Privacy

What we need

Adapt & Evolve Consultancy will be what’s known as the “Controller” of the personal data you provide to us. We only collect basic personal data about you which does not include any special categories of personal information about you (known as Special Category Data). This does however include:

Your name
Your email address
Your address
Your phone number
Your date of birth
Your business name
Your financial details
Any personal data you post on our website or via email
Data about how you use our website
Technical data such as your IP address, your login data, details about your browser, length of visit to pages on our website, page views and navigation paths, details about the number of times you use our website, time zone settings and other technology on the devices you use to access our website
Your marketing and communication preferences
Any other information that you directly provide to us whether through our contact form, over the phone, by email or otherwise, such as when entering a competition or completing a survey
Photographs of you at events
CV and application forms
Credit information from third parties

We may collect data about you by you providing the data directly to us (for example by filling in forms on our site or by sending us emails). We may automatically collect certain data from you as you use our website by using cookies and similar technologies.
We may receive data from third parties such as analytics providers such as Google based outside the UK, advertising networks such as Facebook based outside the UK, such as search information providers such as Google based outside the UK, providers of technical, payment and delivery services, fraud detection agencies and data brokers or aggregators.

We may also receive data from publicly availably sources such as Companies House and the Electoral Register (or their equivalents) based inside or outside of the UK.

Why we need it

We need to know your basic personal data in order to ………

Process financial transactions to enable you to purchase our goods our products or services
Send you customer communications about enhancements to products or services you have bought
Enable us to perform a contract with you and process orders, respond to enquiries related to the order and deal with complaints
Contact you to discuss wider support and services
Reply to any enquiries you make about our products or services
Send you marketing communications where we are allowed by law to do so
Monitor the use of our website and online services
Keep records of orders placed and communications in relation to such orders
Keep records of communications
Analyse your use of our website and other online services
Administer and protect our business and website
Deliver relevant website content and advertisements to you
Comply with any legal obligations we are subject to or as required by a government authority
Obtain or maintain insurance policies
Manage our business

What we do with it

We only ever use your personal data with your consent, or where it is necessary:

to enter into, or perform, a contract with you
to comply with a legal duty
to protect your vital interests
for our own (or a third party’s) lawful interests, provided your rights don’t override these.

In any event, we’ll only use your information for the purpose or purposes it was collected for (or for closely related purposes).

We may process personal information for certain legitimate business purposes, which include some or all of the following:

where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customers
to identify and prevent fraud
to enhance the security of our network and information systems
to better understand how people interact with our websites
to provide postal communications which we think will be of interest to you
to determine the effectiveness of promotional campaigns and advertising.

Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of these rights at all times.

When we process your personal data for our legitimate interests, we will make sure that we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate business interests do not automatically override your interests - we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You have the right to object to this processing if you wish, and if you wish to do so please click here (add link). Please bear in mind that if you object this may affect our ability to carry out tasks above for your benefit.

Where we keep it

We are subject to the provisions of the UK General Data Protection Regulations that protect your personal data. Where we transfer your data to third parties outside of the UK, we will ensure that certain safeguards are in place to ensure a similar degree of security for your personal data. As such:

We may transfer your personal data to countries that the United Kingdom authorities have approved as providing an adequate level of protection for personal data by; or
If we use US-based providers that are part of a privacy framework (such as the successor to the US Privacy Shield), we may transfer data to them, as they have equivalent safeguards in place; or
Where we use certain service providers who are established outside of the UK, we may use specific contracts or codes of conduct or certification mechanisms approved by the United Kingdom authorities which give personal data the same protection it has in the UK.

If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.

How long we keep it

We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored depends on the information in question and what it is being used for. For example, if you ask us not to send you marketing e-mails, we will stop storing your e-mails for marketing purposes (though we’ll keep a record of your preference not to be e-mailed).

We continually review what information we hold and delete what is no longer required. We never store payment card information. We will not retain your data for any longer than necessary and the longest time that we will hold your data will be six years.

What are your rights?

We want to ensure that you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:

the right to confirmation as to whether we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as a data subject access request)
the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason)
the right to have inaccurate data rectified
the right to object to your data being used for marketing or profiling; and
where technically feasible, you have the right to personal data you have provided to us which we process automatically based on your consent or the performance of a contract. This information will be provided in a common electronic format.

Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.

If you wish to raise a complaint on how we have handled your personal data, you can contact info@adaptandevolve.co.uk and we will will investigate the matter.

You can see more about these rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/. If you wish to exercise any of the rights set out above, please email us at info@adaptandevolve.co.uk.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you.

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.