Types of data we collect
When someone visits this website we use Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out, for example, which pages are being visited. This information is processed in a way that does not identify anyone. We do not make, nor do we allow Google to make, any attempt to identify those people visiting our website.
JSPennington Limited acts as a data controller and has contractual reasons for obtaining and keeping personal data you provide to us as a representative of your company. We only collect basic personal data about you such as email address, address, phone number, and bank details or other payment information. This information is provided by you and does not include any special types of information. We need to know this basic personal data in order to fulfil our business contract with you. We collect this data in the course of our working arrangement.
Why do we need this personal data? In order to deliver our services to you. You will have explicitly given your consent to sharing this information. We will only use or process your data when there is a legitimate reason to do so. For example, this data is used to contact you about our services, to deliver those services effectively, and to maintain our accounts and records.
Your data is stored securely at all times. Our computers are password protected, any hard copies of data is stored in a locked building and mobile devices with access to data require PINs to access. We typically retain this data for a period of no longer than 12 months, after which time the data is securely destroyed. Under UK law, your basic personal data (name, address, contact details) must be retained for six years for tax purposes after which time it will be destroyed. Hard copies of data are shredded and electronic data is deleted.
Access to your personal information
You may view, amend or delete any personal information that we hold. Email your request to our data protection officer John Pennington at firstname.lastname@example.org.
The GDPR stipulates that you have eight fundamental rights regarding your personal data. These are as follows:
- The right to request, in writing, a copy of your personal data we hold
- The right to amend the personal data we hold on you at any time
- The right to request that we delete your personal data once we no longer need it
- The right to ask that we share your personal data with a third party
- The right to withdraw consent for us to process your personal data at any time
- In case of a dispute related to accuracy or processing of your personal data, the right to request restriction of any further processing
- The right to object – where applicable – to the processing of your personal data
- The right to complain about how we handle your personal You can do so by contacting the Information Commissioners Office – https://ico.org.uk/concerns