Expert Data Protection Advice

Privacy Statement and Controller contact details

This Privacy Statement describes our policies and procedures on the collection, use and disclosure of your information when you use our services. It also outlines your Privacy Rights and how the law protects you.

We take privacy and the protection of personal and sensitive information seriously and are committed to protecting your data and complying with the data regulations to their full extent. Our Privacy Statement explains how we use and protect your personal information, to show that we are adhering to the GDPR/UK GDPR and Data Protection Act 2018.

LH Data Protection Services Ltd is the data controller for the information being processed, unless otherwise stated. If you wish to contact us this can be done via email or telephone.

A data controller is the business that collects your data AND decides how it is processed. A data processor is the business that may process personal data but only acts on behalf of the data controller.

You can email our Data Protection Officer (DPO) Lynda Harris via lyndaharris811@gmail.com or call her on 0752 9778344 with any queries you may have in relation to this privacy statement or your privacy rights as an individual.

The UK GDPR requires every organisation that processes personal information to be registered with the Information Commissioner's Office (ICO). Our registration number is ZB865173 and you can find us on the Information Commissioner's register and searching for us by using our registration number.

Our promise to you

We are committed to our responsibility to be fair, lawful, and transparent when it comes to managing your information. We endeavour to make our processing activities easy to read and understand and we welcome your feedback. We promise that:

• We will do everything physically possible to keep your information secure and confidential.

• You are in control of how we communicate with you – and you can change your preferences at any time by contacting us.

• We will train our staff to ensure that they know how to manage your information appropriately and in line with regulations.

• We will not transfer your data to third parties, except for trusted partners who carry our specialist processing e.g., accountant, bank for financial transactions.

• We have done all checks possible to verify that any third parties comply with data protection legislation and will only use them if we are satisfied that they take your privacy seriously.

Legal Bases

Where we process personal data, we will only this if we have identified a legal basis to do so according to the UK GDPR.

Where we process special categories of personal data, we will only do so if additionally, to a legal basis, we have identified a condition for processing under article 9.

Generally, for personal data, we rely on CONSENT, CONTRACT or LEGITIMATE INTEREST, depending on the purpose of processing. We will delete or anonymise your data as soon as it is no longer needed and not required by law.

​Personal Data that we process

Information we collect and store depends on the service you have requested or are interested in requesting and whether or not we are entering into a contract.

We always collect the minimum data necessary for the purpose of the services requested. For more information about the individual categories and purposes of data we collect please look at the relevant heading below.

Contracting us

If you do take one of our services offerings, we will be entering into a contractual relationship with you. 

We will collect your organisation’s details, your contact details, and any details of contacts you provide us with to enable us to fulfil our contractual obligations towards you. In addition, we will process commercial, confidential, and sensitive information that you provide us with for the purposes specified in the contract and data processing agreement. 

We also will process financial details for the purpose of invoicing and financial transactions. When our contract ends, we will follow all instructions as per our contract with you in relation to all personal and other data that we have processed on your behalf. The legal basis we use is CONTRACT.

Enquiring for our services

If you enquire about our services, we will collect the personal details that you provide us with. This information will be collected either via email or telephone depending on your preferred contact method. 

As you provide this information voluntarily, we rely on your CONSENT for the purposes that you have specified in your enquiry. In some cases, we may contact you in relation to other services and will rely on LEGITIMATE INTEREST to process your data. 

This will only be in cases where we can identify a LEGITIMATE INTEREST and only if you have not asked us not to contact you for other purposes. You can request for your information to be deleted at any time; however, we might not be able to provide you with a reply to your enquiry if you request deletion prior to us responding. 

We will remind you annually of your rights to update your preferences. Where you ask for your information to be deleted, we will do this safely and securely so that it cannot be retrieved.

​Information Sharing, Security and Retention

We will not share your information with any third parties for the purposes of direct marketing.

We use third parties to support the provision of our services and therefore under  UK GDPR they are considered data processors. These third parties include accountancy services, banking services.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

​Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.

Your Data Protection Rights

Under data protection law you have certain rights that you can exercise in regard to your personal data, these are outlined below:

1. You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

​2. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

​3. You have the right to ask us to erase your personal information in certain circumstances.

​4. You have the right to ask us to restrict the processing of your information in certain circumstances.

5. You have the right to object to processing if we are able to process your information because the process forms part of our public tasks or is in our legitimate interests.

6. Your right to portability only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right applies when we are processing your data with your consent or for the performance of a contract and when we are carrying out the processing by automated means.

Your rights are not absolute in some cases and exemptions and/or restrictions may apply. You can find out more about your rights on the ICO website.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us via email lyndaharris811@gmail.com. 

You also have the right to complain to the ICO if you are unhappy with how we use or have used your data.

The ICO's address:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

​Helpline number: 0303 123 1113

Website: https://ico.org.uk