Privacy Policy

(updated GDPR)

 

1. Your Right to Information

Our business and services described on this website, is based on strong and trusting relationships. Your trust in us as a professional organisation that you are comfortable working with is paramount. As a Data Controller, we value your rights to understand how we store and use any of your data, including its origin and recipients. We will never sell your personal data to any third-party organisation for any purpose.

This privacy notice sets out information regarding how and what personal data is collected and processed, who it is shared with, the lawful basis for processing and our retention strategy.

We encourage you to contact us regarding any questions or concerns you may have regarding the information within this notice or, more generally, any aspect of our processing of your personal data, using the email address below:

owen@liskandjones.com

If you do not feel that we adequately answer your questions or remedy your concerns, you have the right to make a complaint to an appropriate supervisory body. Within the UK, you can contact the Information Commissioner’s Office at ico.org.uk/concerns/

2. How We Obtain Your Personal Data

We may receive or collect your personal data through various means:

You emailing, phoning or Contact form.

You visiting our website.

You exchanging business cards.

You providing feedback

Us receiving information on you from suppliers

Us holding conversations with you at meetings, conferences, exhibitions, trade shows and other events.

3. Data You Give Us or We Collect

We endeavour to always collect, use, and store the minimum personal data necessary during the course of our normal business.

For activities related to services we offer or may purchase, this data may include name, address, email addresses, links to professional profiles on social media, phone numbers, job & professional titles, department, product & service interests, contact preferences and miscellaneous information shared during engagement.

If we enter into a contract with you, we record sufficient data to undertake our contract with you. This includes project correspondence, technical support history, feedback to client surveys and attendance at any events and courses we are involved in organising. We request sufficient financial information to undertake the transaction, including credit card payments or an introduction to a third-party financing organisation. This information will be further minimised once the purchase has been made unless you request otherwise.

If you are interested in working for us as an employee, contractor or associate, we process additional personal data regarding your qualifications, experience, references, nationality, ethnicity and other selected demographic and special category information as required.

During your visits to our website, we may also automatically collect, for the computer you are using, IP address, platform, operating system, internet browser profile, such as how you got to our site and how long you spent on each page. However, we do not cross-reference this data against your other personal information, such as name and address, and therefore it cannot be used to identify who you are.

4. How We Use Your Data and its Lawful Basis

We may use your data in a number of ways to:

Fulfil any obligations regarding contracts we have entered, or intend to enter, into with you.

Manage our relationship with you including any administration.

Provide our suppliers and associates with sufficient information to fulfil any contracts or offers that we have discussed with you.

Keep you informed of products and services that you have previously purchased from us or enquired about.

Provide you with related information to the above that we believe is of interest and may benefit your organisation.

Notify you of any changes to our organisation, products, or services.

Improve the design of our website.

Improve the quality, relevance and performance of our email and other communications, including personalised, targeted and location-based content.

Undertake research and market analysis to inform our company strategies.

Assess the accuracy of the data we hold on you and verify using third parties.

Identify and assess any activity that may potentially be illegal, unlawful, or harmful.

Enforce our Privacy Policy and any Terms of Business.

Manage our recruitment processes.

Our lawful basis for processing your personal data will typically be our Legitimate Business Interests although we may alternatively rely on Contract, Legal Obligation or Consent for specific data and uses.

4.1 Legitimate Business Interests

Our Legitimate Business Interests for collecting, retaining, and using your data are as follows:

Lisk and Jones does not currently send digital marketing via email.

You can ask us to remove your current Technical Documents subscription data by contacting us as described in Section 1 via the email address owen@liskandjones.com.

To provide the best possible response to your enquiries.

We will collect and use your personal data to help understand your requirements and maintain communication when answering your requests for product or service information, commercial proposals, or technical support.

 

In the event of you exercising your Right to Erasure (Section 13.5) we may keep a record of your wishes, based upon the minimum necessary personal data, to ensure we continue to comply.

4.2 Contract

Our lawful basis will be Contract when we have entered an agreement, or are in discussion with you regarding an agreement, with your organisation, or with you personally, to supply or receive products and services. This basis will continue while we have obligations or professional duties to keep you informed of any variations, revisions or other changes that may have implications for the contract.

4.3 Legal Obligation

Our lawful basis will be Legal Obligation when we are legally required to process or retain your personal data to fulfill our obligations.

4.4 Consent

Our lawful basis will be Consent when this is the most appropriate basis for our engagement. This will include prior to contact with you regarding our products and services as an individual rather than as a representative of an organisation.

If we are using Consent as our basis for processing some or all of your personal data, you can withdraw your consent at any time and we will delete the respective data in respect of your Right to Erasure (Section 13.5)

5. Who May Use Your Data

Outside of our company, we may disclose your personal data to authorities as required to comply with our legal obligations, laws and if it is in the public interest.

We may also share your data with suppliers, partners, associates, and contractors inside or outside of the European Union for the strict purpose of our legitimate interests or fulfilment of contracts with you. The lawful basis for their processing will be their own legitimate interests or contractual or legal obligations as a data processor.

6. Storage and Retention of Data

We segregate any data we collect to store as appropriate within our mailboxes and server-based and local file systems. Segregation is based upon considerations of its use and purpose and our legal and contractual obligations.

The duration your data will be stored depends on the nature and purpose for which it was collected, considering any legal or contractual obligations or the interest you may have shown in our products and services. We periodically review our data to ensure it is still lawful and appropriate to retain. If it fails this assessment, we will delete it if practically possible.

Please contact us if you would like further details on our data retention policies.

7. Security

We undertake our very best endeavours to ensure your personal data is secure once received, restricting access as appropriate.

