Whyte Fraser & Co (“we”) as an essential part of our business, collects and manages data.
In doing so, we observe UK data protection legislation.
We act as a “Data Controller” in respect of the information processed by us. This privacy notice describes the ways in which we collect, manage, process, store and share information about you as a result of you visiting this site.
We collect information about you so that we can:
· Administer our relationship with you, provide services and respond to enquiries
· Deliver requested information to you about our services
· Ensure the billing of any services and obtain payment
· Process and respond to any complaints
· Enable us to meet our legal and other regulatory obligations imposed on us
· Audit usage of our websites.
The information that we need for these purposes is known as your “personal data”. This includes your name, home address, email address, telephone and other contact numbers and financial information. We collect this in a number of different ways. For example, you may provide this data to us directly online or over the telephone, or when corresponding with us by letter.
We may also process sensitive classes of information that includes:
· Physical or mental health details, and
· Racial or ethnic origin.
We will seek your permission if we need to record any of your sensitive personal data on our systems.
Please also be advised that when you visit this website, cookies will be used to collect information about you such as your Internet Protocol (IP) address which connects your computer or mobile device to the Internet, and information about your visit such as the pages you viewed or searched for, pages response times, download errors etc. We do this so that we can measure our website’s performance and make improvements in the future.
Cookies are also used to enhance this website’s functionality and personalisation, which includes sharing data with third party organisations. You can control this by adjusting your cookies settings.
We use the data collected from you for the specific purposes listed below. The legal basis for processing your data, and who it will be shared with, is as follows:
To administer our relationship with you, provide services and respond to enquiries. To provide enquirers support by telephone. The legal basis for processing is to meet the requirements of a contract.
To ensure the billing of any procured services by you and obtain payment. The legal basis for processing is to meet the requirements of a contract. Third party organisations with whom data is shared will be Government VAT and tax inspectors, external auditors, internal auditors.
To process and respond to complaints. The legal basis for processing is to meet a legal obligation.
To monitor and record information relating to the use of our services, to include our website. The legal basis for processing is to meet a legitimate interest in order to improve the services and experience and website for individuals. Third party organisations with whom data is shared will be web service providers and cookie providers.
Under the terms of data protection legislation, you have the following rights as a result of using this website.
Right to be informed.
This privacy notice fulfils your right to be informed about the ways in which we use your information as a result of you using this website.
Right to access.
You have the right to make a “Subject Access Request” where you ask us for a copy of any personal data that we hold about you. Except in exceptional circumstances (which we would discuss and agree with you in advance), you can obtain this information at no cost. We will send you a copy of the information within 30 days of your request.
To make a Subject Access Request, please email us at email@example.com with Subject Access Request as the subject or write to us at 7 Scott Street, Motherwell, ML1 1PN.
Right to rectification.
If any of the information that we hold about you is inaccurate, please email us at please email us at firstname.lastname@example.org with Subject Access Request as the subject or write to us at 7 Scott Street, Motherwell, ML1 1PN.
Right to be forgotten.
You can ask that we erase all personal information that we hold about you. The extent to which we comply will depend upon other considerations such as professional, regulatory and legal obligations, but where we can comply, your request will be fully actioned within 30 days.
For further information, please contact us.
How Long Will We Retain Information For?
We will typically retain information for a period of seven years. This is due to regulatory reasons and to ensure our business records are adequate to maintain the requisite levels of insurance to protect our clients and non-clients.
Data Privacy and Security. We are committed to protecting your right to privacy. Your personal information will be kept secure. We will not transfer your personal details to any third party for the purpose of direct marketing without your permission.
You have the right to lodge a complaint with the Information Commissioner’s Office who may be contacted at 45 Melville Street Edinburgh EH3 7HL or https://ico.org.uk.