Inverarity Morton GDPR Statement

Inverarity Morton GDPR Statement

PRIVACY NOTICE
William Morton Limited t/a Inverarity Morton is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
Categories of personal data
The personal data we collect about you includes:
• Name
• Address
• email address;
• phone numbers; and
• we may also process bank details for the purposes of taking payment.
This data is processed for the following purposes and on the stated lawful basis:
• Name, address and contact information is processed for the purpose of fulfilling any contract we have entered with you to provide goods or services. We will also use this information with your consent to send you information about promotional offers. You can withdraw consent for this purpose at any time by contacting us or selecting the option to unsubscribe which is given in all of our emails.
• Bank details are processed only on the basis of fulfilling a contract entered into with you for the purpose of taking payment for services we have provided.
Transfers to third parties/third countries
Your personal data will not be transferred to any third parties without your consent, to allow us to fulfil any contract we have with you or for any other legitimate interest which we have.
Your data will not be transferred outside the European Economic Area.
Retention period
Any bank details provided for taking payment will not be retained by us.
Your name, address and contact information will be retained as long as we have your consent to do so, to allow us to fulfil any contract we have with you or for any other legitimate interest which we have. If you do not consent to us processing this data for the purposes of sending promotional material, it will be erased immediately and only processed to the extent necessary to record your withdrawal of consent.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to another party.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us in writing.
Right to withdraw consent
Where you have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that processing at any time. To withdraw your consent, please contact us or select the option to unsubscribe from communications sent by us. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Right to lodge a complaint
If you are dissatisfied with how your personal data has been processed, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.