Please read the following carefully to understand our use of personal data. Please note that the Policy relates only to living individuals in relation to personal data relating directly to themselves, and not to persons in any other capacity.
Information we may collect from you
We collect personal data from you which you volunteer when you provide such personal data to us or via our services with which you interact. We may also be given other personal data relating to you by other persons, or we may obtain such other personal data about you as may be provided to us in the course of our legitimate business activities.
We collect and process Data. Including but not limited to the following in the course of providing services to you:
- Your full name
- Your address
- Your various email addresses
- Your various phone numbers including mobile phone numbers
- Your nationality
- Financial information about you including your bank details, credit card details or other payment details
- Your date of birth
- And all other Data which you ask us to process on your behalf, or which is necessary for us to process in order for us to fulfil our role as providing our services to you.
We may also process other data, which is not personal data.
When you access our website, your device’s browser provides us with information such as your IP address, browser type, access time and referring URL which is collected and used to provide statistical data. This information may be used to help us improve our website and the services we offer, and to offer services to you.
Security and where we store your personal data
In line with the GDPR we are committed to protecting the privacy of you personal data. We use a variety of Technical and organisational measures (TOMS) and security technologies and procedures to help protect your data from unauthorised access and use.
We store your data in secured filing systems on our premises, within our practice management software and our accounting systems.
We share your data only with relevant third parties, in a secure manner and when there is a clear requirement to do so.
The transmission of information via the internet is not completely secure and may involve the transfer of data to countries outside of the European Economic Area (EEA). This occurs typically through use of cloud solutions for web hosting, mail hosting or proprietary software solutions delivered to us through the Cloud. We do not however authorise any third party to use your personal data for their own purposes. Non EEA countries may not provide an adequate level of protection in relation to processing your personal data. By submitting your data, you agree to this transfer, storing and processing.
Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to us. Any transmission of data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorised access.
Use made of your personal data
We use your personal data that we hold to:
- Provide our services
- To comply with the relevant legislation and regulations of our industry
- Carry out our obligations arising from any contracts entered into between you and us
- Notify you about changes to our services
We may use your data to send you information relating to our services, events and products which may be of interest to you. If you do not want us to use your data in this way, please notify us to that effect.
We keep your Data for varying periods according to our Data Retention Schedule and in line with relevant legislation and recommendations.
Disclosure of your information
We may disclose your Data to third parties who provide a service to us or if we are under a duty to disclose or share your Data in order to comply with any legal obligation, or to protect our rights, property, or safety of staff or customers. We only share your data when there is a clear requirement to do so and always do so in a secure manner.
Some jurisdictions may not have adequate safeguards for the protection of personal data, and where this is the case we comply with Chapter 5 of the General Data Protection Regulation (“GDPR”) to provide an alternative method of safeguarding your personal data.
Links to other sites
Our website may, from time to time, contain links to and from other websites. If you follow a link to any of those websites, please note that those websites have their own privacy policies and that we do not accept any responsibility or liability for those policies. Please check those policies before you submit and data to those websites.
Protection of the privacy of personal information
In order to protect the privacy of personal information, Herman White Estates:
- Takes all due care to protect personal information it holds from any loss, unauthorised access, modification, use, disclosure and disposal
- Has in place a Data Protection Breach Policy which will be used to investigate fully any potential data protection breaches
- Has in place appropriate staff training to ensure that all staff involved in processes which handle personal information are aware of their responsibilities in relation to the safeguarding and handling of personal information
- Only uses personal data for the purposes for which it is was collected
- Is registered as a Data Controller with the Office of the Data Protection Commissioner
- Is subject to the Data Protection Acts 1988 and 2003
- Is subject to the Freedom of Information Act 2014
As an individual, under EU law you have certain rights to apply to us to provide information or make amendments to how we process data relating to you. These rights apply in certain circumstances and are set out below:-
- The right to access data relating to you (‘access right’)
- The right to rectify/correct data relating to you (‘right to rectification’)
- The right to object to processing of data relating to you (‘right to object’)
- The right to restrict the processing of data relating to you (‘right to restriction’)
- The right to erase/delete data relating to you (‘right to erasure’)
- The right to ‘port’ certain data relating to you from one organisation to another (‘right to portability’)
Web browser cookies
Your acceptance of these terms
By using this Site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.
The controller for the purposes of GDPR is
Herman White Estates
Changes to this policy
We reserve the right to change this Policy from time to time in our sole discretion. If we make any changes, we will post those changes here so that you can see what information we gather, how e might use that information and in what circumstances we may disclose it. By continuing to use our site or our services or otherwise provide data after we post any such changes, you accept and agree to this Policy as modified.
Questions, comments, requests and complaints regarding this Policy and the information we hold are welcome and should be address to us at firstname.lastname@example.org.
All requests will be dealt with in a timely and efficient manner.