This Policy describes how CircuitBuilder International Ltd complies with current legislation in respect of data under its control and obtained via the website, with particular reference to personal data and the General Data Protection Regulation (GDPR).
This policy applies to both automated and manual systems where such data is accessible.
In this Policy the following terms shall have the following meanings:
Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier such as name, identification number, location data etc.
“Data Protection Officer”
The person responsible for the handling of data within CircuitBuilder International Ltd. To be contactable at Room 12, Building B1, Adastral Park, Martlesham Heath, IP5 3RE or via email at firstname.lastname@example.org
“Data Subject / you / your”
The person whose personal data CircuitBuilder International Ltd holds.
CircuitBuilder International Ltd.
Any 3rd party used by the Data Controller to process data.
This means any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of this website.
This means a small text file placed on your computer by CircuitBuilder International Ltd when you visit this website. This allows CircuitBuilder International Ltd to identify recurring visitors and to analyse their browsing habits in order to improve their user experience.
This means all information that the Data Subject submits to the website.
“CircuitBuilder International Ltd / Owner / Us / We / Our”
This means CircuitBuilder International Ltd of Room 12, Building B1, Adastral Park, Martlesham Heath, IP5 3RE.
This means any IT infrastructure that CircuitBuilder International Ltd uses to hold data.
“User” / “Users”
This means any 3rd party that accesses the website and is not employed by CircuitBuilder International Ltd.
This means the website that the Data Subject is currently using and any of its sub-domains.
2. Core Principles
Under GDPR all personal data obtained and held by us will be processed according to a set of core principles which are:
· Processing is lawful.
· Data is collected for legitimate purposes.
· Data collected is limited to what is necessary.
· Data is kept accurate.
· Data is not kept for longer than is necessary.
· Data is held and processed securely.
· Data is not divulged to 3rd parties without your express permission unless required by law.
· All data is held within the EU/UK.
3. Personal Data Collected
CircuitBuilder International Ltd keep several items of personal data that are collected via the website, and these are:
· Email address
· Contact number
· Postal address
4. Our Use of Personal Data
CircuitBuilder International Ltd uses the data collected to enhance its interaction with its customers, to improve its products and services and to comply with any legal requirements.
CircuitBuilder International Ltd conducts periodic checks for consent and relevance of personal data held in our system(s). We delete any data that is no longer required.
No personal data will be disclosed to 3rd parties without the express permission of the Data Subject unless required by law.
All personal data is stored securely at a UK based secure data centre owned by Amazon Web Services.
Should we intend to process personal data for any other purpose than that for which it was collected, CircuitBuilder International Ltd shall notify the Data Subject to get their express permission.
5. Lawful Basis for Processing
We process your personal data solely in order to fulfil our obligations to you. This is allowed in law.
6. Your Rights in Relation to Your Personal Data
Data Subjects have rights under the GDPR. In essence these rights are: the right to be informed, right of access, right to rectification, right to erasure/to be forgotten, right to restrict processing, right to data portability, right to object and rights in relation to automated decision making and profiling.
6.1 The Right to be Informed
You have the right to be informed about how CircuitBuilder International Ltd collects and uses your personal data. This includes the purposes for processing your personal data, the retention periods for that data and who it will be shared with.
In response to a GDPR enquiry CircuitBuilder International Ltd will supply this information in a concise, transparent, intelligible, easily accessible way and in clear and plain language.
To make such a request please contact the Data Protection Officer.
Usually, we will comply with a GDPR request within one month unless the request is particularly complex, in which case we will contact you to inform you that we require an extension. The maximum extension period is two months.
You will be informed if we decide not to take any action as a result of your request. In these circumstances, you have the right to challenge that decision by contacting the Information Commissioner at https://ico.org.uk/
6.2 The Right of Access
You have the right to access your personal data which is held by us. To do so please contact the Data Protection Officer.
6.3 The Right to Rectification
If you have reason to believe that the personal data we hold about you is incorrect, you have the right to have it corrected. If you wish to have your data corrected you should notify the Data Protection Officer.
6.4 The Right of Erasure
We are required to delete the personal data we hold on you in certain circumstances. Those circumstances include:
· where it is no longer necessary for us to keep your data.
· where you have withdrawn consent for us to keep your data (unless required to do so by law).
· where we have unlawfully processed your data.
· where we are required by law to erase your data.
If you wish to make a request for data erasure you should notify the Data Protection Officer.
6.5 The Right of Restriction
You have the right to restrict the use of your personal data in certain circumstances. These include:
· if you inform us that the data we hold is not accurate. Where this is the case, we will stop processing the data until it is made accurate.
· where the data is processed for the performance of public interest or because of our legitimate interests and you have objected to the processing of data. In these circumstances, the processing may be restricted whilst we consider whether our legitimate interests mean it is appropriate to continue to process it.
· when the data has been processed unlawfully.
· where we no longer need to process the data but you need the data in relation to a legal claim.
Where data processing is restricted, we will continue to hold the data but will not process it unless otherwise required by law
If you wish to make a request for data restriction, you should notify the Data Protection Officer.
6.6 The Right to Data ‘Portability’
You have the right to obtain the data that we process on you and transfer it to another party. Where our technology permits, we will transfer the data directly to the other party for you in a safe and secure way if you so wish.
This right only applies to information an individual has provided to the Data Controller.
If you wish to exercise this right, you should notify the Data Protection Officer.
6.7 The Right to ‘Object’
You have a right to require us to stop processing your data.
In some circumstances we may continue to process the data for legal requirements.
If you wish to object, you should notify the Data Protection Officer.
6.8 The Right not to have Automated Decisions Made About You
CircuitBuilder International Ltd does not make any decisions based on such processes.
CircuitBuilder International Ltd will store cookies for our own for authentication and security purposes (to identify the logged-in user and to make it harder for a malicious website to trick our logged-in users into interacting with our website in unintended ways). We also embed 3rd party services on our site, which store their own cookies, including:
· Stripe: For payments. Here
· Intercom: For chat. Here
is their info on privacy policies.
· Google Analytics: To monitor how the site is used and measure marketing activities' effectiveness. Here
You can choose to disable or delete Cookies in your web browser.
Data security is of great importance to CircuitBuilder International Ltd and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure any data collected.
9. Making a Complaint
You can raise a complaint with the Information Commissioner’s Office (ICO). You can contact the ICO at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or by telephone on 0303 123 1113 or 01625 545 745 or via their website at https://ico.org.uk/
10. Changes to this Policy
CircuitBuilder International Ltd reserves the right to change this Policy from time to time or as required by law.