Client Data Privacy Notice
Introduction
Grayson Design & Print Limited (“we” or “us”) holds personal data to provide its services.
This Client Data Privacy Notice details the personal data Grayson Design & Print Ltd may retain, process and share with third parties relating to your business and its employees. Grayson Design & Print Ltd is committed to ensuring that your information is secure, accurate and relevant.
We may collect personal identification data from clients and their employees in a variety of ways, including, but not limited to; when clients and their employees visit our website; register on the website; place an order; set up an account; subscribe to the newsletter; respond to a survey; fill out a form and in connection with other activities, services, features or resources we make available to our clients and their employees.
To prevent unauthorised access or disclosure, we have implemented suitable physical, electronic and managerial procedures to safeguard and secure the personal data we hold.
We respect the privacy rights of individuals and are committed to handling personal information responsibly; in accordance with applicable law, in relation to the creation and access of user accounts, administration, the methods of processing and service access.
Types of personal information we collect.
During your engagement with Grayson Design & Print Ltd or during negotiations with Grayson Design & Print Ltd we may process personal information about you, your employees and other individuals whose personal information has been provided to us. The data we process will depend on the services we provide your company.
The types of personal information we may process include:
- Contact details – such as home and business addresses, telephone/e-mail addresses.
- Employee details – such as job title/position, telephone/e-mail addresses, office location.
- Financial information – such as banking details, tax information and stock.
Generally, we try not to collect or process any sensitive personal data relating to clients
and their employees, unless authorised by law or where necessary to comply with
applicable laws.
Types of personal information we collect from visitors to our website
As is common with other websites, log files are stored on the web server saving details such as the visitor’s IP address, browser type, referring page and time of visit. This information is not used to track individual visitors to this website.
Cookies may be used to remember visitor preferences when interacting with the website.
What Are Cookies?
Cookies are small digital signature files that are stored by your web browser that allow your preferences to be recorded when visiting the website. They may also be used to track your return visits to the website.
Where registration is required, the visitor’s e-mail and username will be stored on the server.
How The Information Is Used
Cookies may be used to enhance the visitor’s experience when using the website and/or to enable a shopping basket system or features such as expanding menus to be available. These session cookies expire after a browser session so would not be stored long term. For this reason session cookies may sometimes be considered less privacy intrusive than persistent cookies. They are sometimes known as benign cookies.
Opting Out of Cookies from Our Website
You may be able to block cookies via your browser settings but this may prevent your access to certain features on the website.
Purposes for processing personal information
Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which it has been collected.
We will only collect personal information from you when we have your consent to do so, when we need the personal information to perform a contract with you or your employees/employer (i.e. provision of services, production of goods), or when the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.
Who we share personal information with
We take care to allow access to personal information only to those who require such access to perform their tasks and duties in relation to the provision of our services and to third parties who have a legitimate purpose for accessing it to support these purposes. Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the information is used in a manner consistent with this notice and that the security and confidentiality of the information is maintained.
We do not sell, trade or rent personal identification information to third party companies under any circumstances.
Transfers to third-party service providers
We make certain personal information available to third parties who provide services to us. We do so on a “need to know basis” with appropriate security measures in place – this is done in accordance with applicable data privacy law.
Contractual purposes
We use this personal information when it is necessary for the provision of our services;
in-line with the purposes agreed upon between the client and Grayson Design & Print Ltd.
Transfers to other third parties
We may also disclose personal information to third parties on other lawful grounds, including:
To comply with our legal obligations; including where necessary to abide by law; regulation or contract; or to respond to a court order; administrative or judicial process; including but not limited to; a subpoena; government audit or search warrant and in response to lawful requests by public authorities (including for national security / law enforcement purposes).
How we protect your data
We adopt appropriate data collection, storage, processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information and data.
Our website operates on a secure linux server which is updated with any operating system updates or security patches when required.
We have policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed and is not accessed without authorization. These policies also ensure that data is only accessed or used for specific legal purposes and to provide services agreed upon between Grayson Design & Print Ltd and the client.
Grayson Design & Print Ltd will make all clients aware of any breaches in security/systems that may result in a loss of data/personal information as soon as we are aware of them.
We will work alongside clients should this happen until any potential issues/breaches have been resolved and rectified to the clients satisfaction.
Data retention periods
Personal information will be stored in accordance with applicable laws and kept for as long as needed to carry out the purposes described in this notice or as otherwise required by applicable law. Generally, this means your personal information will be retained until the termination of account, or working relationship with Grayson Design & Print Ltd plus a reasonable period of time thereafter to respond to work-related inquiries or to deal with any legal matters.
Data privacy rights
The following rights are available under applicable data protection law:
Access, correct, update or request deletion of personal information.
Object to processing of personal information; ask us to restrict processing of personal information or request portability of personal information.
If we have collected and processed personal information using a person’s consent, then this can be withdrawn at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to withdrawal, nor will it affect processing of personal information conducted in reliance on lawful processing grounds other than consent.
You have the right to complain to a data protection authority about our collection and use of personal information. For more information, please contact your local data protection authority. In the United Kingdom, the data protection authority is the Information Commissioner’s Office whose website is: https://ico.org.uk/
Assignment Clause
If the business is sold at any point, the new owner will have access to and be the new possessor
of any data collected by Grayson Design & Print Ltd up until this point in time. The new owner will be legally required to use the data for the same purposes outlined in this policy and for no other purposes unless otherwise approved by the person/persons/business the data relates and belongs to.
Updates to this Policy
We reserve the right to update this privacy policy at any time. We encourage clients to frequently check the website for any changes to this policy and to stay informed about how we are helping to protect the personal information we collect.
Unsubscribing from mailing list
If you have subscribed to one of our email services / mailing lists, you may unsubscribe by following the instructions which are included within the e-mails that you receive.
Alternatively, you can contact the office directly by telephone or email to request that you be removed from marketing/mailing lists.
e-mail: ashley@graysonprint.com Tel: 01543 876 962
Your Acceptance Of These Terms
By using Grayson Design & Print Ltd’s services you signify your acceptance of this policy and terms of service. Your continued use of our services and website following the posting of changes to this policy will be deemed as your acceptance of these changes.