Privacy Notice – Stable Design Limited
Any personal information provided to or gathered by Stable Design is controlled by Stable Design, a company registered in England & Wales under number 05997493, whose registered office and principal place of business is at North Street Farmhouse, North Street, Stoke Sub Hamdon, Somerset TA14 6QR (“we”, “us”, “our”). All references to the ‘Site’ mean our website, which is located at www.stabledesign.co.uk.
Changes to this Privacy Notice
We may change or modify this Privacy Notice at any time and we recommend that you check the latest version of this notice each time that you access the Site. A copy is also available from firstname.lastname@example.org on request.
The date of the most recent update will appear below. Any significant changes to this notice may be confirmed through direct communication with you, where we consider that such changes should specifically be brought to your attention.
This Privacy Notice was last updated on 25/05/2018
The purpose of this Notice
We are committed to protecting and maintaining your privacy; this Privacy Notice describes how we collect, process and store personal data and for what purpose.
The type of personal data we might process includes:
- Your name and job title;
- Your email address;
- Your postal address;
We are registered with the Information Commissioner’s Office, and are aware of our obligations regarding Data Protection. We are continually evaluating our systems and our policies so that the data of our clients and our employees is secure and protected, in accordance with the General Data Protection Regulations (‘GDPR’).
How we treat your data
All personally identifiable information provided to us is treated as private and confidential. We will not share it with third parties unless you have consented to this or where it is in our legitimate interests, further outlined below.
Your information will never be sold, licensed, loaned or otherwise distributed to any other organisation unless we are required to do so by law. Subject to any overriding obligation to which we are subject, you have the right to object to the processing of your personal information, by a simple request that we stop such processing.
Collection of your Personal Information
We may collect personal information in various ways, including in e-mail or written correspondence with you or to which we are copied, through our website or directly from you at meetings or events. You have a choice whether to provide any information to us, except where this is necessary to fulfil any contract – such as in relation to the provision of our services (albeit recognising that such a decision may mean that we are unable to provide our services as you expect), or where we are required to do so by applicable law or a Government agency or law enforcement.
We continuously assess and document our processing activities and update our records accordingly. Our approach seeks to ensure good data governance and compliance with our data protection obligations.
We maintain records of consent, where we rely on consent for the processing of personal data, and will ensure processing is limited or ceases where such consent is withdrawn.
Why we Process your Personal Information
We rely on the following grounds justifying our processing of personal data:
- Consent – your consent for us to do so.
- A contract or legal obligation – to fulfil our obligations under an existing contract or other legal obligation (please note in certain circumstances our right to process this information will override your right to object to us doing so).
- Legitimate interests – we may judge that we have legitimate grounds to process your personal information and where that is the case, we will balance our business interests against your rights, to ensure that the rights and interests of those individuals who interact with us are protected.
Where information is obtained through or as a result of your use of our Site, we will only use this information for the following purposes:
- to understand and appreciate your needs and requirements as a user of our site or our services generally;
- for analysis in relation to the technical specification and user experience of our site, for the purposes of developing and improving our site and the services that we provide;
- to provide relevant information about our services or those that we may offer from time to time; and
- to keep in contact with you.
We may process your information for marketing purposes (including offers, promotions and updates in relation to our services, that we believe may be of interest to you) either where you are or have been a user of our services in relation to similar goods or services previously or where you have given your explicit consent.
You have the right to opt out of receiving promotional communications at any time. To do this, you can speak to us directly or send an email to email@example.com.
We may ask you to update your preferences, depending on changes in the law or the structure or purpose of our business.
Data transmitted to us through the Site via electronic means may be intercepted before reaching us or may be accessed by unauthorised third parties, or exploited unlawfully. We do not assume any responsibility for guarding against the acts of third parties and shall not be liable for any direct, indirect or consequential losses or damages incurred or suffered as a result.
Our nominated representative, although not required for the purposes of compliance with GDPR, is James Gaskins.
Technical and Organisational Measures and Security
The protection of our clients’ personal information is important to us and we use appropriate technical and organisational measures to maintain security and protect personal information that we process from and against unauthorised or unlawful use, or accidental loss, damage or destruction. We review these measures on a regular basis to ensure that they are appropriate and sufficient.
Service Providers and Third Parties
We may on occasion have the need to transfer your data to suppliers located outside of the European Economic Area (EEA), including in the USA. We will only do so if we are satisfied that those suppliers have adequate systems in place to main your privacy and keep your data secure.
How long we Store Personal Data
We retain the data that we collect in providing our services to clients, for no longer than is necessary to fulfil its purpose, as assessed by us. After such retention periods (which may vary according to its specified purpose), data will be permanently erased or securely destroyed.
Your Rights and how to Exercise Them
You may request a copy of the information that we hold about you (known as a Subject Access Request). In addition, under the GDPR, you may exercise the following rights:
- A right of access to the information that we hold about you – as above.
- A right to have your information corrected if it is inaccurate or incomplete.
- A right to have information removed or deleted from our records and systems.
- A right to block us from processing your personal data or to limit the way(s) in which we can use it.
- A right of portability; to request that we move your personal information to someone else, in a machine- readable form.
Please contact us by email to firstname.lastname@example.org, if you wish to exercise any of your above rights or if you wish to file a complaint about our collection, processing or use of your personal information.(This may also be done via telephone or in writing to the address above.)
We aim respond to a Subject Access Request within one month from receipt.
Further information about data protection, our obligations, and your rights may be found on the website of the Information Commissioner’s Office – see www.ico.org.uk.
Right to Object to Processing
Whatever justification on which we rely, you have a right to object to our processing of your personal information. If we have a separate legal or regulatory obligation to process the information, that processing will be limited to the extent to which we need to process your information. You may confirm your objection to the extent and kinds of processing being undertaken by sending us a simple request via email to email@example.com, or in writing to the above address, updating your preferences.