PRIVACY POLICY 

Carnell Group are committed to protecting and respecting your privacy. Carnell Group operate several websites but will refer to this central policy to provide more information to you about the basis on which any personal data we collect from you, or that you provide, will be processed. 

In this privacy policy, the terms “we”, “our”, “us” are used to refer to Carnell Group company. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. 

INFORMATION WE MAY COLLECT FROM YOU 

We will collect and process the following data about you: 

Information you give us. 
This is information about you that you give us by filling in forms on our site, or by corresponding with us by phone, e-mail or otherwise, when you provide us with information requested by us for the verification of your identity, and when you report a problem with our site. The information you give us may include your name, address, e-mail address, phone number and any comments or information you provide. 

HOW WE USE YOUR INFORMATION 

We use information held about you in the following ways: 

Information you give to us. We will use this information: 

• to carry out our obligations arising from any agreements entered into between you and us and to provide you with the information that you request from us; 

Information we collect about you: 

We use the open-source Plausible Analytics service. The service counts website visits, downloads, etc. Anonymous analytical data will be stored by Plausible, in order to track the usage of a website without collecting any personal data or personally identifiable information. Cookies are not set and all data is in aggregate only.—not even an IP address or browser user agent—is stored. For more information, see the Plausible Data Policy. 

USING YOUR INFORMATION IN ACCORDANCE WITH DATA PROTECTION LAWS 

Data protection laws require that we meet certain conditions before we can use your data in the manner described in this privacy policy. We take our responsibilities under data protection laws extremely seriously, including meeting these conditions. To use your personal data, we will rely on two conditions, depending on the activities we are carrying out: 

• Consent: We may provide you with marketing information about our services or products where you have provided your explicit consent for us to do so. 

• Legitimate interests: To use your personal data for any other purpose described in this privacy policy, we will rely on a condition known as “legitimate interests”. It is in our legitimate interests to collect your personal data as it provides us with the information that we need to provide our services to you more effectively. Effectively, this requires us to carry out a balancing test of our interests in using your personal data (for example, in order to provide you with the information, products and services that you request from us), against the interests you have as a citizen and the rights you have under data protection laws (for example, to not have your data sold to third party marketing companies without your knowledge, or store your personal data in insecure or unstable countries or regions). The outcome of this balancing test will determine whether we can use your personal data in the ways described in this privacy policy (except in relation to marketing, where we will always rely on your explicit consent). We will always act reasonably and give full and proper consideration to your interests in carrying out this balancing test. 

There is no obligation upon you to provide us with any information. If you provide information to us, we will be better able to provide any products information or services. 

HOW LONG WE KEEP YOUR INFORMATION FOR 

When your data is no longer required for the purposes listed above, we will delete it as soon as possible but, in any event, within 15 years. 

Disclosure of your information 

We will only disclose your information to: 

• business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you; 

• law enforcement or fraud prevention agencies, as well as our legal advisers etc. 

We will disclose your personal information to third parties: 

• if we, or substantially all our assets, are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; 

• to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; and 

• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime. 

WHERE WE STORE YOUR PERSONAL DATA 

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA“). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.  

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. 

YOUR RIGHTS 

You have a number of rights under data protection law in relation to the way we process your personal data. These are set out below. You may contact us using the details on our site (or by contacting us directly – details below) to exercise any of these rights, and we will respond to any request received from you within one month from the date of the request. 

Please address any questions, comments and requests regarding our data processing practices to gdpr@ carnellgroup.co.uk. 

Number Description of Right 

Right 1 A right to access personal data held by us about you. 

Right 2 A right to require us to rectify any inaccurate personal data held by us about you. 

Right 3 A right to require us to erase personal data held by us about you. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below). 

Right 4 A right to restrict our processing of personal data held by us about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you require the data for the purposes of dealing with legal claims. 

Right 5 A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation, at your request. 

Right 6 A right to object to our processing of personal data held by us about you (including for the purposes of sending marketing materials to you). 

Right 7 A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or products).