Acoustic specialist consultants

Data Protection Policy

Pace Consult Ltd

Introduction

Anyone who obtains personal data about other individuals is a 'data controller' and is thus regulated by the General Data Protection Regulation 2018 (GDPR). The Regulation controls what can lawfully be done with personal data. Personal data is any information that can identify an individual.

This can include any of the following:

Name
Date of Birth
Address
Email Address (personal or business) IP address is not exhaustive

Information we hold

In order to continue to undertake our work, we hold certain information about our clients and suppliers. This information includes:

Name
Company
Address
Email Address
Telephone Number
Bank Details
Credit Check Reports

The business does not keep records of 'sensitive data' for our clients or suppliers.

How we use the data we hold

The data we hold will only be used for the purpose for which we were given the information. We will never sell the data we hold on our clients or suppliers to third parties. We may occasionally send data subjects information on new legislation which we believe may be of interest, information on new services which we offer or other news regarding the business which may be of interest.

Our obligations

Below is a summary of the legal obligations imposed upon us and the rights that you have under the General Data Protection Regulation 2018 together with our policies about those rights and obligations.

The principles for processing personal data are:

Lawfulness, fairness and transparency;
Purpose Limitation;
Data minimisation;
Accurate;
Storage limitation i.e. not kept longer than necessary;
Integrity and confidentiality.

We are committed to following these principles and to ensuring all our data processing in relation to the data of which you are the subject is lawful. We will take all reasonable steps to ensure that the data we process is accurate. We will retain the data for as long as we are providing you with a service, are likely to provide a service due to an enquiry we have received, or you are providing us with a service.

We will process data in accordance with your rights under the GDRP. Data will be kept in a secure system whether manual or computerised at all times.

Your rights under the act

The GDPR gives individuals certain rights to control how information about them is obtained, used, stored and distributed.

These rights are:

The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and processing.

Pace Consult Ltd - Privacy & Data Security Policy

Rectification of Data

Individuals are entitled to have inaccurate personal data rectified or completed if it is missing. This request can be made in writing or verbally. Pace Consult will rectify data within one month and free of charge. If the request is manifestly unfounded or excessive, taking into account any repetitive nature, has a right to refuse to deal with the request or to charge a reasonable fee. The fee will be based on administrative costs involved in complying with the request.

Right of Access

If the data subject wishes to access the data we hold, the data subject must provide Pace Consult with any information reasonably requested to enable us to be satisfied as to the data subject's identity to locate the information.

Where disclosure of data would necessarily mean that information relating to a third party would be disclosed Pace Consult may refuse to disclose it unless the third-party consents or it is reasonable to disclose the information without such consent.

Direct Marketing

Pace Consult Ltd does not currently use any data we hold for marketing purposes. Should the use of data for direct marketing become practice you will be notified and given the opportunity to opt-out and our policy will be updated accordingly.

Breach

Pace Consult will report any data breaches to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. If the breach is likely to adversely affect the individual's rights of freedoms, the individual must be informed also. Pace Consult must keep a record of any and all personal data breaches.