top of page

Privacy Policy


Under the European Union directive known as the General Data Protection Regulation (“GDPR”) which is due to be incorporated into UK law by the Data Protection Act 2018 we, as the data controller in respect of that personal data, are required to provide you with a set of specific information about how we will use, hold and retain this data as well as making you aware of various rights that you have under the related legislation. We have set this information out below in this note.


Should you have any queries about the manner in which we process your personal data please contact Private Practice VA Data Controller:
Chantelle Woodard as follows:
Email: chantelle@privatepracticeva.co.uk
 

 

Why we process your personal data


We process your personal data for the following purposes:

• In order to meet our legal obligations;
• Where the processing we carry out is necessary for the performance of a contract we have with you or in order to take steps at your request prior to entering into a contract with you; including to enable us to enter into, administer and perform a contract with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; and
• Where you have given us your consent to the processing of your personal data for one or more specific purposes.
• We may use your personal data to provide you with marketing information, promotions and new events and offerings information. We will only use your personal data to provide you with marketing information, promotions and new events and offerings information where you have given us your specific consent to do so.

 

In line with the requirements of the General Data Protection Regulation (EU) 2016 / 679 (“GDPR”) and UK Data Protection Act 2018 (DPA) we have reviewed and updated our policies, processes and procedures accordingly.

 

When you become a supplier:

  • Contact data

  • Name, role

  • Email address

  • Phone number/s

  • Postal Address

  • Company name, additional nominated contact person’s email address and phone number

 

Legal basis for processing data

Your consent

  • When you use our ‘Contact us’ form, you are agreeing to us using your data in order to contact you for the reason specified on the form

  • When you apply for a job via our website, you are providing personal details by consent in order for us to process your application

  • When using our site, without disabling session cookies (using your browser settings), you are agreeing to us using session cookies to gather information. Please see our Cookie Policy for more information.

 

Performance of Contract

  • When you become a client or supplier, we require certain personal information in order to provide services to you under our contractual agreement.

  • When you become an employee or consultant, a separate Privacy Notice will be provided covering use of your personal data.

Legitimate Interests: means that the processing of your personal data is necessary for the purposes of our legitimate interests or by a third party and those interests are considered to be sufficient to override your interests or fundamental rights and freedoms which require protection of your personal data.
What data may be collected?

 

Any of the following data may be collected:
• Name and title
• Contact information including an email address and telephone number
• IP address
• Web browser type and version
• Operating system
• Contact details as supplied on the contact form emailed to Private Practice VA

Is it a legal (statutory or contractual) requirement for you to provide us with your personal data?
Where we process your personal data on the basis of Necessity or Legal Compliance please be aware that if you object to our processing your personal data on this basis (and no other lawful basis for that processing applies) it is likely that we will not be able to provide you with (or continue providing you with) the goods or services that will or are providing to you.

 

Who we may pass your personal data to:
Debt collection agency – for unpaid invoices when all attempts to obtain payment and/or contact have failed.

 

Do we pass your personal data outside of the European Union:
We do not pass your personal data outside of the European Union.

 

Contact Data Is used to respond to your queries, requests or process your application for a job with us when using the Contact Us form or the ‘Apply’ form. This data is stored for 24 months unless you become a client with us and for 7 years thereafter unless we are required to keep the data for legal or regulatory purposes

 

Client Data This data is used to register you as a client and perform contracted services to you. This data is stored for as long as you may be a client with us and for seven years thereafter for legal reasons.

 

Supplier Data This data is used to register you as a supplier, for the performance of our contract together. This data is stored for as long as you may be a supplier with us and for seven years thereafter for legal reasons.

 

Your Data Protection Rights:

As a “data subject” under the DPA and GDPR you have a set of specific rights. We are required to make you aware of the existence of these rights. They are in outline:
• The right to request from us, as the Data Controller, access to your personal data;
• The right to request rectification of your personal data;
• The right to request erasure of your personal data;
• The right to request a restriction on the processing of your personal data
• The right to object to the processing of your personal data; and
• The right to data portability
Your right to withdraw consent where processing is based on consent.

Where any part of our processing of your personal data is based on your consent you may withdraw your consent to that processing at any time.

 

Cookie Data We use the information in line with our Cookie Policy here. The information we collect is aggregated and anonymised for our internal use and not passed onto any third parties. We only use that information to inform any changes to the website

Your right to complain to the Information Commissioners Office.
You have the right to lodge a complaint about our compliance with the DPA with the applicable regulator for data protection.
This is the Information Commissioners Office. For more information you can visit their website at www.ico.gov.uk

 

Use of automated decision making or profiling:
We do not carry out automated decision making or profiling

bottom of page