Hambleton Pet ServicesPrivacy Policy – Personal InformationGeneral Data Protection Regulation 2018
Introduction
1. On 25 May 2018, the United Kingdom will replace the Data Protection Act 1988 (DPA) with the General Data Protection Regulation 2018 (GDPR). The purpose of this change in legislation is to fully update data protection laws in respect of the storage and use of users’ personal information.
How Does This Affect Hambleton Pet Services?
2. Hambleton Pet Services (HPS) is a small business, yet is still legally obliged to secure and safeguard clients’ personal information and to maintain a record of any data forwarded to a third party, whether by financial transaction or otherwise.
What Information Does HPS Hold On Its Clients?
3. The personal information HPS has recorded on local computer systems is;
a) Any data submitted by someone via the contact form at
hambletonpetservices.co.uk; this information is automatically emailed to contact@hambletonpetservices.co.uk and is automatically downloaded. The mail software solely used for this purpose is password protected. THE HAMBLETON PET SERVICES WEBSITE ITSELF DOES NOT HOLD ANY PERSONAL INFORMATION.
b) Any data submitted via the HPS Facebook Page (including Facebook’s messaging service), Twitter, Instagram and YouTube accounts; the accounts are all password protected and administered only by the HPS owners.
c) The name and address of a client via cloud-based software (See paragraph 5, below).
d) Any information sent via cellular/data text message to any telephone number operated by HPS.
4. HPS also holds the data contained on any hardcopy forms completed by a client. All hardcopy information (including that which is contained on carbon-copies of manuscript invoices) is securely stored at the HPS address. It is worthy of note that HPS moved to an electronic data recording system in March 2017, although this does not preclude the hardcopy recording of information if a client does not have access/cannot access the HPS website or social media accounts.
Cloud-Based Third-Party Software
5. HPS uses cloud-based third-party software to record service requests and service agreements, and to forward electronic invoices to clients. The data held is that which has already been submitted via means described at Paras 3 a), b), c) and d), above.
6. All internet-based accounts as described throughout this Policy (with the exception of hambletonpetservices.co.uk) are protected by the host’s website Hyper Text Transfer Protocol Secure (HTTPS). Whilst all accounts are password protected, HPS cannot guarantee the security of clients’ data contained on the servers of any internet-based or third-party software provider.
Access To Your Personal Information
7. If a client or former client wishes to know what data is held on them by HPS, they can do so by submitting a written (including electronic) request via any means to HPS. They will receive any results within one calendar week.
Deletion Of Personal Data – The ‘Right To Be Forgotten’
8. If personal data is no longer necessary to the purpose for which it is intended, it will be deleted. If a client/prospective client wishes for personal data to be deleted, they can do so via written request (via any means). They will receive confirmation of such within one calendar week.
Transferring Data To Third Parties
9. HPS reserves the right to move personal information to other services or systems, without notice to the client, which have been identified to benefit the service HPS provides.
10. HPS WILL NOT sell or otherwise forward the personal information of any client/prospective to any third party.
Data Breaches
10. Should a personal information breach occur on the part of a software provider, HPS will inform the client immediately. It is the responsibility of that provider to inform their respective data protection authority (in the UK it is the Information Commissioner’s Office). Should the breach occur on the part of HPS, the UK Information Commissioner’s Office will be informed within 72 hours, following investigation into the breach. The client will be informed of the breach and briefed as to what steps to take.
Enquiries
11. Should a client or prospective client have any comments or questions regarding the use and protection of their personal information by HPS, they should contact HPS in the first instance.
To access a copy of this document, click HERE.
Copyright Hambleton Pet Services 2018
