PRIVACY POLICY
Your privacy and preferences are important to Houlden.
We have outlined below the terms and conditions that govern your use of the Houlden website and our associated products and services.
Please read them carefully – thank you.
THE KIND OF INFORMATION WE HOLD ABOUT YOU
Personal data means any information about an individual which allows that individual to be identified.
We collect, store, and use the following categories of personal data:
- Personal contact details such as name, title, addresses, telephone numbers and personal email addresses
- Location of employment or workplace
- Photographs
DATA SHARING
-How is your personal information collected?
We typically collect personal information about Houlden Members, Suppliers and Partners through the application and agreement process.
-How secure is my information with third party service providers?
All our third-party service providers are required to take appropriate security measures to protect your personal information. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
-Data Security
We have put in place measures to protect the security of your information. Details of these measures are available upon request.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, and disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your information on our instructions, and they are subject to a duty of confidentiality.
DATA RETENTION
-How long will we keep your information?
We will only retain your personal information for as long as necessary to fulfil the purposes we collect it for, including for the purposes of satisfying any legal, insurance, accounting or reporting requirements. Details of retention periods for different aspects of your personal information are available in our retention policy which is available from the Chief Operations Officer, Denise McLaughlin. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk or harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, insurance and compliance requirements.
In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer a member or supplier of the company we will retain and securely destroy your personal information in accordance with our data retention policy if we no longer have a legitimate reason for retaining it.
RIGHTS OF ACCESS, CORRECTION, ERASURE AND RESTRICTION: YOUR DUTY TO INFORM US OF CHANGES
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
Your rights in connection with personal information.
Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a data subject access request). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove your personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another party.
If you want to review, verify, or correct or request erasure of your personal information, object to the processing of your personal data or request that we transfer a copy of your personal information to another party, please contact our Chief Operations Officer, Denise McLaughlin, in writing.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure you right to access the information (or to exercise any of your other rights). This is another appropriate security to measure to ensure that personal information is not disclosed to any person who has no right to receive it.
RIGHT TO WITHDRAW CONSENT
In the limited circumstances where you have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our Chief Operations Officer, Denise McLaughlin. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agree to, unless we have another legitimate basis for doing so in law.
DATA BREACHES
We are required under the GDPR to notify you without undue delay of any data breach which is likely to result in a high risk to your rights and freedoms.
YOUR RIGHT TO COMPLAIN
If you have a complaint about the way in which your data has been handled, please contact Office Manager. You also have the right, in certain circumstances, to report concerns about data management to the Information Commissioner’s Office and information is available at www.ico.org.uk.
CHANGES TO THIS PRIVACY NOTICE
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
If you have any questions about this privacy notice, please contact our Chief Operations Officer, Denise McLaughlin: denise.mclaughlin@houldenjewellers.com.