8. Website Plug-Ins, Cookies and Tracking

Our website is based on the WordPress platform and miscellaneous plug-ins to improve performance.

We use “Cookies” which are small text files that are put on your computer when you visit our website. These Cookies enable your device to be recognised and information to be collected about your actions when on our website. More general information on Cookies can be found at en.support.wordpress.com/cookies and aboutcookies.org

First-Party Cookies are those set by the website while Third-Party Cookies are set by alternative domain or website. We include both first-party and third-party Cookies to enable us to improve our services to you, including:

Measuring how many are using the services we provide, so we can make them easier and faster for you to use

Analysing data, anonymously, to help us understand how you use our website.

For more information about how to remove Cookies from your device, or how to block individual Cookies from being received, please see the guidance and instructions at ico.org.uk/for-the-public/online/cookies/

By continuing to use our website without changing your browser settings, you are agreeing to our use of Cookies.

8.1 Third-Party Cookies

By continuing to use our website, you are consenting to the processing of data about you by Google in the manner and for the purposes set out above.

9. Social Sharing Links

 

We don’t share your information through social media links.

10. Google Adwords

We do not include any 3rd party adverts on our website apart from any promotions directly from our suppliers. and do not use Google Adwords services.

11. Links to Third Party Websites

Within our website, email and communications, we may include links to third-party websites, including suppliers and other relevant organisations, that you may choose to visit. We cannot control or provide any assurance regarding the content or privacy protection within such websites and recommend you consult their own privacy policies.

12. International Transfer of Personal Data

We may transfer your personal data outside of the European Union (EU) to our non-EU based suppliers when processing your order or requiring communications about you to adequately provide a service.

We will never transfer your sensitive data to any third parties, inside or outside of the EU, specifically for marketing or commercial purposes.

13. Your Additional Rights

In addition to honouring your Right to be Informed in Section 1, we will also diligently and promptly comply with your additional rights below.

13.1 Right to Access

We respect your right to understand and view the personal data we hold on you, including the lawful basis we are applying to justify its processing.

You can obtain access by submitting a Subject Access Request (SAR) in writing to our privacy person.

We will respond as soon as practically possible and, at the latest, within one month of receipt unless the request is deemed highly complex or we have received multiple requests from you. In such cases, we may request an extension from you for an additional two months. No fee will normally apply although we reserve the right to cover our administration costs with a reasonable fee if the request is considered unfairly repetitive, unfounded, or excessive.

13.2 Right to Rectification

We encourage you to exercise your right to correct any incomplete or inaccurate information we hold on you by contacting us by email or post using the details in Section 1.

We will respond as soon as practically possible and, at the latest, within one month of receipt unless the request is deemed highly complex or we have received multiple requests from you. In such cases, we may request an extension from you for an additional two months. No fee will normally apply although we reserve the right to cover our administration costs with a reasonable fee if the request is considered unfairly repetitive, unfounded, or excessive.

13.3 Right to Restrict Processing

You can request that we suspend the use of your personal data while we work with you to establish its accuracy, purpose, and reason for processing. Please contact us using the details in Section 1.

During the suspension period, apart from storage, we will not process your data further without your consent unless we are obliged to for legal or public interest reasons.

We will respond as soon as practically possible and, at the latest, within one month of receipt unless the request is deemed highly complex or we have received multiple requests from you. In such cases, we may request an extension from you for an additional two months. No fee will normally apply although we reserve the right to cover our administration costs with a reasonable fee if the request is considered unfairly repetitive, unfounded, or excessive.

13.4 Right to Object

You can object to our processing of your data if our justification is based on Legitimate Interests,  Please contact us using the details in Section 1 to raise and discuss your objection.

We will cease the activity forthwith and update your personal data accordingly.

13.5 Right to Erasure (to be Forgotten)

We will always delete personal data that does not pass our periodic assessments in terms of lawful basis or accuracy.

However, you can explicitly ask us to delete your personal data by simply contacting us verbally or in writing using the details in Section 1.

We will agree to your request entirely unless by doing so we are compromising any contractual or legal obligations. If we agree, we will endeavour to permanently erase all personal data that we can reasonably locate and retrieve. As permitted, minimum details may be retained within a suppression file in order we can keep a record of your wishes and avoid any resurrection of your data at a future time.

We will respond as soon as practically possible and, at the latest, within one month of receipt unless the request is deemed highly complex or we have received multiple requests from you. In such cases, we may request an extension from you for an additional two months. No fee will normally apply although we reserve the right to cover our administration costs with a reasonable fee if the request is considered unfairly repetitive, unfounded, or excessive.

Please communicate your request to be erased as described above.

13.6 Right to Data Portability

You can ask us to move, copy or transfer any personal data you have specifically given to us if our processing is automated, based upon the lawful basis of Contract (Section 4.2) or Consent (Section 4.4) and does not include any third-party information that may prejudice the rights of other individuals. Please contact us using the details in Section 1.
If electronically-stored, we will supply this data free of charge in a common, open format such as CSV.

We will respond as soon as practically possible and, at the latest, within one month of receipt unless the request is deemed highly complex or we have received multiple requests from you. In such cases, we may request an extension from you for an additional two months.

13.7 Rights related to Automated Decision-Making & Profiling

We may create a profile of you in terms of your interests in, and the relevance of, our software and services. This is to ensure the decisions we make regarding communications we have with you are as appropriate as possible.

If you would prefer not to be subject to profiling or would like to adjust or rectify your profile, please contact us using the details in Section 1.

13.8 Right to Complain

If we are unable to comply with any of your requests discussed in Section 13, you have the right to complain or appeal to the appropriate authorities. Within the UK, you should make a complaint to the Information Commissioner’s Office (ICO). Details can be found at ico.org.uk/concerns