Pavlou Plumbers Data Privacy Notice
Aim
Pavlou Plumbers aims ensure that all data collected is stored and processed in accordance with the UK GDPR and Data Protection Act 2018.
Legislation and Guidance
Definitions
| Term | Definition |
|---|---|
| Personal Data | Data from which a person can be identified, including data that, when combined with other readily available information, leads to a person being identified |
| Special Category Data | Data such as:
|
| Processing | Obtaining, recording or holding data |
| Data subject | The person whose personal data is held or processed |
| Data Controller | A person or organisation that determines the purposes for which, and the manner in which, personal data is processed |
| Data Processor | A person, other than an employee of the data controller, who processes the data on behalf of the data controller |
Data Protection
Principles
- processed lawfully, fairly and in a transparent manner
- collected for specified, explicit and legitimate purposes (‘purpose limitation’);
- adequate, relevant and limited to what is necessary
- accurate and, where necessary, kept up to date
- kept in a form which permits identification of data subjects for no longer than is necessary
- processed in a manner that ensures appropriate security of the personal data
Your rights
- Your right of access – You have the right to ask us for copies of your personal information
- Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances
- Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances
Roles and Responsibilities
Stelios Pavlou has overall responsibility for ensuring that Pavlou Plumbers complies with its obligations. Day-to-day responsibilities rest with Stelios Pavlou. They will ensure that all staff are aware of their Data Protection obligations, and oversee any queries related to the storing or processing of personal data.
Privacy/Fair Processing
We hold Personal Data about our clients, and potential clients. The nature of our business may require our clients to share Personal Data with us so that we can fulfil our contractual obligations to them (lawful basis for processing). Typically, for both our records and information provided by our clients, this will include, but is not limited to:
- First Name
- Last Name
- Contact Number
- Address
We may need to carry out Data Protection Impact Assessments, which will be completed before any data is shared. If we are acting as a Data Processor, this will be subject to a Data Controller/Data Processor Agreement.
We may share data with third parties to support the operational needs and smooth running of our company. These third parties may include, but will not be limited to, facilities providers, consultants engaged by Pavlou Plumbers and specialist software providers. We will not share information with anyone without consent unless the law and our policies allow us to do so. We will ensure that only the data needed to carry out the service required is shared (data minimisation) and the data share will, if required, be subject to Data Protection Impact Assessments and Data Controller/Data Processor Agreements.
We will only retain the data we collect for as long as is necessary to satisfy the purpose for which it has been collected.
Data Storage and Security
Paper based records, digital records and portable electronic devices, such as laptops and hard drives that contain Personal and/or Special Category Data, are compliant with GDPR and are regularly assessed. Unless otherwise requested, the data provided by our clients will be returned to our client compliantly, or destroyed compliantly, within 30 days of the end of the contract.
How to Make a Complaint
If you feel that we have mishandled your or your Personal Data at any time you can make a complaint to Stelios Pavlou by emailing info@pavlouplumbers.com or by or phoning 01244 888801.
Alternatively, you can contact the Information Commissioners Office by visiting their website (https://ico.org.uk/make-a-complaint/) or by calling their helpline on 0303 123 1113.