The type of personal information we collect

We currently collect and process the following information:

• Personal identifiers, contacts and characteristics (for example, name and contact details) which would allow us to contact you

• Digital signatures such as IP address, agent type, operating system

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• Arranging appointments or submitting enquiries via our website

• Improving our site by monitoring usage

• To provide you with information about our services, if you want it

• To understand your preferences so we can tailor your experience accordingly

• To transact with you if you are using our services

We also receive personal information indirectly, from the following sources in the following scenarios:

If you are a company director, we may process data relating to your directorship that is available in the public domain. This allows us to provide our services to you based on accurate information.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

a) Your consent. You are able to remove your consent at any time. You can do this by contacting dataprotection@creavo.co.uk

b) We have a vital interest.

c) We have a legitimate interest.

How we store your personal information

Your information is securely stored in GDPR-compliant datacentres and encrypted at rest. We have several industry-standard security measures in place to try and ensure the safety of any information we have in our possession or control.

Any payment transactions are always encrypted.

Unless we have your consent, we never share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.

We keep personally identifiable information indefinitely if you are transacting with us and as long as the information is relevant. Once the information is no longer needed, we may retain this for up to 2 years. We will then dispose of your information by erasing it permanently from our digital storage.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.

• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at dataprotection@creavo.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at dataprotection@creavo.co.uk

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

‘Creavo’ is a trading name of CREAVO LIMITED, a company registered in England and Wales under registration number 13142583.