The policy: This privacy policy notice is served by Purdicom, Ltd, Woolley Barns, Wantage, OX12 8TA, UK under the website; www.purdi.com. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information through the business and while you browse or use this website and its subdomains and other properties such as store.purdi.com and landing.purdi.com. If you do not agree to the following policy you may wish to cease viewing / using this website, and or refrain from submitting your personal data to us.
Policy key definitions:
- “I”, “our”, “us”, or “we” refer to the business, Purdicom, Ltd.
- “you”, “the user” refer to the person(s) using this website.
- GDPR means General Data Protection Act.
- PECR means Privacy & Electronic Communications Regulation.
- ICO means Information Commissioner’s Office.
- Cookies mean small files stored on a user’s computer or device.
Key principles of GDPR:
Our privacy policy embodies the following key principles; (a) Lawfulness, fairness and transparency, (b) Purpose limitation, (c) Data minimisation, (d) Accuracy, (e) Storage limitation, (f) Integrity and confidence, (g) Accountability.
Processing of your Personal Data
Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.
Lawful basis: Consent
Where our purpose for processing is: To inform you of promotions and events or simply to reply to any questions you might have contacted us with. We’ll try to limit what we send you though to things that are relevant to you.
Which is necessary because: We have an awesome open day and other events that can help increase your product knowledge, get you in front of the right people and save you money.
We process your information in the following ways: Email, telephone, online chat or your preferred choice of communication.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: We do share your personal information with third parties to be sure that if you have revoked consent, that request is honoured.
Lawful basis: Contract
Where our purpose for processing is: Necessary to fulfil contractual obligations.
Which is necessary because: We have a contract that requires us to do so.
We process your information in the following ways: Within our ERP software that is hosted within the EU.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists or a legal obligation to process the data is no longer required.
Sharing your information: We do share your personal information with third parties when necessary, or contractually obligated to do so. These parties may be outside of the EU. Your rights are not affected and any third parties are controlled by Adequacy Status and/or a Data Protection Agreement
Lawful basis: Legal obligation
Where our purpose for processing is: Legally required.
Which is necessary because: We have a legal obligation, for instance, if you purchase an OFCOM license through us.
We process your information in the following ways: Within our ERP software; as legally required.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent or a legal obligation no longer exists.
Sharing your information: We do share your personal information with third parties where legally required to do so.
Lawful basis: Vital interests
Where our purpose for processing is: To protect your vital interests.
Which is necessary because: We care.
We process your information in the following ways: To be honest, we can’t think of many situations within our customer base where this would apply. We do need to let you know of this though in case of an emergency situation, in which case we’d process the information as necessary only to protect your vital interests.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: We do share your personal information with third parties only if necessary to protect your vital interests.
Lawful basis: Legitimate interests
Where our purpose for processing is: Necessary for the legitimate interests of the company.
Which is necessary because: It has been determined such after balancing our interests with your interests, rights and freedoms.
We process your information in the following ways: Communication via written or electronic means, retention in our ERP software hosted within the EU.
Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: We do not share your information with third parties unless necessary.
Lawful basis: Special category data
Where our purpose for processing is: Necessary to provide for your dietary requirements
Which is necessary because: If you attend an on-site course, we’ll feed you. If you have a specific dietary requirement, we’ll accommodate that. Some health issues are managed using a specific diet and, while we don’t need to know of any health issues you have, we would need to know your dietary requirements ahead of time. Our office is wheelchair accessible and staff will always be happy to assist as necessary or requested.
We process your information in the following ways: Internally only on a need to know basis.
Data retention period: We may continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: We do not share your information with third parties.
If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally-identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State
- Usage Data
Usage Data
Usage Data is collected automatically when using our website or its subdomains (store.purdi.com or landing.purdi.com).
Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our site that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access our website by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that your browser sends whenever You visit our website or when you access our site by or through a mobile device.
Your Individual Rights
Under the GDPR your rights are as follows. You can read more about your rights in details here;
- the right to be informed;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object; and
- the right not to be subject to automated decision-making including profiling.
You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data.
We handle subject access requests in accordance with the GDPR. These rights can be exercised by contacting dpo@purdi.com.
Internet Cookies
We use cookies on our websites to provide you with a better user experience. We do this by placing a small text file on your device/computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display or to keep you logged where applicable.
Some cookies are required to enjoy and use the full functionality of this website and/or its subdomains.
Data Security and Protection
We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.
Fair & Transparent Privacy Explained
We have provided these explanations about user privacy and the way we use this website, store.purdi.com and landing.purdi.com to help promote a transparent and honest user privacy methodology.
Email Marketing Messages and Subscription
Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the “Processing of your personal data” above. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.
Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.
Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences.