The above table does not apply to special category personal information, which we will only process with explicit consent.
Change of purpose
We will only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
- Marketing communications
- Promotional offers by us
We would like to send you information about news and future events, which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by email.
- Third-party marketing
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
If you have previously agreed to be contacted in this way, you can unsubscribe at any time by:
- contacting us (see below: ‘How to contact us’); or
- using the ‘unsubscribe’ link in emails.
For more information on your rights in relation to marketing, see ‘Your rights’ below.
- Who we share your personal information with
We may share your personal information with:
- third parties we use to help deliver our services to you,
- other third parties we use to help us run our business, for example, marketing agencies such as Zool;
- our professional advisers
We may share personal information with law enforcement or other authorities if required by applicable law.
We may also need to share some personal information with other parties, such as potential buyers of some or all of our business or during a re-structuring. Usually, information will be anonymised but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.
We will not share your personal information with any other third party.
- Transferring your personal information out of the UK and EEA We do not transfer your personal data outside the UK.
- Data retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation with respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.
In some circumstances you can ask us to delete your data: see below for further information.
In some circumstances, we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
- Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
- Your legal rights
You have the following rights: