Privacy Policy

PRIVACY POLICY

This privacy policy tells you what will happen to any personal data that you provide to Amy Pass, T/A Pass it Over when you use my website or contact my organisation. I fully understand that your privacy is important to you, and I am committed to protecting your personal data in line with the General Data Protection Regulation.

This policy explains how I will use, and protect, any information that I gather, whether it be through this website, on the telephone or personal conversations or through my normal business contact with you. Below I have provided contact information if you have any questions on how I use and protect your data. The acceptance of this privacy policy and my cookie policy (see “Cookies” below) is required to make full use of my website.

CONTACT DETAILS

Organisation name: Pass it Over (Amy Pass T/A Pass it Over)

Address: Little Beacons, Beacon Hill, Wickham Bishops, Witham, Essex, CM8 3EA

Telephone number: 07940 718830

Email address: info@passitover.co.uk

I am registered with the Information Commissioner’s Office (ICO).

You can contact Amy Pass on the telephone number or email above. 

Your rights

Under the General Data Protection Regulation (GDPR), you have the right to be informed about:

• the collection and use of your personal data
• my purposes for processing that data
• the retention periods for storing your data (or a guarantee that it will be kept only for as long as necessary)
• who it will be shared with (both in this country and, if applicable, in others: in this case, I will inform you of the safeguards which are applied in that country)
• the legal basis under which I process your data
• the right to withdraw your consent (if consent is the legal basis for processing)
• my “legitimate interest” in processing your data (if that interest is the legal basis for processing)
• details of any data I collect about you from a third party (such as publicly available information)
• the right to lodge a complaint with the ICO
• details of the existence of automated decision-making, including profiling (if applicable).

You also have the right to information that is concise, transparent, intelligible, easily accessible and presented to you in clear and plain language rather than in “legalese”. I encourage you to get in touch with me if you have any questions about this policy statement or my procedures with regard to data processing. This will not in any way affect your rights to complain to the ICO.

Information I collect

I may collect your personal and sensitive personal data such as your name, address, date of birth, contact details, e-mail address and sensitive personal information. I collect this information from client contacts and suppliers to allow me to undertake my services.

How long I keep your information

I will only keep your data for as long as there is either a statutory requirement for me to do so or because I am providing a service to you. If my business relationship has ended with you, I will be required to keep records for accounts and records purposes. 

Why I need this information

I may need to keep your personal information for the following reasons:

• for internal record-keeping
• to manage my internal accounts
• to provide services to you as per our business contract
• to contact you via email, text message or phone if I have a business relationship or you have requested contact from me
• to maintain our business relationship, where you are a client
• if you have provided me with your consent, I may directly market my products and services, and let you know about any updates to my services. You will be able to unsubscribe at any time from receiving any further communications from me
• to third parties where I have retained them to provide services that I, you or my clients have requested – I ensure that any third parties comply with rules regarding privacy and data protection
• to trusted third parties who perform functions on my behalf and who also provide services to me, such as professional advisors or IT consultants. I ensure that any third parties comply with rules regarding privacy and data protection
• I may also release your personal information to regulatory or law enforcement agencies, if they require me to do so by law

The legal basis under which I collect and store data

I can collect and store data under six possible legal grounds under GDPR, these are:

1. consent
2. fulfilment of a contract
3. legitimate interests
4. vital interests
5. public task
6. legal obligation

Applying the data protection principles

I am committed to applying the principles set out in the GDPR, and I strive to ensure that

• personal data is collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
• my procedures are adequate, relevant and limited to what is necessary in relation to the purposes for which they are put in place
• the data I collect is accurate and, where necessary, kept up to date, every reasonable step will be taken to ensure that data that is inaccurate, having regard to the purposes for which it is processed, are erased or rectified without delay
• data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed
• data is processed in a manner that ensures their appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

In applying these principles, I recognise that I have a general obligation to implement technical and organisational measures to show that I have considered and integrated data protection into all data processing activities. 

Access to your data

You can object or withdraw your consent to the use of your personal information at any time. This may affect the services I am able to supply you.

Where Pass it Over is the data controller you are entitled to the following (subject to some legal exemptions):

• request a copy of the personal information of which you are the data subject
• to have any inaccuracies corrected
• to have your personal data erased
• to place restrictions on me processing your data
• to object to processing
• to request your data to be ported (data portability)

You may request details of personal information which I hold about you under the EU General Data Protection Regulation (GDPR) 2018. To make a request to access the data that I hold about you, please request this in writing to the address detailed above. 

Information Commissioner’s Office

For more information on your rights regarding your personal data please visit the IC

https://ico.org.uk

Cookies

A cookie is a small text file placed on your computer or device by my site when you visit certain parts of it and/or use certain features. For example, I may monitor how many times you visit, which pages you go to, traffic data, location data, blogs and other communication data whether required for billing purposes or otherwise. I may also look at the originating domain name of a user’s internet service provider, IP address, operating system and browser type. This information helps me to build a profile of my users. Where appropriate, this data will be aggregated or statistical, which means that I will not be able to identify you individually.

Cookies are also used to remember your settings (language preference, for example) and for authentication (so that you do not have to repeatedly sign in). You can set your browser not to accept cookies and there are a number of websites which explain how to remove cookies from your browser. However, it is possible that some of my website features may not function as a result.

Third party websites

Please note that there are some links on my website to other sites where you may find useful information. This does not indicate a general endorsement of those sites and, as I have no control over how data is collected, stored, or used by other websites. I would advise you to check their privacy policies before providing any data to them.