Privacy Policy
May 2024
This privacy policy sets out how Connected Data Company Ltd uses and protects any personal information that you give us when you use our website and how we use and share personal data relating to our business contacts. If you are making an application for employment with us or are an employee of Connected Data Company Ltd you will be provided with a copy of our Job Applicant Privacy Policy and Staff Privacy Policy (as appropriate).
We may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
WHO ARE WE AND HOW DO YOU CONTACT US
Connected Data Company Limited is a company with its registered officed at 128 City Road, London ECIV 2NX.
Connected Data is committed to ensuring that your privacy is protected and if you have any issues relating to your personal data or the contents of this notice, please contact our Data Protection Officer at dpo@connecteddatacompany.com.
WHAT DO WE USE PERSONAL DATA FOR
Business Relationship Management
If you are a business contact, we use personal data to conduct our day-to-day business relationship with you. For example, discussing business projects with you, dealing with invoices and payment, responding to your enquiries.
Marketing
We use personal data for marketing to existing and prospective clients. This includes updates on our products and services, details of corporate events, training opportunities as well as industry insights.
Our marketing activities may be delivered by email, telephone or post.
We will not contact you for direct marketing purposes through any channel (such as email, telephone or post) if you have told us that you don’t want to hear from us in that way. Please note that if you ask us not to contact you for marketing purposes, you might still hear from us for other reasons – for example, as part of our ordinary business relationship management activity.
Operating our website
Certain information is essential for us to give you access to our website.
Legal and Regulatory Purposes
We may use your personal data to comply with our legal and regulatory obligations, for example if we are required to disclose the information to a regulator, or in court proceedings.
If you object to us processing your personal data for direct marketing purposes, we will add your name to our suppression list to remove you from future direct marketing activities.
WHAT DATA DO WE COLLECT, AND WHERE DO WE GET IT FROM
Name and contact details. This is basic personal data about your name and place of work, and how to get in touch with you. This information is usually provided directly by the relevant individuals; it could for example be given over the telephone, in an email, through our websites, or in person at an event.
Organisation related details. This is information about your organisation and your role within it, such as your job title and which department you work in. This information is usually provided directly by the relevant individuals; it could for example be given over the telephone, in an email, through our websites, or in person at an event.
Contact history. This is information about our dealings with you, such as what information we have sent you, who in Connected Data Company Limited knows you, and what meetings, events or webinars you have attended. We produce these records.
Website user information. Our website requires essential cookies to be able to operate efficiently. Cookies are small pieces of data stored on a website visitor's browser. We put these on your device when you browse our website. You can see more details about the essential cookies that we use below.
Essential/strictly necessary cookies are always on when you visit our website. You can block cookies using your browser settings that allow you to refuse all or some cookies. However, if you use your browser settings to block all cookies (including essential/strictly necessary cookies) you may not be able to access parts of our website or use some of its features.
We use the following cookies which are essential and strictly necessary:
XSRF-TOKEN Used for security reasons for the duration of the session.
hs Used for security reasons for the duration of the session.
SSR-caching Used to indicate the system from which the site was rendered. Duration 1 minute.
Sy Session. Used in connection with user login. Duration 12 months.
To learn more about cookies, including how to manage them and how they affect your Online activities, please visit or www.allaboutcookies.org .You can also learn how to control cookies on different browsers at www.aboutcookies.org.uk/managing-cookies or if you want to know how to delete cookies, visit www.allaboutcookies.org/manage-cookies/clear-cookies-installed.html.
HOW LONG WILL WE KEEP YOUR DATA FOR
We will not keep your personal data for longer than we need it.
If you are a representative of one of our clients or suppliers, or potential clients or suppliers, this means that we will normally keep your personal data while you or your employer have an ongoing relationship with us or if you have interacted with us within the past two years.
WHAT IS OUR LEGAL BASIS FOR PROCESSING PERSONAL DATA
This section explains the legal basis on which we process your personal data.
Legitimate interests
The UK’s data protection law allows the use of your personal data where necessary for legitimate purposes if this isn’t outweighed by the impact it has on you. The law calls this the “legitimate interests” condition for processing personal data. We rely on this condition for most of our processing activities.
The legitimate interests we are pursuing are:
Establishing and maintaining business relationships
We have an interest in establishing and maintaining business relationships with you for example if you work for one of our suppliers, we may need to contact you about the service that your employer provides to us.
Marketing
We have an interest in promoting our products and services to our clients and potential clients.
Commercial Interests
Like any business, we seek to earn revenue through the services that we provide to our customers and clients.
We have an interest in being able to operate a website to assist our business operations and our website requires essential cookies to operate efficiently.
Other legal bases
In some circumstances, we may have other bases to process personal data. These are set out in the following table, along with examples of the circumstances in which they might apply.
Consent
In some circumstances we will ask you whether you agree to us using your data in specified ways, for example when you contact us via our website. You can withdraw the consent at any time.
Necessary for performance of a contract or to take steps for entering into a contract
If you take our services it is likely to be necessary for us to use your information to provide those services.
Necessary to comply with a legal obligation
Regulators, government bodies and courts have powers to order us to provide information and, like any other organisation, we sometimes must comply with their requests.
WHO DO WE SHARE THE PERSONAL DATA WITH?
Service providers
We may provide your information to third parties who help us use it for the purposes described in this privacy policy. These service providers will not be allowed to use your information for their own purposes or on behalf of other organisations. Examples may include external service providers to help us perform and manage sales and relationship management activity, auditors, legal advisers and technology providers.
Business transfers
If we sell our business to a third party, or go through a corporate reorganisation, we will transfer personal data to the company that acquires the business.
Regulators
We may sometimes need to pass personal data to a regulator such as the Information Commissioner’s Office.
WHERE IS THE PERSONAL DATA STORED AND SENT?
Your data is processed by Connected Data Company Limited in the UK.
IS THE PERSONAL DATA USED TO MAKE AUTOMATED DECISIONS ABOUT YOU OR TO PROFILE YOU?
We do not perform automated decision-making about you. We may carryout profiling activities using your personal data. When we refer to profiling, we mean using personal data to make predictions about you, or to categorise you into groups.
Individual-level profiling
We may use certain profiling techniques to help us to understand our clients and potential clients. This in turn helps us to understand which people might be interested in which of our products and services.
Examples: profiling
We may categorise our business contacts according to the type of organisation and job they work in and target our marketing using this insight. For example, we might decide that managers who work in the collections teams of Utility providers would be interested in hearing about our training webinars, and we may contact them about those webinars accordingly.
We use information about a person’s history of dealings with us to predict whether and when they might wish to purchase a particular product from us. We use this to help decide when to contact them and what products to tell them about.
YOUR LEGAL RIGHTS
Under certain circumstances, by law you have the right to:
-
Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
-
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
-
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
-
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
-
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
-
Request the transfer of your personal information to another party.
If you want to review, verify, correct, or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact our Data Protection Officer at DPO@connecteddatacompany.com.
DATA PROTECTION OFFICER AND COMPLAINTS
We have appointed a data protection officer to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the Data Protection Officer. You can contact the Data Protection Officer in writing at 41-43 St Mary’s Gate, Nottingham NG1 1PU or by email at DPO@connecteddatacompany.com
You have the right to make a complaint at any time to the Information Commissioner's Office who is responsible for data protection issues in the UK.