This Privacy Notice explains how we, Broxton Industries Ltd, Elliott Road, Love Lane Ind Est, Cirencester, GL7 1YS, use the personal data we collect. Broxton collects personal data from you when contact is made between us.
We are the data controller for such personal data relating to you and this Privacy Notice explains how we will process your personal data. Personal data is held on various systems within Broxton and, in some cases, in paper form. All of the information we hold is held securely and only authorised staff can access it. The information that we collect will be held in accordance with the General Data Protection Regulation 2016/679 (the “GDPR”) and, once in force, the Data Protection Act 2018.
There are certain principles that Broxton must adhere to. This means that we will make sure your information:
- Is treated fairly and is only used for the purposes for which we have collected it and for which we have a legal basis for processing.
- Will only be used for the purposes for which it was collected, unless we ask your permission to use it for something else.
- Will not be excessive. i.e. We will not hold information about you that we do not need.
- Will be accurate. You can help us with this by making sure your details are correct on the student portal.
- Will not be kept longer than is necessary
- Will be kept securely so that there is no loss of data or data breaches.
- We will ensure that, where personal data is shared or stored outside of the European Union, there are appropriate safeguards in place to protect your personal data. Any third party organisations that hold personal data (e.g. cloud hosting) will have confirmed their compliance with GDPR before data is processed.
You have certain rights as a data subject under the GDPR. This means that you have:
- The right to gain access to your personal data – You can ask us what information we hold on you.
- The right to rectification – You can ask us to put right any information that you believe is incorrect or where appropriate, given the purposes for which your data is processed, the right to have incomplete data completed.
- The right to erasure – You can ask for information to be removed, although this is a limited right which applies, among other circumstances, when the data is no longer required or the processing has no legal justification. There are also exceptions to this right, such as when the processing is required by law or in the public interest.
- The right to restrict processing – If you feel you are being disadvantaged by us holding information that is inaccurate, you can ask us to stop processing it until we fix it, or come to an agreement.
- The right to data portability – You can ask us to extract your information so that you can use it elsewhere.
- The right to object – You can object to us processing your data for marketing purposes. You can also object to us processing your data when such processing is based on the public interest or other legitimate interests, unless we have compelling legitimate grounds to continue with the processing.
- Where the legal basis for processing your personal data is based on your consent, the right to withdraw your consent at any time.
- Rights in relation to automated decision making and profiling – However, Broxton will never make any decisions about you without any human intervention.
For any information on your rights, or if you have questions or concerns, please contact the Data Protection Officer.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you feel that Broxton is not processing data correctly. You can make a complaint on the ICO’s website: https://ico.org.uk/
Why does Broxton need information about you and what is the purpose of our processing?
We only process data for specified purposes and if it is justified in accordance with data-protection law. Specifically:
- To keep you informed of news and events
- To promote the services we offer
- To fulfil customer orders
- To provide good customer service
What personal data do we hold?
Biographical Details:
Name
Employment Information
Job title
Contact Details:
Business address, email address, phone numbers.
How long will we hold your data?
Information held on computer system will be held whilst you are a current customer or supplier of Broxton and for 2 years after you leave.
Non-trading (no trade for previous 2 years) customer and supplier contacts will be held whilst consent is given for the purpose of receiving marketing communications, and deleted immediately if consent is not given. Consent will be sought annually.
Who might we share your information with?
On occasion we may need to share your data internally and with third parties. The following is a list of organisations with which we may share information. It is not an exhaustive list, but any organisation with which we share information will have confirmed their compliance with the GDPR.
- Our administrative/IT staff
- Internal and external auditors
- Software providers that Broxton use may need access to resolve IT issues
- Cloud Technology providers
Legal Basis
The legal basis under which Broxton processes your personal data is as follows:
- Processing is necessary for the performance of a contract (see GDPR Article 6(1)(b)) or to take steps to enter into a contract.
- Consent given to receive communication
- Legal requirements
