What type of information we have; We currently collect and process the following information:
Personal identifiers, contacts and characteristics (for example, name and contact details)
How we get the information and why we have it; Most of the personal information we process is provided to us directly by you if you contact us for one of the following reasons:
To enquire about any of our services that we provide
To speak to us regarding a query you may have
We also receive personal information indirectly, from the following sources in the following scenarios:
Other food safety consultant colleagues, either by way of phone call, text message or by e-mail
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are: (a) Your consent. You are able to remove your consent at any time. You can do this by contacting us using our contact details above (b) We have a contractual obligation (c) We have a legal obligation (d) We have a legitimate interest
What we do with the information we have We use the information that you have given us in order to help prepare a quotation for possible services or to use your address to find your premises if site call(s) are required. We may also hold your contact details on a waiting list for courses, if you have asked us to do so. This information may be shared with our training provider Highfield Qualifications. Should you enrol on an e-learning course, Highfield will collect your personal data as a Data Controller in their role as an online training course supplier. The personal data is usually limited to the details required for them to undertake the basic functions of an online training course supplier. These details will include learner’s name, training course(s) details and may also include date of birth and gender. To deliver future services such as training confirmation and certificate re-prints, this basic learner-level data will be held by Highfield indefinitely. Full details are available at www.highfieldelearning.com/privacy-policy.
How we store your information Your information is securely stored on the company’s IT systems and a secure cloud-based system. We keep personal information digitally for as long as the businesses engage and shall be disposed of securely two years after conclusion of our service.
Your data protection rights Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information
Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances
Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances
Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances
Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us using the contact details above if you wish to make a request. How to complain You can also complain to the ICO if you are unhappy with how we have used your data, please see their details below; The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline number: 0303 123 1113
