Guy & Co Ltd, Bearford House, 39 Hanover Street, Edinburgh EH2 2PJ.
By entering the Guy & Co Ltd website (“Site”) you agree to abide by these Terms and Conditions of use.
Whilst effort has been taken to ensure that the Site is free from viruses, Guy & Co Ltd gives no warranties it will always be free from viruses and you are responsible for ensuring that you have installed adequate and up-to-date virus-checking software. Guy & Co Ltd excludes, in so far as it is legally possible, all liability and responsibility for any viruses or any other computer code, files or programs designed to interrupt, restrict, destroy, limit the functionality of or compromise the integrity of any computer software or hardware or telecommunications equipment or other material transmitted with or as part of the Site.
This website and its content is copyright of Guy & Co Ltd – © Guy & Co Ltd 2019. All rights reserved.
Any redistribution or reproduction of part or all of the contents in any form is prohibited other than you may print or download to a local hard disk extracts for your personal and non-commercial use only.
This Privacy Notice explains in detail the types of personal data Guy & Co Ltd may collect about you when you interact with us. It also explains how we’ll store and handle that data and keep it safe.
1. Legal Processing
Data protection law states there are several legal reasons why a company may collect and process personal data.
Contract: We will process your personal data to fulfil an order, deliver a service and essentially comply with our contractual obligations.
Legal Compliance: If the law or government requires us to, we may need to collect and process your data. An example might be passing on details of fraud to law enforcement.
Legitimate Interest: In cases, we require personal data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Examples might be using your postal or email details to send direct marketing information on content, products and services that we think might interest you with the aim of raising awareness of our business with yours and you, as an employee of that business. We may also use your browsing or purchase history to send you or make available personalised offers.
2. When do we collect, add to or amend your personal data?
● When you visit any of our websites or speak us on the phone.
● When you purchase a product or service or enter into negotiations to do so.
● When you engage with us on social media.
● When you contact us by any means with queries, complaints etc.
● When you book any kind of appointment with us or book to attend an event, for example a meeting to discuss an opportunity.
● When you choose to complete any surveys we send you.
● Any individual may access personal data related to them, including opinions. So if your comment or review includes information about the Partner who provided that service, it may be passed on to them if requested.
● When you’ve given a third party permission to share with us the information they hold about you.
● We may collect data from publicly-available sources where you have given your consent for them to share information publicly such as online directories or LinkedIn.
3. What sort of personal data do we collect?
● Contact details at the company which you work for such as email address and phone number.
● Details of your interactions with us through phone contact, email or online.
● Details of your visits to our websites, and which site you came from to ours.
● To deliver the best possible web experience, we collect technical information about your internet connection and browser as well as the country and telephone code where your computer is located, the web pages viewed during your visit, the advertisements you clicked on, and any search terms you entered.
● Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
4. How and why do we use your personal data?
We want to give you the best possible experience. One way to achieve that is to get the richest picture we can of who you are by combining the data we have about you. We then use this to offer you content, products and services that are most likely to interest you.
The data privacy law allows this as part of our legitimate interest in understanding our customers and potential customer and providing the highest levels of service.
Of course, if you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide the best experience.
Here’s how we’ll use your personal data and why:
● To process any orders or hold negotiations that you make by using our sales team or sales agents. If we don’t collect your personal data during negotiations or ordering, we won’t be able to process your order and comply with our legal obligations. We would then keep those details for reasonable period afterwards in order to fulfil contractual obligations
● To respond to your queries. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.
● To protect our business and yours from fraud and other illegal activities. We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.
● To market our product and services to you. We will use your personal data, preferences and details of your transactions to keep you informed by email, web, telephone about relevant content, products and services including information, tailored offers, discounts, promotions, events, competitions and so on. We market on the basis of legitimate interest and in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Our marketing will follow best practice laid out by the ICO when dealing with corporate subscribers under the PECR.
Of course, you are free to opt out of hearing from us at any time.
● To send you relevant, personalised communications by post or email in relation to updates, content, offers, services and products. We’ll do this on the basis of our legitimate business interest.
You are free to opt out of hearing from us at any time.
● To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, marketing data misuse issues, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.
● To develop, test and improve the systems, services and products we provide to you. We’ll do this on the basis of our legitimate business interests.
● To comply with our contractual or legal obligations to share data with law enforcement.
