Privacy Policy

GDPR allows for the processing of personal information for our legitimate business interests in terms of direct marketing.

‘Legitimate interests’ means the interests of our company in conducting and managing our business. This means we can give you the best, and most secure, services and products.
For example, we have an interest in making sure our marketing is relevant to you, so we may process your information to send you marketing tailored to your interests.

When we process your personal information for our legitimate interests, we consider and balance any potential impact on you (both positive and negative), and your rights under data protection law. Our legitimate business interests do not automatically override your interests. We will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

You have the right to object to processing that is based on our legitimate interests.

We are committed to protecting your personal information. We’re also committed to being transparent about what information we hold, and for what purpose.
This policy explains:
• How we collect personal information
• What information we collect
• Debit and credit card information
• How we use your information
• Who we share your information with
• How we protect your information
• How long we keep your information
• Your rights
• The data protection regulator

The terms of this policy may change, so please check it from time to time.

If you have any queries about this policy please contact:

The Data Protection Officer, Colin Sanders Associates, 43 The Chase, Driffield, YO25 5FJ.

This policy is written in accordance with the General Data Protection Regulation (GDPR).

How do we collect personal information

Personal information is information that can be used to identify you. You give us this when you; 

Ask about our products and services;
Download certain files from our websites,
Respond to surveys
Register for forums or newsletters
Send or receive an email;
Make a job application
Order products or services,
Or provide information in other ways.

What information do we collect?
The information we collect may include your name, email address, IP address (internet protocol address), postal address or telephone number.
We gather information about our websites, such as which pages users visit most often, and which services, events or facilities are most popular. We may also track which pages users visit when they click on links in our emails. Please see our full cookies policy.

How do we use your information?
We use your personal information to give you the information, services, or products you ask for. This could be to:
• process your order
• communicate with you
• give information and advice
• handle a complaint
• provide a service
• carry out an obligation or contract
• process a job application

Who do we share your information with?
We will not sell your details to any third parties. But we may sometimes share your information with:
• our trusted service providers who are authorised to work on our behalf
• associated organisations with whom we jointly provide services
• organisations who help us deliver our services

From time to time we may also exchange your personal information with other organisations to reduce fraud and credit risk. We may also share information with our financial and legal advisers to obtain advice and protect our legal rights.

How do we protect your information?

When we collect your personal information, we use strict procedures and security features to prevent unauthorised access. We also take appropriate measures to make sure the information disclosed to us is:

• kept secure, accurate and up-to-date and
• kept only for as long as it’s needed for the purposes for which it was intended

But while we aim to protect your personal information, we cannot guarantee the security of any information you post, email or transmit by other means to us. You do so at your own risk.

How long do we keep your information?

We regularly review how long we hold personal information. We will hold your personal information on our systems for as long as needed by the relevant activity. If you asked us not to contact you again we would hold a record of that indefinitely. Where your information is no longer required we will dispose of it in a secure manner.

Your rights

You have the following rights in relation to your personal information:

• to ask for a copy of the personal information we hold about you and for us to correct any inaccuracies
• to request us to erase your personal information; to restrict our processing of your personal information, or to object to our processing of your personal information

If you want to exercise these rights, please write to;

The Data Protection Officer, Colin Sanders Associates, 43 The Chase, Driffield, YO25 5FJ

We will respond within 30 days, once we receive your written request.

The data protection regulator

You can get more information and advice about data protection or reporting a concern about data protection from:

Information Commissioner’s Office
Wycliffe House
Water Lane

Helpline: 0303 123 1113

From outside the UK: +44 1625 545 745