Background

The General Data Protection Regulation, or GDPR, is a European privacy law that went into effect May 25, 2018. The GDPR regulates how individuals and organizations may collect, use, and retain personal data, It is incorporated into UK law (particularly relevant since Brexit). The Information Commissioners Office (ICO) is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

What’s considered personal data?

Under the GDPR, personal data is any information that can reasonably identify a specific living person, either alone or with other information. This broad definition includes traditional personal data—like dates of birth, names, physical addresses, email addresses—and location data, biometric data, financial information, and more.

This Policy explains how we collect, store, and process personal data in the provision of services to our clients and users of our website. We take this seriously. If you have questions please ask.

We are

ComplyCraft Consulting Ltd a company registered in England and Wales. Our Company Number is 13440030. Our Registered Office Address is Kemp House 152 - 160 City Road London EC1V 2NX.

Contact use on enquiries@complycraftconsulting.com if you have any questions or have any concerns with how we use your data.

What we collect

We may collect, store, and use information about you in the course of promoting and providing our services. The information which we collect relates to:

• your name and job title and role

• your contact information including your email address and place of business address

• our relationship with you.

We may obtain further information if we are making submissions to the UK regulatory authorities (date of birth, addresses for example). We do not collect and store any special categories of personal data. This includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic or biometric data.

We act as the processor and controller of this information.

How

Typically we will collect information from you when you contact us or provide data in order for us to provide our services. We collect information if you agree to use our service and when we provide services typically vie e-mail or documents you send us or over the phone.

Through this website if you provide contact information.

Our legal basis for collecting and using this information

We use data for specific purposes. For example you provide us with consent to contact you if you request a call via our website. Where we have a contract to provide services we will collect and use the information necessary to fulfil our services.

We may decide we have a legitimate interest in processing your data. And we think your interests and fundamental rights do not override those interests. We do this because we genuinely think this is relevant for our business and you would be interested in our services.

How data is processed

Personal data is processed both manually and electronically. We permit only our employees and certain third-Party processors (such as SquareSpace who operate our website and Microsoft who provide IT services) to have access to your information. We have contracts in place and all parties have terms and conditions to comply with UK Data Protection law. Other agencies such as regulatory bodies and law enforcement may require us to share data we hold to comply with the law.

Telling you about our services

We can use your personal information to contact you where we consider that we have a ‘legitimate interest’ to do so. As required by law (and it is just good practice) we do assess this and make a judgement of our interests and whether it is appropriate to use your data in this way. As set our below you can tell us to stop doing this at any time.

Other websites

Our website may contain links to other websites. Our Policy only applies to our website. You should read the Privacy policies of other websites to understand how they comply with the law.

Protecting your data

We have put in place appropriate security measures and policies and procedures to protect your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.

Your rights and exercising those rights

Where processing of your personal data is based on consent, you have the right to withdraw your consent at any time. If you do withdraw your consent we will stop processing your personal data, unless there is another lawful basis we can rely on – in which case, we will let you know.

Where processing of your personal data is based on our legitimate interests you can object to this at any time.

Depending on the circumstances you may have the right to:

• access your personal data and to be provided with certain information in relation to it, such as the purpose for which it is processed, the recipients or categories of recipient to whom it is disclosed and the period for which it will be stored;

• require us to correct any inaccuracies in your personal data without undue delay;

• require us to erase your personal data;

• require us to restrict processing of your personal data;

• receive the personal data which you have provided to us, in a machine readable format, where we are processing it on the basis of your consent or because it is necessary for your contract with us and where the processing is automated; and

• object to a decision that we make which is based solely on automated processing of your personal data.

Contact us if you would like to exercise these rights or have any concerns.

Cookies and similar technologies

A cookie (or such similar technology) is a text file containing small amounts of information that may be stored on your computer or mobile device ("terminal equipment”). For example, such technologies can be used by websites to:
Identify visitors

• Enable the website to function efficiently

• Personalize content

• Permit online behavioral target advertising

Similar technologies include pixels, tags, local storage, and device fingerprinting.

We only use necessary cookies because they allow visitors to navigate and use key features on this site. Other cookies (such as collecting IP addresses) are turned off; we do not currently collecting analytical information,