BOOTHROYD AND CO
GDPR & Privacy Policy

In accordance with the General Data Protection Regulation (GDPR), Boothroyd & Co have implemented this privacy policy to inform you, our customer, of the types of data we process about you.

We have also included within this policy the reasons for processing your data, the lawful basis that permits us to process it, how long we keep your data for and your rights regarding your data. This notice will apply to historic and current customers.

DATA PROTECTION PRINCIPALS.

Under GDPR, personal data held by us must follow the core principals here in.

1. Processing is transparent, fair and lawful.
2. Data collected is for legitimate and specific purposes.
3. Data collected is relevant to and limited to what is required for the purpose of processing.
4. Data will be kept up to date and rectified, where inaccurate, as soon as possible.
5. Data is processed in a way that ensures that the correct security of personal data including accidental loss, destruction or unauthorised use is dealt with using appropriate technical or organisational measures.
6. GDPR procedures are complied with for the transferring of personal data internationally.

DATA HELD.

1. Boothroyd & Co will hold varying types of data in order to process information and conduct business in an efficient and legal manner.
2. Specifically, we hold your name, address, telephone number and email.
3. We will hold electronic and or photocopied documents, such as passport, driving licence, bank statements, council tax statements in accordance with the Money Laundering Regulation 2003 and Proceeds of Crime Act 2002.
4. Your data will be collected at various stages and this is kept in secure files and or within the company`s IT system.

LAWFUL BASIS FOR PROCESSING DATA.

1. Business to business and customer contact.
2. Marketing information purposes.
3. Your data will be processed to comply with GDPR and will be held for as long as is legally required or no longer necessary.

DATA SHARING.

1. Employees of Boothroyd & Co who have the responsibility for processing your data will comply with GDPR guidelines. All employees have been informed of GDPR required procedures to conduct their daily business requirements.
2. We may share your data with other parties, with your authorisation, to facilitate quotes or access. This would specifically include tradespeople for maintenance of properties rented(if you were a tenant) financial services, surveyors and solicitors. There may be other reasons to share data to comply with legal obligations put upon us. Third parties must ensure the data provided is not compromised and in turn implement appropriate technical and organisational measures to ensure the security of your data under GDPR.
3. We do not share your data with bodies outside of the European Economic Area.

PROTECTING YOUR DATA.

Boothroyd & Co are aware of the requirements under GDPR to ensure your data is protected against accidental loss, disclosure destruction or abuse. Processes have been implemented to protect against this.

DATA RETENTION PERIOD.

We will hold your data for as long as we need to conduct business with you or as long as you allow us to hold your data. Some data retention periods are set by Law and can vary depending on why we need your data and for that reason we may not be able to delete your data.

YOUR RIGHTS A DATA SUBJECT.

Your rights to the data Boothroyd & Co hold on you.

1. To request a copy of the information we hold on you.
2. To request any inaccuracies are corrected on data we hold on you in a timely fashion.
3. To request that data we hold on you is erased. In certain circumstances this may not be possible as it falls outside of the Law and requirements of professional bodies.
4. The right to transfer your data we hold on you to another party.
5. The right to object to the inclusion of data.

COMPLAINT PROCEDURE.

If you believe your data rights have been breached in anyway by Boothroyd & Co you are able to speak to our appointed compliance officer Mr John Ansell on 01926 857244.

Should you wish to raise this directly to the Information Commissioner ( ICO ) they can be contacted at Information Commissioner`s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone 0303 123 1113. Data will be held in accordance with HMRC, AML and ICO requirements.

Download Data Protection Registration Certificate

Download  GDPR & Privacy Policy