Regus House, Pegasus Business Park, Castle Donington, Derbyshire DE74 2TZ
[email protected] or by phone on (+44) (0)20 7947 5354.
Your personal data is important to us and we are committed to protecting and respecting your privacy under data protection legislation. We also aim to embrace good data management practice by advising our clients on Environmental, Social and Governance (ESG) practices. For PLL this means being a socially responsible business which handles personal data responsibly and ethically.
Your information will be held by PLL, also referred to as “we”, “us” or “our” in this Privacy Notice. We collect, use and are responsible for certain personal data about you. When we do so, we are regulated under the Data Protection Act 2018 which incorporates into UK law EC Regulation 2016/679, the General Data Protection Regulation (“GDPR”), which applies across the European Union and also by the UK GDPR (collectively referred to in this Privacy Notice as “Data Protection Legislation”) and we are responsible as the “data controller” of that personal information. Being a data controller means that we determine the purposes for which, and the means by which, personal data is processed. Note that if the UK further amends its Data Protection Legislation in consequence of its departure from the European Union, this Privacy Notice will be updated appropriately to reflect any such changes.
We will only use your personal information in accordance with GDPR, Data Protection Legislation and this Privacy Notice. This notice explains what we do with your personal data, why we want to use it, how we protect it, and what rights you have to control our use of your personal data.
What information we collect and why we collect it
PLL will collect information supplied via website interactions. Such information may include your name, postal address, e-mail address, and telephone number. We collect this information in order to respond to your enquiries. Information provided to us will be kept confidential by us and will not be disclosed without your prior consent to any third party, other than to any employee or consultant of PLL for the purpose of providing you with the service you require, or to comply with any applicable laws or lawful government and/or regulatory requests.
How we use that information
At PLL we are committed to protecting and respecting your privacy and where you have consented at the time of providing us with your details, we will only use your personal information:
to manage our relationship with you including providing services to you personally or the company for which you work;
to provide and improve our services to you, including making enquiries about or booking training courses and webinars;
to ensure that content from our site is presented in the most effective manner for you and your computing device;
to provide you with information, newsletters or services that you request from us or which we may feel may be of interest to you regarding an area of law or practice in which you have expressed a particular interest;
to compile anonymised statistics, for example, website usage statistics;
to inform you about our seminars and events and to efficiently run those seminars and events and
to process and respond to inquiries.
If you change your mind about receiving any information from us in the future, please let us know. You can check the information we hold or request that we amend any inaccuracies in the information that we hold or request its removal by writing to us or emailing our Data Protection Compliance Officer at the above address. We will take the necessary action within the time limits provided for under the Act and the Regulations. We may charge you an administration fee for complying with your request. This may vary but at present the maximum amount we would charge is £10.00 plus VAT. We also reserve the right to use reasonable measures to check your identity before any information will be disclosed to you.
Our legal basis for processing
Whenever personal data is to be processed, a data controller must be able to demonstrate one of the six lawful bases for processing that are detailed in Article 6 of the GDPR. All personal data processed by PLL relies on one or more of the following relevant lawful bases from Article 6 of GDPR :
Consent: where you have given your consent for your personal data to be processed for a specific purpose;
Legal obligation: the processing is necessary for PLL to comply with the law, not including contractual obligations and
Legitimate interests: the processing is necessary for PLL’s legitimate interests, or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data that overrides these legitimate interests. A legitimate interest is when we have a business or commercial reason to process your information. But, even in these circumstances it must not unfairly be contrary to what is right and best for you. Our legitimate interests include the following:
to track website users so that we can improve our service and keep our website relevant and useful to clients and website users;
promote, manage and run conferences, events and webinars.
Who we share your personal information with and why
Please note that we may share your information with third parties who provide services to us on our behalf, including but not limited to, document storage facilities, website maintenance, IT service providers including providers of our time recording and invoicing arrangements, cloud providers of software and companies who help us manage our electronic communications with you. We may also share personal information with professional advisors such as accountants or auditors in order to provide accounting or auditing services to us.
The company which maintains and operates PLL’s website currently processes and stores personal data in the European Union.
We currently store your personal data only in the UK and do not directly share that data outside the UK or EEA. However to continue to deliver services to you, it may be necessary for us now or in the future to share your personal information outside the European Economic Area (EEA), for example with service providers who may store and/or process data outside the UK or EEA . Such countries, including the United States, do not have the same data protection laws as the United Kingdom and EEA, and any transfer of your personal information to such countries would need to be subject to appropriate safeguards in accordance with GDPR and Data Protection Legislation.
PLL has entered into Data Privacy Agreements (DPAs) with its suppliers of services to ensure that personal data is processed and transferred in accordance with GDPR and Data Protection Legislation. These agreements oblige service providers to comply with provisions mandated by the European Commission and the UK’s Information Commissioner’s Office (ICO). The DPAs include a “Restricted Transfer Addendum” to cover any transfers of personal data to “Restricted Countries” which have been determined not to have adequate data protection mechanisms in place.
We will share personal information with law enforcement or other authorities only if required by applicable law.
Except for the third parties identified above, [and Google Analytics see below] we will not share your information with any other third party.
We use Google Analytics on our website to track visitor numbers and user activity on our site. We record the user’s computer’s IP address, so that we can analyse how each user and repeat visitor is using our site, the visitor’s IP address is also a piece of the visitor’s personal data. We do this on the basis that it is necessary for our legitimate interests in tracking website users so that we can improve our service and keep our website relevant and useful. The IP address information will be held in accordance with Google’s standard procedures.
How long we hold personal data
We will keep your data only for as long as it is necessary for the particular purpose or purposes for which we hold it unless there are any legal or operational reasons to hold it for a longer period in accordance with our internal retention procedures. At the end of that period, the data that we hold will be securely destroyed.
Your rights in relation to your information
You have rights under GDPR to exercise one or more of the following:
the right to request a copy of all personal data we hold relating to you;
the right to require us to correct any mistakes in the personal data we hold relating to you;
where we are processing your data based on your consent, you can withdraw that consent at any time and we must immediately stop processing your data. Please note that up to that point, we’re acting lawfully with your consent, withdrawal of consent cannot be backdated.
where we process your data based on a “legitimate interest” you still have the right to object to our processing of that data if you feel it impacts on your fundamental rights and freedoms. From the point that you make your objection known to us, we must stop processing your data until we have determined whether your rights override our interests;
in certain situations, you have the right to require us to erase personal data where there is no good reason for us continuing to process it. However, note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- the right to request us to restrict our processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
if you want us to establish the data’s accuracy;
where our use of the data is unlawful, but you do not want us to erase it and
where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the ICO on individuals’ rights under the General Data Protection Regulation at www.ICO.org.uk
We may also store information about you using cookies, which we can access when you visit our site in future. Cookies are small files, which are sent by us to your computer or other access device, that track, save and store information about your interactions and usage of our website. Cookies help us provide you with a better service by enabling us to monitor which pages you find useful and which you do not.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Information on deleting or controlling cookies is available at http://www.allaboutcookies.org
Deleting or disabling cookies may prevent you from taking full advantage of our website and services.
Our website and any documents which we may publish from time to time may contain links to other websites of interest. . However, once you have used these links to leave our site, you should note that we do not have any control over that other third party website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should therefore exercise caution and read the privacy statement applicable to the website in question.
Changes to this privacy notice
We may update this privacy notice from time to time. This privacy notice was last updated on 8th June 2022.
How to contact us
If you have any queries about how we use your personal data, please see the details provided at the beginning of this notice.
If you are not satisfied with our response to any complaint, or if you believe our processing of your information does not comply with data protection law, you can make a complaint to the ICO at the following address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Telephone 0303 123 1113.