initially provided, therefore we will not store, process or transfer your data unless we have an appropriate lawful reason to do so.
How we use your information
- To contact you, following your enquiry, reply to any questions, suggestions, issues or complaints you have contacted us about;
- Make available our services to you;
- Take payment from you or give you a refund;
- For statistical analysis and to get feedback from you. For example, occasionally we may invite you to review a service you've used from us.
- To power our security measures and services so you can safely access our website;
- Help us understand more about you as a customer, the services you use, so we can serve you better;
- Contact you about services from us;
- Help answer your questions and solve any issues you have.
Who we might share your information with
We may share your personal data with other organisations in the following circumstances:
- If the law or a public authority says we must share the personal data;
- If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk); or
- From time to time, employ the services of other parties for dealing with certain processes necessary for the operation of the Website. However, all the information we share will be collected and anonymised, so neither you nor any of your devices can be identified from it.
How we keep you updated on our products and services
We will send you relevant offers and news about our services in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you register with us, we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.
If you wish to amend your marketing preferences, you can do so by contacting us on the details at the bottom of this policy.
Your rights over your information
Rights to access your personal information
Under the Legislation, data subjects have the right to receive a copy of the personal data that the Company holds about them. Including:
- To be told by the Company whether and for what purpose personal data about them is being processed.
- To be given a description of the personal data concerned and the recipients to whom it is or may be disclosed.
- To have communicated in an intelligible form the personal data concerned, and any information available to the Company as to the source of the data.
If you wish to access a copy of any personal data being held about you, you must submit a request for this and by contacting Enterprise Exchange on the details provided below.This is sometimes termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 30 days from when your identity has been confirmed.
We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.
If you would like to exercise this right, please contact us as set out below.
Right to Correction Your Personal InformationIf any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it.
If you would like to exercise this right, please contact us as set out below.
Right to Stop or Limit Our Processing of Your DataYou have the right to object to us processing your personal information if we are not entitled to use it any more, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.
If you would like to exercise this right, please contact us as set out below.
For more information about your privacy rightsThe Information Commissioner's Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public.
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
How long we keep your information for
We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary.
Different categories of data will be retained for different periods of time, depending on legal, operational and financial requirements. Any data which the Company decides it does not need to hold for a particular period of time will be destroyed after approximately one year. Data relating to unsuccessful job applicants will only be retained for a period of one year.
Giving your reviews and sharing your thoughts
You may be able to share information through social networks like Facebook and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this, your personal information may be visible to the providers of those social networks and/or their other users. Please remember it is your responsibility to set appropriate privacy settings on your social network accounts, so you are comfortable with how your information is used and shared on them.
Security
Data security is of great importance to Enterprise Exchange and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.
We take security measures to protect your information including:
- Implementing access controls to our information technology.
- We use appropriate procedures and technical security measures (including strict encryption) to safeguard your information across all our computer systems, website and work stations.
- Data stored on memory sticks, portable hard drives or other removable storage media are kept in locked filing cabinets when not in use.
- Data held on computers is also stored confidentially by means of password protection, encryption or coding and again only approved associates, directors, employees, clients or suppliers have access to that data. The Company has cloud back-up procedures to ensure that data on computers cannot be accidentally lost or destroyed.
How to contact us
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:
By email: info@enterpriseexchange.org.uk
By post: 87 London Road, Cowplain, Waterlooville PO8 8XB
Thank you for taking the time to read our Privacy Policy.
Enterprise Exchange
This Policy was last updated on 13th March 2019
V2.0