Introduction
DataReady is a Limited Company registered in England and Wales. Our company number is 11596717 and our offices are located at 5 Bathurst Square, London, N15 4FU.
This notice is the privacy policy of DataReady Limited, referred to interchangeably as ‘DataReady’, ‘we’, ‘us’ or ‘our’ throughout this document.
Data protection and the right to privacy are central to our work. This policy is designed to comply with the highest international standards in relation to data protection and privacy. It ensures that the processing of personal data, carried out through any means, is done in full compliance with the safeguards and rights enshrined in Regulation (EU) 2016/679 – otherwise known as the General Data Protection Regulation (GDPR) – and the Data Protection Act 2018.
The purpose of our privacy policy is to explain how we manage and process any information we collect about you. Through this policy, we intend to guarantee the security and protection of our website users’ and partners’ personal data when they are using our website or engaged in work with us.
What data do we collect?
We collect as little data about our website users, project partners and contractors as possible. Through the conduct of our ordinary business, we may collect the following data:
- Personal identification information including names, email addresses, domicile or business addresses, phone numbers, social media handles or other information that enables us to communicate with you; and
- In the case of our contractors or service providers, we will also routinely collect bank account details to enable us to settle any outstanding payments that are owed.
How do we collect your data?
We will only ever collect personal data about you if you have consented to us doing so. You can consent to us collecting personal data about you in two ways:
- By responding to an explicit request from us; or
- By using or viewing our website via your browser’s cookies.
How will we use your data?
DataReady only collects personal data about you so that we can:
- Communicate with you; or
- Conduct financial transactions with you pursuant to any agreed contract we might have.
If you explicitly consent to it, we will share your data with partner companies, individuals or organisations so that they may also contact you or provide our services to you. We undertake to not share any of your personal data with parties outside of the GDPR’s jurisdiction.
The legal basis for processing your data will usually be one of contract or consent. However, there may be circumstances where we receive your personal data from other parties in order to provide our services. In such circumstances, we shall treat such personal data in full compliance with our data obligations. Where it is necessary to process this personal data we shall do so on the basis of legitimate interest; we will not share the personal data.
It may be necessary for us to further process your personal data, for example for record keeping, maintaining professional insurance, or for otherwise protecting our business interests. Such processing will also be conducted on the basis of legitimate interest. For more information about the legal basis of legitimate interest for processing personal data see: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/legitimate-interests/.
We may also be required to process your personal data on the basis of a legal obligation, such as a valid request from legal authorities, or by court order.
How do we store your data?
Personal identification information including names, email addresses, domicile or business addresses, phone numbers, social media handles or other information that enable us to communicate with you are stored across a variety of software packages including Microsoft Office Suite programmes including Outlook, Word, Excel or PowerPoint with data stored on encrypted and password-protected DataReady company laptops or smartphones. Data may also be stored in cloud-based drives including Google Drive, DropBox and Apple iCloud.
In the limited instances where we collect bank account details to enable us to settle outstanding payments, this data is kept within secure online banking and accounting applications used by DataReady. This data may be shared with our accountants and Her Majesty’s Revenue and Customs (HMRC) under certain conditions.
DataReady undertakes to not retain any of your personal data for any longer than it is reasonable to do so. Following the completion of any business with you, we may need to retain your personal data for up to a maximum of six years, in case it is needed in any legal dispute that may arise and to comply with our insurance and tax obligations.
Where it is possible to do so, DataReady will endeavour to anonymise or pseudonymise personal data.
What are your data protection rights?
DataReady would like to ensure that you are fully aware of your data protection rights. Every user is entitled to the following:
The right to access: you have the right to request DataReady for copies of your personal data. We will not charge any fee for this service.
The right to rectification: You have the right to request that DataReady correct any information you believe is inaccurate. You also have the right to request DataReady to complete information you believe is incomplete.
The right to erasure: You have the right to request that DataReady delete your personal data, under certain conditions.
The right to restrict processing: You have the right to object to DataReady’s processing of your personal data, under certain conditions, in which case it may be restricted whilst a decision is made.
The right to data portability: You have the right to request that DataReady transfer data that we have collected to another organisation, or directly to you, under certain conditions.
The right to object: You have the right to object to processing on the basis of legitimate interest. DataReady will cease to process your personal data on this basis, unless we have compelling and legitimate grounds to continue to do so that do not undermine your interests, rights and freedoms.
For more information about your data protection rights listed above visit:
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
You may request confirmation that your personal data is being processed by DataReady and full details about how it is being processed. If you make a request to us regarding your personal data, we will respond to you within one month. If you would like to exercise any of these rights, please contact us at: tom@dataready.org.
What are cookies?
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit www.dataready.org, we may collect information from you automatically through cookies or similar technology. Cookies alone cannot be used to identify you, but may be linked directly or indirectly to you when used with other information (held by us) or by third parties.
For further information, please visit www.allaboutcookies.org.
How do we use cookies?
DataReady does not currently collect any cookies from visitors to our site. This may change in future and if it does, this policy will be updated to reflect any changes that may be made.
Privacy policies of other websites
The DataReady website links to other websites. Our privacy policy applies only to www.dataready.org, so if you click on a link to another website, you should consult it’s privacy policy before using the site.
Changes to our privacy policy
DataReady regularly reviews this privacy policy and places any relevant updates on this webpage. This privacy policy was last updated on 9 October 2019.
How to contact us
If you have any questions about DataReady’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to email us at: tom@dataready.org.
How to contact the appropriate authority
You have the right to report a complaint if you feel that DataReady Limited has not addressed your data protection rights in a satisfactory manner. To register a complaint, you may contact the UK’s Information Commissioner’s Office at https://ico.org.uk/concerns/.