● To send you survey and feedback requests to help improve our services. These messages will not include any promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products or services more relevant to you.
Of course, you are free to opt out of receiving these requests from us at any time
5. How is personal data protected?
We will treat your data with the utmost care and take all appropriate steps to protect it.
We secure access to our websites and apps using ‘https’ technology.
Access to your personal data is password-protected, and sensitive data is secured by SSL encryption.
We regularly monitor our system to identify ways to further strengthen security.
What specific information is obtained?
Our website does not collect specific, detailed information about you as a visitor to our site.
Where information is gathered, we will inform you of this along with the explanation of why it is required. This information will be for purposes such as responding to an enquiry made and we will ask for this information in order for us to get in touch and provide the relevant information which has been requested from you.
What information is retained?
Cookies and tracking software are used on a temporary basis and expire when the site has been left. These are used for purposes such as website improvement. Google Analytics is also used for the same reason of website improvement and understanding how you use it. This information is not shared with anyone.
The personal information we collect and hold via Tracking software is the following: –
● Browser used (Bing, Chrome, Internet Explorer etc.)
● Location (based on IP address)
● Age group
● Site searches
● Device(s) used
● Frequency on Site
● Session duration (time spent on the site)
● Page(s) visited
● Page session duration (time spent on specific page)
● Web Surfing Behaviours
We currently use the following companies that may process your personal data through website usage. Facebook, Twitter, LinkedIn, Google, HubSpot, SharpSpring, Instiller.
If you need to contact us then please find the relevant details here.
We hold information about customers/ enquirers as it is necessary for us to conduct our business activities.
What personal information is held?
The personal information we collect and hold is the following:
● Full Name
● Company Name
● Company Address
● Company Website Address
● Email Address
● Phone Number
● Initial Requirement
This information may be linked together with what has already been gathered (as stated in the “what information is retained?” section) via Tracking Software.
How is this information gathered?
We gather this information through lead generation forms on our website and tracking software as mentioned in the “what information is retained?” section, as well as over the phone when relevant.
How long will the data be kept for?
For a reasonable period of time after you have stopped being an active customer, we may continue to contact you with information relating to our products and services. We deem a reasonable period of time to be three years after an order has been completed, or a relevant license period has expired. After this time, the data we hold will either be deleted, anonymised or retained providing you have asked us to do so.
Who will the data be passed to?
This information will not be passed on to anyone other than authorised employees of Guy & Co Ltd and relevant processors, for example a company managing marketing on behalf of Guy & Co Ltd.
Additionally, if a legal matter were to arise, then we may need to provide this information for those purposes.
● In this instance, we provide only the information required to perform the service.
● The data will only be used for that exact purpose.
● Partners are required to protect and respect your privacy.
● If we stop using a partner’s service, your data will be deleted or rendered anonymous.
Examples of third parties we work with are:
● Direct marketing companies who help us manage electronic communications and telemarketing.
● Google/Facebook/LinkedIn to show products that might interest you. This is based on consent or your acceptance of cookies on our website.
● Data insight companies to ensure your details are up to date and accurate.
● IT companies who support our website and business systems.
What is the reason for holding/using the information held?
While you are a customer of Guy & Co Ltd, the basis for processing your data is ‘contract’. When you are not or no longer an active customer of Guy & Co Ltd, the basis is ‘legitimate interest’ as we would like you order products/services from us.
We may use your details for the purpose of creating a profile to gauge decision making and for direct marketing purposes. For example, using information held, we may create profiles based on the following:
● Email Address
● Telephone Number
● Geographic Location
● Job Title/Job Role.
8. Data Subject Rights (Subject Access Request, Erasure, Rectification)
● You have the right to ask for information we hold for you (Subject Access Request) which will be provided free of charge and if requested, can be presented in a spreadsheet-based format.
● The data we hold will be corrected when we are notified of errors.
● Information we hold for you will no longer be processed if requested to do so.
● Information we hold for you will be deleted if requested to do so. It is possible we may contact you at a later date as we will hold no record of you.
● You have to right to withdraw consent at any time.
● You have the right to stop the use of your personal data for direct marketing through selected or all channels.
● You have the right to stop processing your personal data under legitimate interest for individual reasons. We will comply unless we believe there is a legitimate overriding reason to continue processing.
9. To stop the use of personal data for direct marketing:
Click Unsubscribe Link in any email communication that we send you, or alternatively write to us at the address below. We will then stop all emails.
10. To contact the regulator:
Call 0303 123 113 or go to www.ico.org.uk
JOB APPLICANT PRIVACY NOTICE
Data controller: Guy & Co Ltd, Bearford House, 39 Hanover Street, Edinburgh EH2 2PJ, United Kingdom.
As part of any recruitment process (for permanent members of staff, freelancers or consultants), Guy & Co Ltd collects and processes personal data relating to applicants. Guy & Co Ltd is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
What information does Guy & Co Ltd collect?
Guy & Co Ltd collects a range of information about you. This includes:
• Your name, address and contact details, including email address and telephone number
• Details of your qualifications, skills, experience and employment history
• Information about your current level of remuneration, including benefit entitlements
• Whether or not you have a disability for which Guy & Co Ltd needs to make reasonable adjustments during the recruitment process;
• Information about your entitlement to work in the UK
• Equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief.
Guy & Co Ltd may collect this information in a variety of ways. For example, data might be contained in application forms, CVs or portfolios, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment.
Guy & Co Ltd may also collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks. Guy & Co Ltd will seek information from third parties only once a job offer to you has been made and will inform you that it is doing so.
Data will be stored in a range of different places, including on your application record, in HR management systems and on other IT systems (including email).
Why does Guy & Co Ltd process personal data?
Guy & Co Ltd needs to process data to take steps at your request prior to entering into a contract with you. It may also need to process your data to enter into a contract with you.
In some cases, Guy & Co Ltd needs to process data to ensure that it is complying with its legal obligations. For example, it is required to check a successful applicant’s eligibility to work in the UK before employment starts.
Guy & Co Ltd has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from applicants allows Guy & Co Ltd to manage the recruitment process, assess and confirm a candidate’s suitability and decide to whom to offer a job or project. Guy & Co Ltd may also need to process data from applicants to respond to and defend against legal claims.
Guy & Co Ltd may process information about whether or not applicants are disabled to make reasonable adjustments for candidates who have a disability. This is to carry out its obligations and exercise specific rights in relation to employment.
If your application is unsuccessful, Guy & Co Ltd may keep your personal data on file in case there are future employment opportunities for which you may be suited. Guy & Co Ltd will ask for your consent before it keeps your data for this purpose and you are free to withdraw your consent at any time.
Who has access to data?
Your information may be shared internally for the purposes of the recruitment exercise. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy and IT staff, if access to the data is necessary for the performance of their roles.
Guy & Co Ltd will not share your data with third parties, unless your application is successful and it makes you an offer of employment or consultancy. Guy & Co Ltd will then share your data with former employers to obtain references for you, employment background check providers to obtain necessary background checks and the Disclosure Scotland Service to obtain necessary criminal records checks.
Guy & Co Ltd will not transfer your data outside the European Economic Area.
How does Guy & Co Ltd protect data?
Guy & Co Ltd takes the security of your data seriously. It has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
For how long does Guy & Co Ltd keep data?
If your application for employment or consultancy is unsuccessful, Guy & Co Ltd will hold your data on file for 6 months after the end of the relevant recruitment process. If you agree to allow the organisation to keep your personal data on file, Guy & Co Ltd will hold your data on file beyond that period for consideration for future employment opportunities. Once you withdraw your consent, your data is deleted or destroyed.
If your application is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in a new privacy notice.
As a data subject, you have a number of rights. You can:
• Access and obtain a copy of your data on request
• Require Guy & Co Ltd to change incorrect or incomplete data
• Require Guy & Co Ltd to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing
• Object to the processing of your data where Guy & Co Ltd is relying on its legitimate interests as the legal ground for processing.
If you would like to exercise any of these rights, please contact Catriona Summers by emailing email@example.com
If you believe that Guy & Co Ltd has not complied with your data protection rights, you can complain to the Information Commissioner.
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide data to Guy & Co Ltd during the recruitment process. However, if you do not provide the information, Guy & Co Ltd may not be able to process your application properly or at all.
If there are any questions regarding these privacy notices you may contact us using the information below.
Guy & Co Ltd, Bearford House, 39 Hanover Street, Edinburgh EH2 2PJ, United Kingdom.
Tel: +44 131 243 3898