IPM Catering Ltd (“we”/”us”/”our”) understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our customers and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

 

1.          Information About Us

IPM Catering Ltd

7 Ladybower Close

Kettering

Northamptonshire

NN16 8LU

Vat number: 912659222

 Data Protection Manager:     Mark Scott

Email address:   [email protected]

Telephone number:    01536 518117

 

2.            What does this Notice cover?

This Privacy Notice explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.

 

3.            What is Personal Data?

Personal data is protected in the United Kingdom by the retained version of the EU General Data Protection Regulation (EU regulation 2016/679), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (as amended) and we refer to these pieces of legislation as current data protection law.

Personal data is defined by current data protection law as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details and images captured by our onsite CCTV system, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

The personal data that we use is set out in Part 5 below.

 

4.            What Are My Rights?

Under the current data protection law, you have the following rights, which we will always work to uphold:

a)            The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in part 13.

b)            The right to access the personal data we hold about you.

c)            The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.

d)            The right to be forgotten, i.e. The right to ask us to delete or otherwise dispose of any of your personal data that we have.

e)            The right to restrict (i.e. prevent) the processing of your personal data.

f)             The right to object to us using your personal data for a particular purpose or purposes.

g)            The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.

h)            Rights relating to automated decision-making and profiling. We do not use your personal data in this way

For more information about our use of your personal data or exercising your rights as outlined above, please see the information in Part 12 and then contact us using the details provided in Part 13.

Further information about your rights can also be obtained from the Information Commissioner’s Office (the ICO) or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the ICO, the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

 

5.            What Personal Data Do We Collect?

We may collect some or all of the following personal data (this may vary according to your relationship with us:

·         Name;

·         Address;

·         Email address;

·         Telephone number;

·         Business name;

·         Job title;

·         Profession;

·         Payment information

·         Video or static images captured by our onsite CCTV system.

We may also obtain your personal data from:

·         Manufacturers of equipment who engage us to provide servicing and repair services;

·         Companies engaged by manufacturers to supply warranty services and servicing and repair work;

·         Publically accessible sources e.g. Companies House;

·         Technical data from the following parties:

o   analytics providers such as Google based outside the UK;

o   search information providers such as Google based outside the UK.

6.            How Do You Use My Personal Data?

Under the current data protection law, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. Your personal data will be used for the following purposes:

·         Providing and managing your account.

·         Supplying our services to you. Your personal details are required in order for us to enter into a contract with you.

·         Communicating with you. This may include responding to emails or calls from you.

·         Monitoring security on our site.

 

7.            Promotional Communications

We do not currently use personal data to send promotional communications.

 

8.            How Long Will You Keep My Personal Data?

We will keep your personal information while you have an account with us or we are providing products and/or services to you. Thereafter, we will keep your personal information for as long as is necessary:

•    to respond to any questions, complaints or claims made by you or on your behalf;

•    to show that we treated you fairly;

•    to keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this policy.

Data recorded by our CCTV system will be stored on a micro SD card. Data from CCTV cameras will not be retained indefinitely but will be permanently deleted once there is no reason to retain the recorded information. Exactly how long images will be retained for will vary according to the purpose for which they are being recorded. For example, where images are being recorded for crime prevention purposes, data will be kept long enough only for incidents to come to light. In all other cases, recorded images will be deleted as part of our policy of overwriting the micro SD card on a regular basis . We will maintain a comprehensive log of when data is deleted.

When it is no longer necessary to retain your personal information, we will delete or anonymise it.

9.            How And Where Do You Store Or Transfer My Personal Data?

We will only store or transfer your personal data in the UK. This means that it will be fully protected under current UK data protection law.

 

10.         Keeping Your Personal Information Secure

We have appropriate security measures to prevent personal information from being accidentally lost, or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

 

11.         Do You Share My Personal Data?

We may sometimes contract with the following third parties to supply products and/or services to you on our behalf. These may include engineers, delivery, and marketing. In some cases, those third parties may require access to some or all of your personal data that we hold.

·         Our sub-contract engineers who will visit your site to provide our services to you;

·         Manufacturers of equipment for whom we provide services and to whom we report in relation to services we provide;

·         Companies engaged by manufacturers to supply warranty services and servicing and repair work;

If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

 

12.          Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights are set out in Part 4 above.

If you wish to exercise any of the rights set out above, please contact us. 

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond. 

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated. 

13.         How Do I Contact You?

To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details for the attention of Mark Scott

Email address:            [email protected]

Telephone number:     07506 711293

Postal address:         7 Ladybower Close

                                    Kettering

                                    Northamptonshire

                                    NN16 8LU

 

14.         Changes To This Privacy Notice

We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be made available on our website: www.ipmcateringengineers.com

 

 

Dated: 19/01/2021