We also need to explain what our relationship is with respect to your personal information.
We may collect personal information about you when you visit our site.
Please read the following carefully to understand our views and practices regarding your personal information.
For convenience, we have divided our data protection policies into three separate pages:
This page explains generally how we collect, receive, use, store, and protect your personal information.
- Our Retention Policy
You can find out how long we may hold onto certain types of personal information here.
Because we are a business located in Scotland the personal information that you give us, or we receive or collect about you will be held under Scottish data protection legislation (“the legislation”).
The legislation requires that we tell you whether we are a data processor or a data controller for your personal information.
Where we collect personal information about you through your interactions with our site in general, for example, by collecting your IP address or placing cookies on your computer, then we will be the data controller for that personal information only. As the data controller in respect of this information we can determine the purposes for which and the manner in which that personal information is, or may be, processed by us.
HOW YOU CONSENT TO US COLLECTING YOUR PERSONAL INFORMATION
If you are visiting our site for the first time you will be prompted to read and accept our Acceptable Use. Privacy, Cookie, and Retention Policies before you can continue.
If you are generally browsing our site and you do not click or select the “I Agree” button on the pop-up then we will not collect personal information about you subject to the caveat below.
Caveat: Even if you do not click or select “I Agree” there is still some information that we may automatically collect about you – this normally isn’t personal information but rather technical information used to connect your computer, tablet, or mobile device to the Internet, your browser type and version, the time when you visit our site, your time zone setting, certain browser plug-in types and versions, operating system and platform. This type of information is sent by you to our site automatically and it isn’t something that we can prevent. We only use this information to administer our site including troubleshooting, load testing, traffic throughput, data analysis, performance testing, and for anonymised statistical purposes that we only use internally.
INFORMATION WE MAY COLLECT
We may process the following personal information about you:
Information you give to us:
You may give us personal information about you by filling in forms on our site This includes information you may provide to us when you use our site, subscribe to our services, search our site, or when you report a problem with our site.
The information you give us may include:
Telephone and/or mobile number;
Government-issued identification; and
Photographs or videos.
If you provide us with personal information about anyone other than you, then you must ensure that you have obtained the relevant consent for us to process and store that personal information as a data processor and we do not accept responsibility or liability for third party personal information.
Information we collect about you:
When you visit our site we may collect information about you, including which pages you have visited (including date and time) which services and pages you viewed or searched for, page response times, download errors, files downloaded, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from a page
The purpose of this information is to allow us to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, improving our site to ensure that content is presented in the most effective manner for you and for your device, and as part of our efforts to keep our site safe and secure.
HOW WE MAY USE YOUR PERSONAL INFORMATION
When you give us, or we receive, personal information about you then we may use it to ensure that content from our site is presented in the most effective manner for you and for your device.
Our lawful basis for processing your data
The lawful basis for processing are set out in Article 6 of the GDPR. We will only process your data or communicate with you if at least one of these apply:
(a) Consent: you have given clear consent to process your personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
WHERE WE STORE YOUR PERSONAL INFORMATION
The personal information that we collect from you or receive from third parties will be stored within the United Kingdom. To help us analyse visitors to this website we use Google Analytics, Hotjar, and Freshworks Analytics. Subject to Google Analytics as detailed below, we will not knowingly transfer your personal information outside of the European Economic Area.
This information may be transferred outside of the European Economic Area in accordance with Google’s policies. You can read more about Google’s overview of privacy and safeguarding your data at https://support.google.com/analytics/answer/6004245.
All personal information you provide to us or we receive about you is stored on our secure servers. Where practical and reasonable we encrypt communication between our site and you using Secure Socket Layer/Transport Layer Security technology. We may also use encryption at rest and other technologies where reasonable to secure personal information.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password strictly confidential. We ask you not to share passwords, keys or pin numbers with anyone.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your data transmitted from our site and any transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to try to prevent unauthorised access and we apply a “Privacy by Design” approach to our personal information handling and assessment procedures.
Where we hold personal information about you as a data controller then you have a right to ask us not to process your personal information.
ACCESS TO INFORMATION
The legislation gives you the right to access a copy of the personal information that we hold about you.
We cannot release your personal information to anyone. We can only release your personal information to you or an authorised third party who can demonstrate that you consented to have your personal information released – this is a legal requirement. Therefore, it is important for us to ensure that we confirm your identity before we can release any personal information.
We may use your e-mail address, collected as part of Collected Data, to send our newsletters, product updates and/or marketing communications about our products and services. If you no longer wish to receive these communications, you can opt-out by following the instructions contained in the e-mails you receive or by contacting us at email@example.com.
WHAT IF I DO NOT CONSENT OR WITHDRAW CONSENT?
If you do not consent to us collecting your personal information then we cannot guarantee the full functionality of our site and cannot be held responsible or liable to you for any reduction or restriction in access to our site or any of our other services.
We will not knowingly place links to external sites. However, it may be that you come across links or references to other sites in correspondence on our site. If you follow a link to any of these sites, please note that these sites have their own privacy and cookie policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these sites.
HOW LONG WILL YOU HOLD ONTO MY PERSONAL INFORMATION?
Depending on how you engage with us or the types of services that we provide you it may be necessary for us to store your personal information for shorter or longer periods of time.
Where we are a data controller, we will hold onto your personal information in accordance with our Retention Policy which can be found here.
Last Updated August 2020
CONTACT INFORMATION AND WHO WE ARE
This site is operated by THE TURNKEY GROUP LIMITED. We are registered in Scotland as a limited liability company. Our registered number is SC196063 and our registered office is at Thornton Lodge, East Kilbride Road, Glasgow, G76 9HW, United Kingdom.
To contact us, please email firstname.lastname@example.org or call us on +44 (0)141 644 5444.