PRIVACY NOTICE

About our notice

This privacy notice tells you what to expect when Burrwood Associates Ltd collects personal information. Burrwood Associates Ltd will, when delivering services, collect and use personal information only which is relevant to the work that we are undertaking and which will be controlled, stored and processed in accordance with the Data Protection Act however it is collected, recorded and used; whether it be on paper, in electronic media form or recorded by other means.

We consider the lawful and correct treatment of personal information by the company as critical in maintaining the confidence of our customers, clients and staff; we therefore manage and process personal information lawfully and correctly.

We will, through appropriate management and by strict application of criteria and controls:

Observe fully the conditions regarding fair collection and use of information.
Meet its legal obligations to specify the purposes for which information is used.
Collect and process appropriate information and only to the extent that it is needed to fulfil operational needs or to comply with any legal requirements.
Ensure that the quality and accuracy of information used is adequate and is maintained.
Apply strict checks to determine the length of time information is held and that it is stored for no longer than is necessary.
Provide the source of where the personal data originates from and whether it came from publicly accessible sources.
Take appropriate technical and organisational security measures to safeguard personal information.
Ensure that personal information is not transferred abroad to countries to which transfers are not permitted under the Regulations.
Ensure that the rights of people about whom information is held are able to be fully exercised under the Regulations.
- These include: the right to be informed that processing is being undertaken, the right of access to one's personal information, the right to prevent processing in certain circumstances and the right to correct, rectify, block or erase information.
- They also include the right to withdraw consent at any time and the right to lodge a complaint with a supervisory authority.

Personal Data

Personal Data defined under the Data Protection Act means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Information is likely to be classed as Personal Data if any of the following criteria are met:

Can a living individual be identified from the data, or, from the data and other information in the possession of, or likely to come into the possession of, the data controller?
Does the data "relate to" the identifiable living individual, whether in their personal or family life, business or profession?
Is the data "obviously about" a particular individual?
Is the data "linked to" an individual so that it provides particular information about that individual?
Is the data used, or is it to be used, to inform or influence actions or decisions affecting an identifiable individual?
Does the data have any biographical significance in relation to the individual?
Does the data focus or concentrate on the individual as its central theme rather than on some other person, or some object, transaction or event?
Does the data impact or have the potential to impact on an individual, whether in a personal, family, business or professional capacity?

The information storage and processing systems used by Burrwood Associates Ltd are certified as compliant. Our system are designed to ensure that:

Everyone handling, managing and working with personal information understands that they are contractually and legally responsible for following the Regulation and good data protection practice.
Everyone handling, managing and working with personal information is appropriately trained to do so.
Everyone handling, managing and working with personal information is appropriately supervised.
Anyone wanting to make enquiries about personal information knows how to do so.
Queries about personal information are promptly and courteously dealt with, in accordance with the Regulation.
Methods of handling, managing and working with personal information are clearly described.
A regular review and audit is made of the way personal information is managed.
Methods of handling, managing and working with personal information are regularly reviewed, assessed and evaluated.
The performance of the methods and process is regularly reviewed, assessed and evaluated.

Principles

Burrwood Associates Ltd adhere to the Principles of Data Protection Act. The principles set out the main responsibilities for organisations. The requirements set out that personal data shall be;

a) Processed lawfully, fairly and in a transparent manner in relation to individuals;

b) Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;

c) Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

d) Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;

e) Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the Regulation in order to safeguard the rights and freedoms of individuals; and

f) Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

Cookies are small text files that are placed on your computer when you visit our site. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. We use cookies and similar technologies for several purposes, including:

Social media. Some of our website includes social media cookies, including those that enable users who are logged in to the social media service to share content via that service.
Feedback. We may use cookies to enable you to provide feedback on a website.
Analytics. In order to provide our products, we may use cookies and other identifiers to gather usage and performance data. For example, we use cookies to count the number of unique visitors to a web page or service and to develop other statistics about the operations of our services. This includes cookies from us and from third-party analytics providers.
Performance. We use cookies for load balancing to ensure that websites remain up and running.

