Who are we?
XII Estates Ltd at 64 High Street South, London, E6 6ET, take the issue of security and data protection very seriously and strictly adhere to guidelines published in the General Data Protection Regulation (EU) 2016/679 which is applicable from the 25th May 2018, together with any domestic laws subsequently enacted.
We are notified as a Data Controller with the Office of the Information Commissioner under registration number ZA393935 and we are the data controller of any personal data that you provide to us.
Any questions relating to this notice and our privacy practices should be sent to XII Estates Ltd, 64 High Street South, London, E6 6ET or alternatively to email@example.com.
How we collect information from you and what information we collect
We collect information about you:
We collect the following information about you:
Why we need this information about you and how it will be used
We need your information and will use your information:
Sharing of Your Information
The information you provide to us will be treated by us as confidential and will be processed only by any third party, acting on our behalf, within the UK/EEA.
We may disclose your information to other third parties who act for us for the purposes set out in this policy or for purposes approved by you, including the following:
Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.
Our grounds for processing your personal data to send you marketing communications is either your consent or our legitimate interest; to support and improve and develop our business and the services we offer.
Under the Privacy and Electronic Communications Regulations, we may send you marketing communications from us, and/or via a third party service provider, if:
You can ask us or third parties to stop sending you marketing communications at any time by opting-out where indicated or alternatively emailing us at firstname.lastname@example.org .
If you opt out of receiving marketing communications, this opt out does not apply to personal data provided as a result of other transactions or engagements and/or data collected for purposes as set out in this notice.
Transfers outside the UK and Europe
We may transfer and/or store your information outside the UK and/or EEA. We use third party service providers which may be based outside of the UK or EEA.
Where information is transferred outside the UK or EEA, we ensure that there are adequate safeguards in place to protect your information in accordance with this notice, including the following:
If none of the above safeguards are available, we may request explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.
When you give us information we take steps to make sure that your personal information is kept secure and safe.
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We also allow access to your personal data only to those employees and partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.
How long we will keep your information
We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law (we may be legally required to hold some types of information), or as set out in any relevant contract I have with you.
When deciding what the correct time is to keep the data for we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.
For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.
In some circumstances we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
You have the right at any time to:
If you would like to exercise any of your rights above please contact us at email@example.com
Should you wish to complain about the use of your information, we would ask that you contact us to resolve this matter in the first instance. You also have the right to complain to the Information Commissioner’s Office in relation to our use of your information who may be contacted at https://ico.org.uk/concerns or telephone 0303 123 113.