|Highland Business Services Ltd – Privacy Notice
Highland Business Services Ltd gathers and processes your personal information in accordance with this privacy notice and in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 which may be amended from time to time. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
Who we are
Highland Business Services Ltd are a Company Registered under the Co-operative and Community Benefit Societies Act 2014. Company Reg No. SP2312RS
Highland Business Services Ltd is a “Data Controller”. This means that we are responsible for deciding how we hold and use personal information about you.
This notice applies to current and former members in respect of the personal data which we hold in relation to them. “Personal Information” means any information relating to an identified or identifiable living individual. This notice does not form part of any contractual agreement between us and we may update this notice at any time.
It is important that you read this notice, together with any other privacy policies or privacy notices we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Information that we collect
The personal information that we collect are as follows:-
This data is held to enable us to facilitate trading with you and your company and for invoicing purposes and general account administration. In order for us to continue to keep you up-to-date with all our latest news and offers, we will keep your secure details on our mailing list unless you ask us not to.
How we use your personal data
We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
1. Where we need to perform the contract we have entered into with you.
2. Where we need to comply with a legal obligation.
3. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
4. Where we have your consent.
We may also use your personal information in the following situations, which are likely to be rare:
1. Where we need to protect your interests (or someone else’s interests).
2. Where it is needed in the public interest or for official purposes.
Situations in which we will use your personal information
We need all the categories of information in the list above primarily to allow us to perform our contract with you and to enable us to comply with legal obligations. In some cases we may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests. The situations in which we will process your personal information are listed below.
How long we keep your data
Highland Business Services Ltd will only ever retain personal information in an identifiable format for as long as is necessary and we have retention policies in place to meet these obligations.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances you can ask us to delete your data. In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Sharing and disclosing personal information
We may have to share your data with third parties, including (but not limited to) third-party service providers, and other members.
We require third parties to respect the security of your data and to treat it in accordance with the law.
For legitimate interests of the business your account information may be shared with our appointed Debt Recovery Agents/Solicitors to assist in the collection of an overdue account.
Why might we share your personal information with third parties
We will share your personal information with third parties where required by law, where it is necessary to administer the membership agreement or any other contract between us or where we have another legitimate interest in doing so.
The following third-party service providers process personal information about you for the following purposes:
How secure is your information with third-party service providers
Highland Business Services Ltd takes your privacy very seriously and will only share your information with third parties where there is a legitimate business interest.
We will never disclose, share or sell your data without your consent; unless required to do so by law.
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
When might we share your personal information with third parties
We may share your personal information with third parties for the purpose of:-
If you engage with Highland Business Services Ltd as a user of our website, your data will not be shared with any third party.
Contact for marketing purposes
Highland Business Services Ltd uses Mail Chimp for bulk e-mail delivery services. They act as a processor on our behalf. The only information we provide them with is your trading name & e-mail address.
Subject to any marketing preferences you provide, we may contact you from time to time with details of promotions and offers from other members and key partners, shows and events that might be of interest to you.
You have the right to information and this Privacy Notice is provided to fulfil this right.
You have the right to request access any personal information that Highland Business Services Ltd holds about you
You have the right to request rectification if you believe that we hold any incomplete or inaccurate personal information about you, you have the right to ask us to correct and/or complete the information and we will strive to do so within one calendar month; unless there is a valid reason for not doing so, at which point you will be notified. Highland Business Services Ltd will also advise any third parties holding your data to update as notified.
You have the right to request that your personal information is erased where there is no good reason for us continuing to process it however in doing so Highland Business Services Ltd may not be able to continue to provide the expected service delivery. At your request data will be erased within one calendar month.
You have the right to request restricted processing of your personal data when:
You have the right to object to:
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure. Any requests should be sent to the Managing Director, Glaikmore, North Kessock, IV1 3UD.
Highland Business Services Ltd takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including:-
Highland Business Services Ltd only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to make a complaint.
In the first instance contact:
The Managing Director, Glaikmore, North Kessock, IV1 3UD.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
Cookies are widely used in order to make websites work, or to work more efficiently, and our site relies on cookies to optimise user experience and for features and services to function properly.
Most web browsers allow some control to restrict or block cookies through the browser settings, however if you disable cookies you may find this affects your ability to use certain parts of our website or services. For more information about cookies visit: https://www.aboutcookies.org
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
This Privacy Notice was last updated on 25 May 2018
Become a member today
Complete this contact form to receive membership information.