How to control cookies

Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. Most browsers allow you to refuse to accept cookies; however, blocking cookies will have a negative impact upon the usability of some websites.

Information Processing

Data subjects have a right, as set out in the Regulation, to obtain the personal information which is stored and used by us, and can obtain this information by contacting us with the details given in this document. The data comprising the personal information will be delivered to the data subject in a secure manner and in a format which is readily accessible using common proprietary data access tools.

What Information do we Process

The information that we obtain may be dependent upon the nature and context of your enquiry or instruction. The information that we collect can include the following:

We receive basic personal information from companies which we deal with.
The personal information which is obtained and stored consists of name, address, telephone number, date of birth, IP address and location data from cookies such as city or postcode.
We also may collect other information; however this is not personally identifiable.
We hold information we received when making a decision about you and your applications (including information collected from third parties and reference agencies).
We hold details of when you contact us and when we contact you.
We obtain information by recording how persons use our websites by means of embedded technology such as cookies, and by receiving written enquiries and usage data from relevant forms hosted on our website.
Calls to our telephone system may be recorded and Calling Line Identity (CLI) numbers are identified and stored where they are not withheld.
To engage in services some or all of the above personal information is required. Failure to provide the appropriate information where required will result in termination of services.
We also obtain data from third parties.
We protect data obtained from third parties according to the practices described in this statement, together with any additional restrictions that are imposed by the source of the data. These third-party sources vary over time, but have included:
- Data brokers from whom we purchase demographic data
- Service providers that help us determine a location based upon your IP address
- Partners with whom we offer co-branded services or engage in joint marketing activities
- Publicly-available sources such as open government databases or other data in the public domain like social media.

The Purpose of Data Processing

The personal information which we obtain, store and process is necessary and is used to enable us to fulfil our contractual obligations and consents obtained by the data subject.
No automated decision making technology is used.
We may keep details of any phone number(s) that you call us from and use them to contact you.
For marketing purposes we may contact you by telephone or by e-mail or other means to inform you when a publication or presentation which may be of professional interest is available or to enquire or to advise about a service enquiry that you have made, or to invite you to participate in a survey or to attend a commercial event. For information about how to manage, edit or to delete contact data which contains your personal information, please use the contact section at the bottom of this privacy notice.
For advertising purposes we may use personal information contained in e-mail, telephone calls or voicemail, or your documents, or data files to target advertisements to you.
When we are managing applications, we may be given sensitive information such as medical information and criminal background information. We will hold and process this information to allow us to make decisions about you and your application.
When we are required to obtain health information where it is relevant to identify levels of vulnerability, the information obtained is used by administration staff who may inform companies which you are apply for where the information is in the vital interest of the parties.

How to access and control your personal data

You can submit a request to view, edit or delete any personal data that we hold and which is not retained for the purpose of writ or order enforcement.

You may do so by submitting a request in writing via post or email. We will respond to requests within 1 month.

Your marketing choices

You may opt out of receiving marketing information by contacting us at info@burrwoodassociates.com, or by un-subscribing using the link incorporated into all our marketing e-mail communication. Because the data used for marketing may also be used for other necessary purposes, in such cases, opting out of marketing does not stop that data from being collected or stored.

Links to other websites

This privacy notice does not cover the links within this site linking to other websites. We recommend you to read the privacy notices on the websites you visit yourselves.

Changes to this Privacy Statement

We will update this privacy statement when necessary to reflect customer feedback and changes in our services. When we post changes to this statement, we will revise the "last updated" date at the top of the statement. If there are material changes to the statement or in how we will use your personal data, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how we are protecting your information. This privacy notice was last updated on 11th July 2018.

How to contact us

If you have a privacy concern, complaint or a question, please contact us by email at info@burrwoodassociates.com. We will respond to questions or concerns within 1 month. Unless otherwise stated Burrwood Associates Ltd is a data controller for personal data we collect through the products subject to this statement. Our contact details are;

Burrwood Associates Ltd

Lindsey House, 1 Station Road, Weybridge, Surrey, KT15 2AL.

02038547300