The following information explains why and how we collect your personal data, and your rights and obligations under the GDPR. We will never collect any unnecessary data personal data and will never provide your data to a third party for marketing purposes.
If you have any queries regarding this policy or how we process data you can contact us on 01223 900241 or email@example.com.
Data we collect
The types of personal data that Cambridge Risk Management Ltd holds / collects includes:
- Names and address
- Date of birth
- Email address
- Telephone number
- ID e.g. passport, driving license
- IP address
- Financial Information
Examples of the way we collect and use personal data includes:
- Contact made by the individual by post, email or telephone
- Booking forms for training courses
- Information provided to us in order to undertake our services such as accident reporting, DSE assessments etc.
- Completed online contact form
- Placing an online order through our website
- Using the Online Health & Safety Management System (TAM)
How we use your data
Cambridge Risk Management Ltd takes privacy of data very seriously and will never share or sell your data without your consent, unless required to do so by law. We only retain your data for as long as is necessary and for the purposes specified in this notice.
If you have consented to us providing you with health and safety / marketing updates, you are free to withdraw consent at any time.
Under the GDPR you have the right to access any personal information that Cambridge Risk Management Ltd processes about you.
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to amend the information which we will update as quickly as possible and notify you of the changes (unless there is a valid reason for not doing so).
You also have the right to request erasure of your personal data or to restrict processing in accordance with data protection laws, as well as to object to any direct marketing from us.
Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, only:
o For the purposes specified in this notice
o To facilitate the processing of our services
We use third-parties to provide our services including (but not limited to) finance, IT, marketing and legal services. All processors act on our behalf i.e. only process your data under our instructions, in compliance with our privacy notice and the data protection laws.
We take your privacy seriously and we take every reasonable measure and precaution to protect and secure your personal data from unauthorised access, alteration or disclosure. Our security measures include firewalls, anti-virus software, encryption of data, password protection and role-based access.
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to us, however, as this information is required for us to provide you with our services, we will not be able to offer some / all of our services without it.
How Long We Keep Your Data
We only ever retain personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations.
Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and / or withdraw your consent.
Health and Safety Updates / Marketing
Occasionally, we would like to contact you with details of specific products, offers, services, competitions, newsletters, promotions that we provide. If you consent to us using your contact details for these purposes, you have the right to modify or withdraw your consent at any time by using the opt-out / subscribe options or by contacting us directly.
Raising a complaint
We only process your personal information in compliance with this privacy notice and in accordance with the GDPR. However, if you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information please contact one of our Data Protection Leads at firstname.lastname@example.org. Alternatively, you have the right to register a complaint with the supervisory authority.