Optimal People & Business Services Ltd uses the following cookies
Purposes of Processing
Our legitimate interest for collecting and processing your information is in order to provide, understand, and improve our Services. We also use your data to keep you informed of changes to the website or documents on the website that will affect you.
Our lawful basis for processing the data is that the processing is necessary for our legitimate business interests or the legitimate interests of a third party.
We use data held about you in the following ways: –
- To ensure that content from our site is presented in the most effective manner for you and your systems
- To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes
- To carry out our obligations arising from any contracts entered into between you and us
- To allow you to participate in interactive features of our service, when you choose to do so
- To notify you about changes to our service
Storage and Transfer of Personal Data
We understand our obligation to ensure that appropriate technical and organisations measures are taken to prevent unauthorised or unlawful processing, loss, damage or destruction of personal data. Therefore, we will ensure that relevant personal data is in a secure location, only accessed by authorised individuals, only processed by authorised individuals and cannot be lost, damaged or destroyed.
We confirm that: –
- All information you provide to us is stored on secure servers.
- Any payment transactions will be encrypted, and the data held securely by our payment provider Paypal & WorldPay.
- Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. (We ask you not to share a password with anyone).
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, in line with GDPR, as set out above.
The data that we collect from you will not be transferred to, and stored at, a destination outside the European Economic Area (“EEA”).
We engage service providers to perform functions and provide services to us e.g. to fulfil your order, to process payments, to help us understand and improve the use of our Services, such as Google Analytics. We may share your private personal information with such service providers subject to obligations consistent with this privacy notice and any other appropriate confidentiality and security measures, and on the condition that the third parties use your private personal data only on our behalf and in line with our instructions.
By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice, as outlined above. We understand that under the General Data Protection Regulation (GDPR) which applies from 25th May 2018, any organisations who process data for EU (“European Union”) data subjects have to act in accordance with the GDPR even if they are located outside of the EU. This means they have to secure, hold, process etc. data properly in line with the legislation.
Disclosure of your information
We may disclose your personal information to third parties: –
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction
- If you have been referred to us through one of our partnerships, we may provide our partners with statistical data about your usage
Retention Periods for Personal Data
We understand our obligation not to keep data for any longer than is necessary for the purpose it was obtained. We will keep the data referred to in this Privacy Notice for 12 months. After this we will securely destroy it.
Objections to Processing
You have the right to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at firstname.lastname@example.org.
Access to information, Withdrawal of Consent, Rectification of Data & Right of Erasure
You have the right to:
- Access information held about you. Your right of access can be exercised by raising a ‘Subject Access Request’
- At any time, withdraw your consent to us holding data about you or to having information sent to you
- Request for your data to be rectified. Where you identify that your personal data is incorrect, or incomplete, you can request correction, deletion, or modification of your personal data
- Request that your data is erased in certain circumstances
If you wish to exercise any of the above rights, please send an email to email@example.com, or write to Optimal People & Business Services Ltd, Lower Godley, 312 Oldham Road, Rishworth, HX6 4QG requesting this, and we will advise you accordingly. We will follow a reasonable process set out under GDPR including advising you of our decision, and any recourse you may have to complain.
If you have shared any information through our services, you may wish to allow your data to be transferred to another Organisation either by you receiving the data and transferring it, or by the data being transferred directly.
This right to data portability only applies to data that you have provided to us, where the data processing is based either on your consent or on the basis of ours, or others, legitimate business interests and where the processing is carried out by automated means, and it will only be transferred where it is technically feasible to do so. If you wish to do this, please send an email to firstname.lastname@example.org address requesting this, and we will advise you accordingly.
Following a discovery of any data breach (when personal data allowing an individual to be identified is processed without authorisation, and which may result in its security being compromised), consideration will be made regarding whether the matter needs to be reported to the Information Commissioner’s Office (ICO) and whether individuals who are potentially affected need to be informed.
Right to Complain to Supervisory Authority
If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority. The Information Commissioner’s Officer (ICO) is the UK’s independent body set up to uphold information rights and you can find out further information about them by going to https://ico.org.uk/
Changes to our Privacy Notice
Any changes we may make to this document in the future will be posted on this page and, where appropriate, notified to you by e-mail. However, we advise that you check this page regularly to keep up to date with any necessary changes.
This notice was last updated on 24/5/2018