The security of your personal data is essential to us, and to protect your data, we take several important measures, including the following:
- Our billing system/s are GDPR compliant
- Our Sage invoicing systems are GDPR compliant
- Our Direct Debit Partner Go Card Less is GDPR complaint
- All Cloud storage is End To end encrypted and GDPR compliant
- Encryption standard AES-256 and RSA-4096 encryption, using 256-bit keys
9. Do You Share My Personal Data?
We may share your personal data with other companies in our group for billing and provision of services. This includes subsidiaries of our holding company and its subsidiaries.
We may sometimes contract with the following third parties to supply products services to you on our behalf. These may include payment processing, delivery, telephone and broadband services and marketing. In some cases, those third parties may require access to some or all of your personal data that we hold.
We may disclose your personal data to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
We may disclose personal or service data to our suppliers or subcontractors identified at point of order insofar as reasonably necessary in order to supply the products or services purchased.
We may disclose your enquiry data to one or more of those selected third party suppliers of goods and
services identified on our website for the purpose of quoting you an indicative price of a product or service.
If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law.
Financial transactions relating to our website and services maybe handled by our payment services providers, SagePay, Sage One and Mangopay and we will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments.
10. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a "subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 11. To make this as easy as possible for you, a Subject Access Request Form is available for you to use. You do not have to use this form, but it is the easiest way to tell us everything we need to know to respond to your request as quickly as possible.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within 28 days and, in any case, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
11. How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of Mr A C Franklin May:
Email address: email@example.com.
Telephone number: 0330 60 60808.
Postal Address: BBS, Princes Road, Ferndown, Dorset. BH22 9JG.
12. Changes to this Privacy Notice
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection. Any changes will be made available at www.simpletelecoms.co.uk and www.simpletelecoms.com
Last updated - 14/05/2018