This policy was last updated: 1st May 2018
What information do we collect?The information that you provide us with is collected from any online details given and processed in accordance with UK legislation.
Information you provide to us
Blog:We use WordPress to publish our blog and anonymous information to track users’ activity in relation to the blog. If you wish to post a comment on the blog, you will be asked to give your name and email address. Email addresses do not appear publicly.Data is held on the grounds of being legitimate to our business interests.
Contact:We use a Contact Form to collect your name, email and phone number as well as your message, so that we can contact you and provide details of our services to you and deal with general company enquiries. Data is held on the grounds of being legitimate to our business interests.
Phone calls:Phone calls to us may be recorded and any data relating to the call may be retained by us. The data will be held on the basis of being for our legitimate business needs or in order to fulfil our contractual obligations if you are a client of ours.
Social media:We use social media to engage with users and the ignition-online.co.ukwebsite links to our Facebook, Twitterand LinkedIn pages. We do not keep any specific data that identifies you as an individual user, but hold details of our followers on these platforms. You should refer to the Privacy Policies of these channels to understand how they treat your data in relation to linking to our site.
Information we get from other sourcesFrom time to time, we may need to obtain information from third parties about you. This will only apply where it is necessary to provide our services and as permitted by law.
Data ProcessorsWe may use Data Processors who act on our instruction in relation to the management of your data and they must adhere to all data protection laws and regulations. We will ensure that any Data Processors used only operate on our written instructions and comply with their obligations under the GDPR. You will be informed of any other Data Controllers who have access to your data and who may determine processing activities separately to us, or as a Joint Data Controller.
MarketingWe will only send you emails about our services, i.e. direct marketing, with your express consent. You have the option not to give consent and to withdraw consent at any time. You may withdraw your consent for us to contact you by contacting us email@example.com. Non-personally identifiable visitor information may be provided to third parties for marketing, advertising or other uses.
Social media platformsCommunication, engagement and actions taken through external social media platforms that this website and its owners participate on are subject to our terms and conditions as well as the privacy policies held with each social media platform respectively. Users are advised to use social media platforms wisely and communicate and/or engage with them with due care and caution in regard to their own privacy and personal details. This website nor its owners will not ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
Ignitionuses social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised that before using such social sharing buttons, that they do so at their own discretion, and should consider that the social media platform may track and save requests to share a web page, through the users’ social media platform account.
Retaining your dataWe keep your personal information in accordance with our Data Retention Policy which reflects our needs to provide services to you as contracted and also as required to meet legal, statutory and regulatory obligations. The need to hold information is regularly reviewed and information/data will be disposed of when no longer required.
Data StorageOur website is hosted by Heart Internet. Any information that you supply to us may be stored on servers located within the European Economic Area (EEA), or any other country that provides suitable and adequate security measures to protect the data. Your data will only be transferred in accordance with the relevant data protection laws. Data Subject Rights Subject Access Requests The General Data Protection Regulation (GDPR) gives individuals, known as ‘data subjects’, the right to access personal data that is held by organisations by a subject access request (SAR). We will endeavour to respond quickly to any such requests, which legally require us to respond within one month of receiving the request and necessary information. To make a SAR request email us firstname.lastname@example.org
Right to RectificationData subjects have the right to request that we amend or change personal information that we hold about you, that is inaccurate or incorrect.
Right to erasureData subjects have the right to ask us to delete personal information from our systems without giving any reason and at any time. We will act on any request without delay.
Right to restrict processingData subjects have the right to rectification or erasure of personal data in the following circumstances: Personal data is not accurate; The processing of data is unlawful - data subjects may request that processing is restricted; Data is required to exercise legal rights or defend legal claims; Data is unlawful but there may be lawful grounds for processing, which override this right.
Right to data portabilityData subjects have the right to obtain and transfer their data to different service providers.
Right to objectData subjects have the right to object to the processing of data at any time based on their particular situation. This includes objecting to profiling unless it is in the ‘public interest’ or exercised lawfully by an official authority. We will only process data under lawful grounds.
Right not to be subject to decisions based on automated processingWe do not use any automated processing that results in any automated decision based on a data subject’s personal information.
Using your rightsIf you wish to invoke any of these rights, you can email us email@example.com
Data BreachesWe will report any unlawful breach of data as required by the GDPR within 72 hours of the breach occurring, if it is considered that there is an actual, or possibility, that data within our control including the control of our data processors, has been compromised. If the breach is classified as ‘high risk’ we will notify all data subjects concerned using an appropriate means of communication. We will report any relevant breaches to the ICO, see below.
Questions and queriesIf you have any concerns about how we handle your data, you can contact the Data Controller by email to firstname.lastname@example.org or write to Ignition at Odeon House, 146 College Road, Harrow, HA1 1BH.
ComplaintsIf you wish to raise a concern about the use of your data, you can contact us by email to email@example.com. Alternatively, you can formally raise a concern or complaint to theInformation Commissioner’s Office (ICO) directly on 0303 123 1113, or see the options for reporting issues on https://ico.org.uk/concerns/