Privacy Policy & GDPR - Yorkshire Dampcourse

Privacy Policy & GDPR Policy

Introduction

Catrake Limited is responsible for the processing of any personal information you provide to this site.

We take the privacy of our website users seriously. The purpose of this statement is to set out the principles governing our use of personal information we may obtain about you.

By registering your details with Catrake Limited and by using our website, or the websites of any associated companies, generally, you are indicating that you have read this Privacy Policy and understand that your personal information may be used as described below.

If you provide Catrake Limited with personal information other than through the website, you will be provided with any further explanation needed as to how it will be used.

The information we collect

In order to provide you with a range of services we may collect personal information from this website, from telephone responses, from written information sent to us and from other communications. We may for example, keep a record of your name, mailing address, email address, telephone number, preferences and any other information you volunteer to provide to us. We may supplement the information that you provide to us with information that we receive or obtain from other sources.

How we will use your information

When you provide information to us via this website we will store this data and hold it on a computer and/or in hard copy form. We will use this data to provide you with the information for which you have contacted us (e.g. to receive any special offer information via email) and for the purposes described in this statement including, where relevant, marketing, administration, development and improvement of this website.

Disclosures of your information

We may give information about you (on the understanding that such information will be kept confidential) to employees and agents of Catrake Limited to administer any accounts, products and services provided to you by Catrake Limited now or in the future. Otherwise we may disclose information about you:

Where we believe we have a duty to do so or if the law permits us to do so; and
To anyone to whom we transfer or may transfer our rights and duties under our agreement with you.

Marketing Information

Information that you provide or that is obtained by us as a result of your use of this site, will be used by us for assessment and analysis to enable us to review, develop and improve the website and the services we offer and to enable us to provide you (by email, fax, telephone or post) with information which we think may be relevant and of interest to you.

We will not provide you with such marketing information unless you consent to receiving it when you provide your information, for example, when submitting your information in an online enquiry form. If you do not want to receive such information you should tick the relevant box when submitting your information to us.

Security

We endeavour to take all reasonable steps to protect your personal information but cannot guarantee the security of any data you disclose online. Please note that email is not a secure medium, and should not be used to send confidential or sensitive information. You accept the inherent security risks of providing information and dealing online over the Internet and will not hold us responsible for any breach of security (save to the extent that nothing in this Policy shall exclude or limit liability for death, personal injury or fraudulent misrepresentation resulting from our negligence or that of our servants, agents, or employees or any other liability which is prohibited from being excluded by law).

Linked sites

Please be aware that our site may link to other websites which may be accessed through our site. We are not responsible for the data protection policies or procedures or the content of these linked websites.

Unsubscribe

You may unsubscribe or opt-out of services at any time. You will be provided with an opportunity to do so each time we contact you with marketing information by post or email. Alternatively you may opt out of our marketing lists at any time:-

By sending via e-mail to [email protected]
Or by sending by post to this address: Unit F2, WIRA Business Park, Ring Road, West Park, Leeds, LS16 6EB, UK

Notification of Changes

We may occasionally modify our Privacy Policy. When this happens we will publish details on this web page (see date at bottom of page). We will not however significantly change how we use information you have already given to us without your prior agreement.

Your rights to access personal information

You have the right to receive information about the personal data (as defined in the Data Protection Act 1998) we maintain on you upon written request and payment of a fee (which is currently £10.00). If you are concerned that any of the information we hold on you is incorrect please contact us via any of the channels set out below.

Contact us

If you have any comments or queries in connection with our Privacy Policy, please send an email at [email protected] or call 0113 230 5515 , or write to: Catrake Ltd, Unit F2, WIRA Business Park, Ring Road, West Park, Leeds, LS16 6EB, UK

GDPR Policy

BACKGROUND:

Catrake Ltd t/a Yorkshire Dampcourse understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our customers, suppliers and employees and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

Information About Us

Catrake Ltd t/a Yorkshire Dampcourse.

Limited Company

registered in England under company number 02634391.

Registered address: Unit F2 Wira Business Park, Ring Road, West Park, LS16 6EB.

VAT number: 545721540.

Data Protection Officer: Gemma Sellers.

Email address: [email protected].

Telephone number: 0113 2305515.

Postal Address: Unit F2 Wira Business Park, Ring Road, West Park, LS16

6EB.

We are a member of The Property Care Association.

What Does This Notice Cover?

This Privacy Information explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.

What is Personal Data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

The personal data that we use is set out in Part 5, below.

What Are My Rights?

Under the GDPR, you have the following rights, which we will always work to uphold:

a) The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in Part 11.

b) The right to access the personal data we hold about you. Part 10 will tell you how to do this.

c) The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the details in Part 11 to find out more.

d) The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have. Please contact us using the details in Part 11 to find out more.

e) The right to restrict (i.e. prevent) the processing of your personal data.

f) The right to object to us using your personal data for a particular purpose or purposes.

g) The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.

h) Rights relating to automated decision-making and profiling. We do not use your personal data in this way.

For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in Part 11.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

What Personal Data Do You Collect?

We may collect some or all of the following personal data (this may vary according to your relationship with us; for employees please see the separate Employee Data Protection Policy):

Name;
Date of birth;
Gender;
Address;
Email address;
Telephone number;
Business name;
Job title;
Payment information;
Relationships;
Health and Safety Information;

How Do You Use My Personal Data?

Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, as a legal obligation under health and safety or because it is in our legitimate business interests to use it. Your personal data may be used for one of the following purposes:

Supplying our services to you. Your personal details are required in order for us to enter into a contract with you.
Communicating with you. This may include responding to emails or calls from you.
Making/receiving payments.

With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email, telephone, text message or post with information, news, and offers on our services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.

How Long Will You Keep My Personal Data?

We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. We will hold your information for as long as it is necessary to comply with our statutory and contractual obligations and in compliance with our legitimate business interests as a data controller.

Some categories of documents we hold will need to be retained longer than others. How long we retain different categories of personal information will be based on the purpose for which they are processed and our statutory and contractual obligations. Other information will be held for no longer than is necessary to protect our legitimate business interests as a data controller. For more information please refer to our GDPR audit record.

How and Where Do You Store or Transfer My Personal Data?

We will only store or transfer your personal data in the UK. This means that it will be fully protected under the GDPR.

Do You Share My Personal Data?

We will not share any of your personal data with any third parties for any purposes, subject to one important exception.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

How Can I Access My Personal Data?

If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.

All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 11.

There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your subject access request within one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.

How Do I Contact You?

To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of Gemma Sellers):

Email address: [email protected]