The aim of this policy is to make sure you know what personal data we collect, why we do it and who we share it with. And to
explain the way we use data to provide the most inspiring, successful experience for you.
How do we collect and process your data?
We will hold your relevant personal information on our internal systems for the purposes of working with you, providing you with information about potential services and developments that may be of interest to you, being an employer or a business partner.
The data that we store will include your name and email address, the nature of your organisation and the services that you may be interested in (from Growing Brands), the nature of the services you provide (as a prospect, client or supplier / partner), employee data, or – in the case of working with the media, bloggers, vloggers and the like – the kinds of topics you cover and how best to work with you.
Our lawful basis for processing your data is either that we have a contract with you, you have consented that we can process your data, or that we have a legitimate interest in processing your data. We do retain data for varying lengths of time depending upon the purpose for which it was collected, but you have the right to request your data at any time, and in most circumstances, to request that it be erased/forgotten. In some circumstances we may combine data about our clients and prospects with publicly available data from the web, social media sites or from Growing Brands previous experience, respecting NDAs and confidentiality clauses where relevant. This information will not – due to the nature of how it is collected – be sensitive or confidential. However, it does help us provide a more bespoke service and ensure that it has a legitimate interest in processing additional data. For example, if you have contacted Growing Brands to request a quote for commercial writing services, we may store data about the sector that you operate in, your organisations social media activity and press presence.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online or through electronic means. Data is stored by third parties only as far as is necessary for processing, and appropriate security mechanisms have been put in place to ensure this continues. These include but are not limited to passwords, encryption and access restrictions, depending on the type and sensitivity of the data.
The Data Protection Act and GDPR give you the right to find out what information we store about you. If you require a copy of this information please email Marc Hitchens (email@example.com) stating that you wish to access your data.
Under the GDPR your rights are as follows. You can read more about your rights in details here;
the right to be informed;
the right of access;
the right to rectification;
the right to erasure;
the right to restrict processing;
the right to data portability;
the right to object; and
the right not to be subject to automated decision-making including profiling.
We always try to handle your data sensitively and sensibly, but if you wish to make a complaint about the way we have handled your data you may do so by contacting us at firstname.lastname@example.org, via post at: Marc Hitchens, Dauntsey Park, Chippenham, Wiltshire SN15 4HT. Or the ICO Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF. Tel: 0303 123 1113