Here at EXDS Ltd we take your privacy seriously and will only use your personal information to administer your account and to provide the products and services you have requested from us.
Data Controller's Contact Details
EXDS is the Data Controller for the personal information we process. There are many ways you can contact us, including by phone, email and post. • Contact number: 01908 648588 • Email: firstname.lastname@example.org • Postal address: EXDS 39 Barton Road, Water Eaton Industrial Estate, Bletchley, Milton Keynes, MK2 3HW
Data Protection Representative's Contact Details
Our Data Protection Representative is Steve GRIMBLEY. You can contact them at email@example.com or via the postal address above. Please mark the envelope 'Data Protection Representative'.
How do we get information?
Most of the personal information we process is provided to us directly by you for one of the following reasons: • You have retained our services. • You have made an enquiry to us. • You have made an information request to us. • You wish to attend, or have attended, an event. • You have applied for a job or secondment with us. • You are representing your organisation. • You have made a complaint to us.
Your Data Protection Rights:
Under Data Protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
• Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
• Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
• Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing
You have the right to object to processing of your information in certain circumstances.
• Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies in certain circumstances. Full details are available in our Data Subject Access Policy.
Sharing your information
We will not share your information with any third parties for the purposes of direct marketing. We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Your right to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at firstname.lastname@example.org and we will respond.
How you can contact us:
• Calling our helpline
When you call our main helpline (01908 648588), we collect Calling Line Identification (CLI) information. This is the phone number you are calling from (if it's not withheld). We hold a log of the phone number, date, time and duration of the call, but do not audio-record the call itself. We hold this information for 90 days.
We use this information to understand the demand for our services and to improve how we operate. We may also use the number to call you back if you have asked us to do so, if your call drops, or if there is a problem with the line. We may also use it to check how many calls we have received from it.
We don't audio record any calls, but we might make notes.
We also hold statistical information about the calls we receive for a number of years, but this does not contain any personal data.
We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with government guidance on email security. Most webmail such as Gmail and Hotmail use TLS by default.
We'll also monitor any emails sent to us, including file attachments, for viruses or malicious software. You must ensure that any email you send is within the bounds of the law.
Visitors to our website
When you visit website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do collect personal data through our website, we'll be upfront about this. We'll make it clear when we collect personal information and we'll explain what we intend to do with it.
• Search engine
Our website search and decision notice search is powered by Funnelback. Search queries and results are logged anonymously to help us improve our website and search functionality. No identifiable personal information is collected by us or Funnelback.
• Security and performance
We use a third-party web application firewall from Zenedge UK to help maintain the security and performance of our website. The service checks that traffic to the site is behaving as would be expected.
The service will block traffic that is not using the site as expected. To provide this service, Zenedge processes site visitors' IP addresses.
We rely on the Privacy Shield Framework to transfer this information to Zenedge's servers which are located in the US. They hold the information for seven days.
Eduserv hosts our website in the UK and holds traffic information for 12 months.
Legal basis for processing
The 2 legal basis we rely on to process personal data are: