Your Personal Data
WHAT WE NEED
Unless otherwise agreed with you, we will only collect basic personal data about you, which does not usually include any special categories of personal information about you (often known as ‘sensitive personal data’). This information does, however, include the likes of your name, company name, business address, business telephone number and email address. This is not an exhaustive list.
WHY WE NEED IT
We need to know basic personal data in order to provide you with the products and services you have asked us to provide, and to assert our right to be recompensed in return for these products and services. If you do not provide this information then we will be unable to provide the products or services you have requested. We will not collect any personal data from you that we do not need in order to provide and oversee the products and services we have agreed to provide you with.
WHAT WE DO WITH IT
All the personal data we hold about you will be processed in the United Kingdom. When placing an order for funeral supplies, your personal data is held electronically on Thorley Smith’s internal software system on our company servers. All computer systems and servers are password protected and only accessed by authorised Thorley Smith employees.
Selected third parties will have access to your personal data where there is a service they provide to us or there is a legal obligation for us to provide them with this. Please be aware, specifically, these third party firms are:
- Mailchimp of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA;
You can obtain a copy of the safeguards and any other of MailChimp’s data protection documentation by visiting https://www.mailchimp.com.
We take all reasonable steps to ensure that your personal data is processed securely.
HOW LONG WE KEEP IT
We will generally keep your personal data for an indefinite period of time, in order to enable us to provide you with the products and services requested. Your information will be kept with us until you notify us that you no longer wish to receive this information. You have the right to withdraw consent at any time.
WHAT WE WILL ALSO DO WITH IT
We will also send you information about our products and special offers by email. Please note that this will be for ‘legitimate interests’ and you have the opportunity to unsubscribe at any time, either via the unsubscribe option on any communication sent from us, or via email to email@example.com. You should note that should you do so, we will be unable to provide the service requested.
Please also note your data will be shared with the third parties listed above, and you will receive communications via the third-party organisation, Mailchimp (https://mailchimp.com).
SENSITIVE PERSONAL DATA
In addition to the basic data described above, it may also benefit you to notify us of any health condition or disability you have, so that we are aware of these conditions and how they affect you. This will allow us to take any reasonable steps to accommodate specific needs or requirements you have when providing our services to you. This type of information is known under the law as ‘special category information’ (you may also know this as ‘sensitive personal data’) and we require your explicit consent to process this information.
This kind of information will only be collected from you and used by Thorley Smith to assist you, it will not be shared with any third parties and will only be kept as long as it is required for this purpose, or until such time as you notify us you no longer consent to its processing.
WHAT ARE YOUR RIGHTS?
Under data protection legislation, you have several rights regarding the use of your personal data, as follows:
If at any point you wish to either confirm whether your personal data is being processed and/or access the data we hold on you, you can request to see this information, usually free of charge, and we will respond to this request within a month.
You also have the right for certain data you have provided to Thorley Smith to be provided to you in a structured and commonly used electronic format (for example, a Microsoft Excel file), so that you can move, copy or transfer this data easily to another data controller. You may also request that we transmit this data directly to another organisation where it is practical for us to do so.
You are entitled to have data corrected if it is inaccurate or incomplete.
You are entitled to have data deleted if it is no longer needed or there is no longer a legitimate reason for the processing, or if the data in question has otherwise unlawfully been processed. You may also request deletion of your personal data if it was only being processed as a result of you consenting to this and you now withdraw your consent.
You have the right to object to the processing of your personal data (note that this only provides you with the right to raise your objections, not a blanket right to have any and all processing cease).
You have the right to restrict the processing of your personal data under certain circumstances, including if you have consented to its accuracy and while this is being verified by Thorley Smith, or if you have objected to its processing and while Thorley Smith is considering whether it has legitimate grounds to continue to do so.
HOW TO COMPLAIN ABOUT THE USE OF YOUR DATA
If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact Thorley Smith at firstname.lastname@example.org, and we will investigate your concerns.
If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to the Information Commissioner’s Office (ICO). You can find further information about the ICO and their complaints procedure here: https://ico.org.uk/concerns.