1. Introduction
This privacy notice explains what personal information we collect about those who visit our website and communicate with us, how we use it, the circumstances in which we may disclose it to others and how we keep it secure.
We are committed to protecting and respecting your privacy. If you have any questions regarding this privacy notice and our approach to privacy, please contact our Data Protection Officer (DPO) at dpo@metadvice.net.
2. Links to other websites
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.
3. Who we are
4. The information we process
We obtain information about you when you use our website and subscribe to our e-newsletter. You are under no obligation to provide personal information, with the caveat that your refusal to do so may prevent you from using certain portions of Metadvice’s services.
In cases where we indirectly receive personal data as a data controller, we’ll contact you to let you know we are processing your personal information if it is not disproportionate or prejudicial to do so.
5. Categories of personal data
The data to be processed by Metadvice via the website will therefore include:
- Personal data;
- Information which will be subject to the common law duty of confidentiality;
- Pseudonymised (non-confidential) data.
6. The lawful basis for the processing of personal data
The list below describes the personal data we collect and our lawful basis for processing this data. When we process data on the basis of legitimate interests, we apply the following test to determine whether it is appropriate:
- Purpose – is the purpose of processing personal data legitimate?
- Necessity – is the processing necessary to fulfil that purpose?
- Balance – do the individual’s interests, rights or freedoms override the legitimate interest?
The following purposes for the collection of personal data will arise via the use of our website:
- When providing appropriate information via email, video conferencing, or telephone about products and services that you have requested via subscribing to our newsletter, the lawful basis that will apply is consent.
- To provide further, related, information via email, video conferencing, or telephone about the identified area of interest, the lawful basis that will apply is legitimate interests.
- To enable data subjects to exercise their rights over personal data, the lawful basis that will apply is compliance with a legal obligation.
7. Automated decision-making or profiling
We do not undertake any automated decision-making or profiling in relation to your personal data.
8. Your data protection rights
The rights available to you depend on our reason for processing your information. Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
You can contact us to take up any of these rights via email at the following email address: dpo@metadvice.net.
9. Sharing your information
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information such as share it with other organisations unless we have instructed them to do it. They will hold your personal data securely and retain it for the period we instruct.
In some circumstances, we are legally obliged to share information. For example, to comply with/under a court order. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision-making.
10. International transfers
When it is necessary for us to transfer your personal data outside of the UK, this will only be done in accordance with the UK GDPR and the Data Protection Act 2018 (DPA 2018). All international transfers will only take place if it is compliant with the relevant legislation and the appropriate technical and organisational safeguards will be in place.
11. Use of cookies
12. How to make a complaint
13. Changes to this privacy notice
We reserve the right to modify this privacy notice at any time, so please make sure to review this frequently. All changes will apply with immediate effect.