Data Controller

Daniel Richardson

Our Company Privacy Policy

Our Company is part of the Our Company Group which includes Our Company International and Our Company Direct. This privacy policy will explain how our organization uses the personal data we collect from you when you use our website.

Topics:

• What data do we collect?
• How do we collect your data?
• How will we use your data?
• How do we store your data?
• Marketing
• What are your data protection rights?
• What are cookies?
• How do we use cookies?
• What types of cookies do we use?
• How to manage your cookies
• Privacy policies of other websites
• Changes to our privacy policy
• How to contact us
• How to contact the appropriate authorities

What data do we collect?

Our Company collects the following data:

• Personal identification information (Name, email address, phone number, etc.)

How do we collect your data?

You directly provide Our Company with most of the data we collect. We collect data and process data when you:

• Register online or place an order for any of our products or services.
• Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
• Use or view our website via your browser’s cookies.

How will we use your data?

Our Company collects your data so that we can:

• Process your order and manage your account.
• Email you with special offers on other products and services we think you might like.

When Our Company processes your order, it may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.

How do we store your data?

We take the privacy and security of your data seriously. When you use our services, your data is stored within the United Kingdom in compliance with the General Data Protection Regulation (GDPR). Here’s how we ensure your data is protected:

1. Data Centres: Your data is stored in secure data centres located within the UK. These facilities are equipped with advanced security measures to protect against unauthorised access, data breaches, and other threats.
2. Encryption: All data stored on our servers is encrypted both at rest and in transit. This means that your data is protected by strong encryption protocols, ensuring that it remains confidential and secure.
3. Access Controls: We implement strict access controls to ensure that only authorized personnel can access your data. Access is granted based on the principle of least privilege, and all access is logged and monitored.
4. Data Retention: We retain your data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once your data is no longer needed, it is securely deleted or anonymized.
5. Compliance: Our data storage practices comply with all relevant UK data protection laws and regulations, including the GDPR. We regularly review and update our policies and procedures to ensure ongoing compliance.
6. Third-Party Providers: If we use third-party service providers to store or process your data, we ensure that they also comply with GDPR and have appropriate security measures in place.

By adhering to these practices, we ensure that your data is stored securely and in compliance with GDPR requirements.

Our Company will keep your personal data for as long as you remain a customer or withdraw consent. Once this time period has expired, we will delete your data:

Our Steps to Delete Personal Data Under GDPR

1. Identify the Data:
   • Locate all instances of the personal data you need to delete. This includes data stored in databases, backups, and any other storage systems.
   • Categorise the data based on its type and the purpose for which it was collected.
2. Verify the Request:
   • Ensure that the request for data deletion is valid and falls under the GDPR’s right to erasure. This right applies in specific circumstances, such as when the data is no longer necessary for the original purpose, the individual withdraws consent, or the data was unlawfully processed1.
3. Data Deletion Process:
   • Manual Deletion: For smaller datasets, manually delete the data from all storage locations.
   • Automated Tools: Use data management tools that support GDPR compliance to automate the deletion process. These tools can help ensure that data is deleted from all relevant systems, including backups.
4. Update Records:
   • Maintain a record of the deletion request and the actions taken to comply with it. This documentation is crucial for demonstrating compliance with GDPR requirements.
5. Notify Third Parties:
   • If the personal data has been shared with third parties, inform them of the deletion request and ensure they also delete the data from their systems2.
6. Secure Deletion:
   • Ensure that the data is irreversibly deleted. This may involve overwriting the data multiple times or using specialized data destruction tools to prevent recovery.
7. Confirm Deletion:
   • Provide confirmation to the individual that their data has been deleted. This should include details of what data was deleted and from which systems.

Marketing

Our Company would like to send you information about products and services of ours that we think you might like.

If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop Our Company from contacting you for marketing purposes or giving your data to other members of the Our Company Group.

If you no longer wish to be contacted for marketing purposes, please click here.

What are your data protection rights?

Our Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete the information you believe is incomplete.

The right to erasure – You have the right to request that Our Company erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that Our Company restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to Our Company’s processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: info@gd-labs.com

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology

For further information, visit allaboutcookies.org.

How do we use cookies?

Our Company uses cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in
• Understanding how you use our website

What types of cookies do we use?

There are a number of different types of cookies, however, our website uses:

• Functionality – Our Company uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
• Advertising – Our Company uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. Our Company sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.

How to manage cookies

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

The Our Company website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Our Company keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 9 January 2019.

How to contact us

If you have any questions about Our Company’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: info@gd-labs.com

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.