Privacy Policy
Introduction
Collection of your information
Use of your information
to help us identify you;
to enable you to receive the service you have requested; to communicate with you generally;
research, survey completion and profiling;
statistical analysis and behavioural analysis;
to improve the services provided;
to detect, investigate and prevent activity we think may be potentially illegal, unlawful or harmful, including:
fraud prevention and detection (including credit scoring and credit checking where we have sought your consent);
to enforce our Privacy Policy, Terms and Conditions or Acceptable Use Policy;
for management and auditing of our business operations including accounting
to comply with legal and regulatory obligations, requirements and guidance
Keeping in touch
We may also contact you in regard to relevant surveys, or in connection with competitions which we may run for Clients.
Retaining your personal information
For as long as we have reasonable business needs, such as managing our relationship with you and managing our operations; and/or
Retention periods in line with legal and regulatory requirements or guidance (which will take priority)
Third parties
Cookies
Please refer to our Cookie Policy
Security
Internet
Transmission of Data Overseas
- The country that we send the information to might be approved by the European Commission.
- The recipient company might have signed a contract obliging them to protect your information.
- The recipient is located in the US and is a certified member of the EU-US Privacy Shield scheme.
In other circumstances the law may permit us to otherwise transfer your information outside the EEA. In all cases however, we will ensure that any transfer of your information is compliant with the Data Protection Legislation.
Your rights
Right to rectification: You have the right to have personal data rectified if inaccurate or incomplete. Where the personal data in question has been disclosed to a third party, they will be made aware of the rectification where possible. Requests are to be made in writing, electronically, and will be handled within one month of receipt of the request.
Right to erasure: You have the right to request the deletion or removal of personal data in the following circumstances:
Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
When you withdraw consent.
When you object to the processing and there is no overriding legitimate interest for continuing the processing.
The personal data was unlawfully processed (i.e. otherwise in breach of the GDPR).
The personal data has to be erased in order to comply with a legal obligation.
This does not provide an absolute “Right to be forgotten”. Where the personal data in question has been disclosed to a third party, we will inform them about the erasure of the personal data, unless it is impossible or involves disproportionate effort to do so. Personal data will be erased by removal from our internal and cloud servers.
Right to restrict processing: You have a right to ‘block’ or suppress processing of personal data if you contest its accuracy; have objected to the processing; processing is unlawful and you oppose erasure; we no longer need the personal data but you require the data to establish, exercise or defend a legal claim. Where the personal data in question has been disclosed to a third party, we will inform them about the restriction on processing of the data, unless it is impossible or involves disproportionate effort to do so.
Right to data portability: You have the right to obtain and reuse your personal data for your own purposes. Requests are to be made in writing, electronically, and will be handled within one month of receipt of the request.
Right to object: You have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics. Requests will be dealt with by immediate effect with no right for refusal.
You also have the right to make a complaint with the Information Commissioner at www.ico.org.uk if you think that any of your rights have been infringed by us.
All requests will be dealt with in your own merit, and in accordance with the Data Protection Legislation guidance.
Should a data breach occur, we have compliant procedures in place to investigate and report the matter to the Individual. In the event of a breach, it will be reported to you within 72 hours of discovery. A record of any breaches will be kept by the company.
You can exercise your rights by contacting us using the details set out in the “Contact Address” section below.
Changes to the privacy policy
Contact Address
Ian Harrop & Associates
19A Graham Street
Edinburgh EH6 5QN
Email – [email protected]
Website – www.ianharrop.co.uk
Need help?
If you have any questions or need help choosing the right visa, please call us or complete the form below and we’ll get back to you as soon as we can.