This privacy notice aims to give you information on how Buzz Safety Consultants Ltd collects and processes your personal data.
What is personal Data?
Personal data relates to any information about a natural person that makes you identifiable. Personal data collected by Buzz Safety may include (but is not limited to):
- Names and contact information i.e. emails and telephone numbers
- National Insurance Numbers
- Employment details/history
- Employee number
Sensitive Personal Data
Sensitive personal data refers to the above but includes health, genetic data and biometric data. For example:
- Medical conditions
- Religious or philosophical beliefs and political opinions
- Racial or ethnic origin
- Biometric data (e.g. photo in an electronic passport)
It is possible in the course of conducting our consultancy work that Buzz Safety may collect and/or process sensitive personal data relating to medical conditions and/or convictions.
Controller and Processor of Data
Buzz Safety is both a controller and processor of personal data.
A “data controller” is the person or organisation who decides the purposes for, and the way in which any personal data is processed.
Buzz Safety is the controller of the personal data it collects in relation to the running of its business activities. For example, the information collected on the form when you apply to attend a Buzz Safety Training Course.
A “data processor” is a person or organisation which processes personal data for the controller.
Buzz Safety is also a processor of data. For example it will process the personal data contained on a Buzz Safety Training Course application form to ensure the correct delivery of that course. Buzz Safety will also, from time to time, process data collected and controlled by its customers as part of delivering Buzz Safety’s services to that customer, for example reviewing the health information provided on an Employee Health Assessment form on behalf of a customer.
The Data we Collect
It is possible to visit and browse our website (Buzzsafety.co.uk) without us collecting any personal data from you at all.
We collect information about you when you complete the contact form on our website, when you telephone and request a call back, e-mail us, sign up or apply for an event such as a training course or complete a survey or feedback form.
You agree that we are entitled to obtain, use and process the information you provide to us to enable us to discharge our services (as defined in our written proposals or in the case of our training courses as advertised on our website) and for other related purposes including;
- Updating and enhancing client records
- Analysis for management purposes
- Carrying out credit checks in relation to you
- Legal and regulatory compliance
Cookies are text files put on your computer to collect standard internet log information and visitor behaviour information. This information is then used to track visitor use of the website and to create statistical reports on website activity.
You can set your browser not to accept cookies. Please note in a few cases some of our website features may not function because of this.
Analytics – e.g. how visitors use our website
We use Google Analytics to store information about how visitors use our website so that we may make improvements and give visitors a better user experience.
An IP or Internet Protocol Address is a unique numerical address assigned to a computer as it logs on to the internet. Buzz Safety do not have access to any personal identifiable information and we would never seek this information. Your IP address is logged when visiting our site, but our analytic software only uses this information to track how many visitors we have from particular regions.
Our customers and business contacts do not include children and we do not knowingly collect data relating to children.
How we Store and Process Data
When you give us personal information, we take steps to make sure that it is treated securely.
Usually personal data will be stored electronically on Buzz Safety electronic devices or on secure cloud based system. It may also be stored on removable storage devices or electronic media. Personal data will be stored in encrypted files. All removable storage devices and electronic media such as CD will be fully encrypted.
Occasionally personal data you share with us may be stored securely in hard copy form in a locked filing cabinet only accessible by Buzz Safety Employees.
In circumstances where Buzz Safety processes personal information on behalf of its customers, that information will only be held by Buzz Safety for as long as it is required to perform the task. Once the task has been completed the information will be returned to the customer and any personal information held by Buzz Safety will be deleted.
Any e-mail sent by Buzz Safety which contains sensitive personal data will be encrypted. However routine e-mails which contain non-sensitive details such as your e-mail address are sent normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you e-mail to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.
Buzz Safety will only use personal information provided to us to deliver the Services we have agreed to provide to you.
For Business to Business Clients and Contacts our lawful reason for processing your personal information will be “legitimate interests”. Under “legitimate interests” we can process your personal information if: we have a genuine and legitimate reason and we are not harming any of your rights and interests.
For Business to Consumer Clients and Contacts our lawful reason for processing your personal information will be “A contract with the individual” e.g. to supply goods and services you have requested.
From time to time, our work for you may require us to pass your information to our third-party service providers, subcontractors and other associated organisations for the purposes of completing tasks and providing the Services to you on our behalf. However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the Services and we will review their privacy arrangements to ensure that they will their data privacy arrangement comply with our own requirements.
We collect information on our website to process your enquiry, deal with your event registration, give advice based on survey data and improve our services. If you agree, we will also use this information to share updates with you about our services which we believe may be of interest to you.
We will not share your information for marketing purposes with companies so that they may offer you their products and services.
We would like to send you information about our services which may be of interest to you. If you have consented to receive marketing, you may opt out at any point as set out below.
You have a right at any time to stop us from contacting you for marketing purposes. To opt out please email: firstname.lastname@example.org
How long will we hold your data for?
- Marketing: We will hold your data for a period of 6 years with a review every 3 years. You will have the opportunity to opt out or update or delete data at any point should you need to do so and details are set out in this policy as to how to do that.
- Contracted Services: We will hold your data for 7 years in line with our regulatory requirements.
Access to your Information, Correction, Portability and Deletion
What is a Subject Access Request?
This is your right to request a copy of the information that we hold about you. If you would like a copy of some or all your personal information, please email or write to us at the following address: Helen Byram, Director, Buzz Safety, 4 Oak Tree, Scholes, Huddersfield, HD9 1SD. We will respond to your request within one month of receipt of the request.
We want to make sure your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate by emailing email@example.com or writing to the above address.
Objections to Processing of Personal Data
It is your right to lodge an objection to the processing of your personal data if you feel the “ground relating to your particular situation” apply. The only reasons we will be able to deny your request is if we can show compelling legitimate grounds for the processing, which override your interest, rights and freedoms.
It is also your right to receive the personal data which you have given to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without delay from the current controller if:
(a) The processing is based on consent or on a contract, and
(b) The processing is carried out by automated means.
Your Right to be Forgotten
Should you wish for us to completely delete all information that we hold about you for:
- Email: firstname.lastname@example.org, or
- In Writing to: Helen Byram, Director, Buzz Safety, 4 Oak Tree, Scholes, Huddersfield, HD9 1SD.
If you feel that your personal data has been processed in a way that does not meet the GDPR, you have a specific right to lodge a complaint with the relevant supervisory authority. The supervisory authority will then tell you of the progress and outcome of your complaint. The supervisory authority in the UK is the Information Commissioner’s Office.
All previous versions will be stored electronically by Buzz Safety.