(General Data Protection Regulation Policy hence forth referred to as GDPR within this document)
Moxhams ltd is committed that Personal and professional data must be processed lawfully, fairly, and transparently; collected for specified, explicit and legitimate purposes; be adequate, relevant and limited to what is necessary for processing; be accurate and kept up to date; be kept only for as long as is necessary for processing and be processed in a manner that ensures its security. This policy updates any previous data protection policy and procedures to include the additional requirements of GDPR which apply in the UK from May 2018. The Government have confirmed that despite the UK leaving the EU, GDPR will still be a legal requirement.
Moxhams requires that everyone within the Company must understand the implications of GDPR
Moxhams will carry out all processes and procedures regarding any issues under GDPR as follows: –
Submitting Personal Information
- When personal information is submitted to Moxhams we have legal obligations towards you in the way we deal with that information.
- All personal information must be collected fairly.
- You may be asked to submit personal information about yourself (e.g. name, address, and telephone number). Whenever you provide personal information, we undertake to treat that information in accordance with this policy.50
Use and Disclosure of Personal Information
- Moxhams only uses personal information to deal with inquiries, consultations and for providing services to the client.
- Moxhams does not sell personal information to any third parties.
- We generally do not share personal information with any third parties other than when relevant to undertake work on the client’s behalf When sharing information, the third party must agree to protect the privacy of personal information in the same manner as Moxhams and adhere to all current legislation regarding GDPR
- We will only hold personal data on our systems for a strictly limited period of time. For the most part the time will be set as a matter of internal policy and will be the minimum necessary for our use.
Access to your Personal Information
- You have the right to request a copy of the personal information Moxhams holds about you and your company, please send request to firstname.lastname@example.org or phone 023 80556644 (proof of ID will be required)
- Moxhams will immediately correct any inaccuracies in the personal information on request.
- We may share your information with credit reference agencies and other companies for use in credit decisions, for fraud prevention and to pursue debtors.
- We would like to send you information about our own services by post, telephone, and email.
- To opt in / out of our marketing services, please email: email@example.com
- We may also offer you the opportunity to participate in consultation processes.
Users under age 18
- If you are under 18 years of age, please make sure that you obtain your parent/guardian’s permission beforehand whenever you provide personal information to Moxhams on its website or by other means.
Security of Personal Information
- We share the general concern over the safety and security of personal information on the Internet and have implemented procedures to promote the safety and security of information we collect online.
- Moxhams may collect and process any Personal Data that you volunteer to us in our website’s forms, such as when you register for an account or sign up for information and newsletters.
- Such Personal Data may comprise your IP address, first and last name, your postal and email address, your telephone number, your job title, your areas of interest in Moxhams products and services, and certain information about the company you are working for (company name and address)
- Moxhams may gather data about visits to the website, including numbers of Visitors and visits, Geo-location data, length of time spent on the site, pages clicked on or where Visitors have come.
- Moxhams will not retain data longer than is necessary to fulfil the purposes for which it was collected or as required by applicable laws or regulations.
Data Protection Officer
All aspects of Data protection at Moxhams including information audits, safe disposal of information, policy and procedure reviews etc.is the responsibility of The General manager (Derek Gibb)
For matters relating to privacy and data protection please contact: –
Derek Gibb,General manager
GDPR requires continued care by all staff within Moxhams regarding the sharing of information about individuals, whether as a hard copy or electronically. A breach of the regulations could result in the company or individual facing legal proceedings. It is therefore important that all members of staff fully understand and adhere to all the company’s policies and procedures regarding GDPR
GDPR gives individuals rights with some enhancements to those rights already in place:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- The right not to be subject to automated decision-making including profiling.
The two enhancements of GDPR are that individuals now have a right to have their personal data erased (sometime known as the ‘right to be forgotten’) where their personal data is no longer necessary in relation to the purpose for which it was originally collected, and data portability must be done free of charge. Data portability refers to the ability to move, copy or transfer data easily between different computers.
If a request is received to delete information, then the person responsible for GDPR must respond to this request within a month.