Privacy Policy.

Purpose

The Company is committed to being transparent about how it collects and uses personal data, and to meeting its data protection obligations. This policy sets out the organisation’s commitment to data protection, and individual rights and obligations in relation to personal data.

What is personal data?

‘Personal data’ is any information that relates to a living individual who can be identified from that information. Processing is any use that is made of data, including collecting, storing, amending, disclosing or destroying it.

‘Special categories of personal data’ means information about an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation and genetic and biometric data.

‘Criminal records data’ means information about an individual’s criminal convictions and offences, and information relating to criminal allegations and proceedings.

When do we collect your personal data, how and why do we use it?

We Collect personal data about:

• Current and former employees and workers
• Potential employees – those who apply or register interest for vacancies on our website
• Individuals/Groups/Businesses who deal with our organisation e.g. customers, suppliers, trade and industry bodies
• Visitors who visit our website

Personal data is only kept for as long as necessary for the purpose which we use it.

How do we protect your data?

The organisation takes the security of your data seriously. The organisation has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees and workers in the performance of their duties.

Individual rights

As a data subject, individuals have a number of rights in relation to their personal data.

Subject access requests

Individuals have the right to make a subject access request – this is where you request access to a copy of your personal data.

Other rights

Individuals have a number of other rights in relation to their personal data. They can require the Company to:

• rectify inaccurate data;
• stop processing or erase data that is no longer necessary for the purposes of processing;
• stop processing or erase data if the individual’s interests override the organisation’s legitimate grounds for processing data (where the organisation relies on its legitimate interests as a reason for processing data);
• stop processing or erase data if processing is unlawful; and
• stop processing data for a period if data is inaccurate or if there is a dispute about whether or not the individual’s interests override the organisation’s legitimate grounds for processing data.

Making contact

If you would like further information or a full copy of our data protection policy or would like to exercise any of your rights in relation to your personal data, please email us at our Group email address: gdpr-information@bluesquare.uk.com.

Changes to this policy

We reserve the right to update this policy at any time, and we will publish a new policy when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.