Privacy Notice

Privacy, Protection and Security Limited provide specialist Consultancy and Training on the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, General Data Protection Regulation (GDPR),  Privacy and Electronic Communications Regulations  (PECR) and additional, associated regulations. 

Privacy, Protection and Security Limited  also provides specialist Consultancy and Implementation of Cyber Essentials, Cyber Essentials Plus and ISO 27001 Security standards.

Our registration number at the Information Commissioner’s Office (ICO) is ZA511980.

If you have any questions regarding our privacy notice or our wider data protection policies, then please do not hesitate to contact us at the details below.

Privacy, Protection and Security Limited,

100 Dormanside Road,

Glasgow,

G53 5XT

You can also contact us by email at info@privacyprotectionsecurity.com 

We are fully committed to handling your personal information in accordance with the UK General Data Protection Regulation (‘UK GDPR’), Data Protection Act 2018 (DPA 2018) and any other applicable or associated legislation.

• Processed lawfully, fairly and transparently
• Collected for an explicit and legitimate purpose
• Limited to what is necessary
• Accurate
• Stored only for as long as necessary
• Secure

• Clients of Privacy Protection and Security Limited
• Prospective clients of Privacy Protection and Security Limited who have enquired about services and pricing
• Subscribers to any marketing, educational or information services provided by Privacy Protection and Security Limited
• Applicants for employment at Privacy Protection and Security Limited
• Suppliers
• Third party service providers
• Third party contractors

• Business contact details such as name, title, addresses, telephone numbers, and email addresses. 

• Contact information (may include full name, email address, home address, telephone/mobile phone number)
• CV and cover letter
• Photographic identification
• Proof of address
• Qualifications
• Proof of Qualifications
• Employment history
• Ethnicity
• Disability details
• Proof of National Insurance
• Visa/residency documents
• References
• Disclosure Scotland
• Emergency contact information (may include full name, email address, home address, telephone/mobile phone number)
• Bank account details
• P45 and tax information

• Supplier company name
• Supplier contact name
• Supplier contact phone number
• Supplier email address 
• Supplier bank details

• Contact information (may include full name, email address, home address, telephone/mobile phone number)
• IP address

• Contract – Where we have entered into a contract with you, or you have requested us to do something prior to entering into a contract
• Legitimate Interest – Where we have a legitimate interest that is not outweighed by the rights of you, the data subject
• Legal Obligation – Where we are required to comply with a legal obligation
• Consent – Where we have previously obtained your consent

• Public Task – To perform a specific task in the public interest that is set out in law
• Vital Interest – To process the personal data to protect someone’s life

• To communicate with potential and established clients
• Arranging appointments with potential and established clients 
• Providing services to potential and established clients
• Satisfying obligations imposed upon us either by the law or by our regulator
• Recruitment
• Marketing
• Sales

• Contact or enquiry forms on our website
• Cookies via our website
• Directly from you over the telephone, via email or when discussing any of our services
• Email marketing sign-up forms

• Necessary cookies
• Performance cookies
• Functionality cookies
• Targeting/advertising cookies

For more information, please see UK Cookie Guide and www.allaboutcookies.org.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. 

In addition, we only give access to your personal information to those employees, agents, contractors and other third parties who have an express need.

There are further procedures in place to deal with any suspected data security breach and we will notify you, and any applicable regulator, of a suspected breach, where we are legally required to do so.

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

This will depend on:

• the amount, nature, and sensitivity of the personal data
• the potential risk of harm from unauthorised use or disclosure of your personal data
• the purposes for which we process it
• whether we can achieve those purposes in other ways.

With regards to your personal data, you have:

• Your right of access - You have the right to ask us for copies of your personal information. 
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

To make any of these requests or to ask us to transfer a copy of your personal information to another party, contact the Privacy, Protection and Security Limited at info@privacyprotectionsecurity.com

You will not have to pay a fee to access your personal information or to exercise any of the other rights. However, if your request for access is clearly unfounded or excessive we may:

• charge a reasonable fee
• refuse the request.

In some cases we will need some information to confirm your identity. This is to ensure that your personal information is not disclosed to someone who has no right to access it.

The data controller for your personal data is Privacy, Protection and Security Limited

If you have any questions about this privacy notice, you should contact Privacy, Protection and Security Limited at info@privacyprotectionsecurity.com 

If you have any complaints, In the first instance, we would request that you contact us directly, or you can email our Data Protection Officer, Stephen Sarsfield, on info@privacyprotectionsecurity.com 

The ICO has a sample letter (https://ico.org.uk/your-data-matters/raising-concerns) that you can use for this, however, we will also be happy to discuss by email or letter to the addresses provided below. 

Privacy, Protection and Security Limited,

100 Dormanside Road,

Glasgow,

G53 5XT

info@privacyprotectionsecurity.com

If you are unhappy with how we deal with your complaint, you can then address it directly to the ICO, who is an independent regulator set up to uphold information rights.

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone

0303 123 1113

Textphone

01625 545 860

ICO website: https://www.ico.org.uk 

We keep our Privacy Notice under review and will place notice of any updates on this website. This Privacy Notice was last updated in January 2022.