Envallan Ltd Privacy Policy - 09-Oct-2023
This policy outlines the responsibilities of Envallan Ltd with regards to the collection, processing, storage and disposal of personal data collected from clients.
1. What is Personal Data?
Personal data is any data that can be used to identify a living person. The Personal Data that Envallan Ltd currently collects and processes are:
name
address
email address
phone number
2. Where is Personal Data collected from?
All Personal Data collected by Envallan Ltd is collected directly from you in the form of email, phone calls, website contact form and verbally during meetings.
3. Why is Personal Data collected?
Personal Data collected by Envallan Ltd is used for the following purposes:
create and provide services to our clients
create invoices
create invites for calls and meetings
marketing activities with express permission from clients
4. Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
Your consent. You are able to remove your consent at any time. You can do this by contacting: info@envallan.com
We have a contractual obligation.
We have a legal obligation.
We have a vital interest.
5. Where is Personal Data collected by Envallan Ltd stored?
All collected data are stored digitally on PC and Cloud Storage. No physical copies are held.
All hardware and accounts are password protected and we take every reasonable precaution to ensure personal data is safe.
5. How long is Personal Data stored for and how is it disposed of?
Information such as names and email addresses, are kept indefinitely to provide continuing services to clients.
Your names, contact numbers, addresses and email addresses collected on invoices are kept for a period of 5years where VAT has not been collected and 7 years where VAT has been collected in accordance with HMRC policy. Upon reaching this date this Personal Data is manually, permanently deleted.
6. Your Personal Data protection rights
Under Data Protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your Personal Data.
Your right to rectification - You have the right to ask us to rectify Personal Data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your Personal Data in certain circumstances.
Your right to restrict processing - You have the right to ask us to restrict the processing of your Personal Data in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your Personal Data in certain circumstances
Your right to data portability - You have the right to ask that we transfer the Personal Data you gave us to another organisation, or to you in certain circumstances.
Upon completion or termination of services, you may request your Personal Data be erased at any time with exception of invoices which must be retained by law as detailed in section 5.3.
If you wish to make a request, please contact us at:
info@envallan.com or Envallan Ltd, 13 Reapers Close, Nuneaton, Warwickshire, CV10 0FE
7. Data Breaches Policy
In the unlikely event of a data breach, Envallan Ltd will inform affected parties within 48hrs of becoming aware of the breach in writing. Details of what data has been compromised, the date of the breach and if known the nature of the breach will be shared with affected parties.
Should a data breach occur, all passwords for storage equipment and software will be changed to reinstate secure storage.
8. How to complain
If you have any concerns about our use of your Personal Data, you can make a complaint to us at:
info@envallan.com, or Envallan Ltd, 13 Reapers Close, Nuneaton, Warwickshire, CV10 0FE
You can also complain to the Information Commissioner's Office if you are unhappy with how we have used your data:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113 | ICO website: https://www.ico.org.uk