This Notice sets out our commitments to safeguarding your privacy and establishes how we will collect, process and store your Personal Data when using the Website.
Within this policy-
‘Content’ means any information, articles or images included within the Website;
‘Personal Data’ means any information in any format or medium, from which you can be personally identified;
‘we’, ‘us’ or ‘our’ means DataBrill Ltd, a company incorporated in England with a registered office at 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ 1JU and a company registration number of 11263995.
‘Website’ means databrill.com
‘you’ or ‘your’ means the visitor or user of the Website;
We are providing this information as part of our on-going efforts to provide transparency and fairness by
- ensuring that you have all the information regarding your privacy when using the Website; and
- to comply with our obligations and your rights created by applicable law.
We pride ourselves on keeping up to date with regard to advances in technology and legal developments which can result in us needing to change this Privacy Notice, if we make any changes we shall make the new notice available on the Website which shall apply from the date of publication so you are encouraged to revisit this Notice periodically to ensure that you agree to the version that is current at the time of your visit.
Your trust is important to us and we want to be clear and transparent about
- What Personal Data we collect;
- How we use that Personal Data;
- Who we share the Personal Data with;
- How we store and retain your Personal Data;
- Your rights in respect of that Data.
Whether or not you are personally identifiable from the data that we gather, store, or process you can be assured the data will only be used in accordance with this notice.
You will be asked to agree to this Privacy Notice, if you do not agree with anything within this Privacy Notice, you must not use our Website.
- Your Personal Data
- We will only gather, collect, process, or store any Personal Data –
- with a lawful purpose;
- that is necessary for processing an enquiry;
- that is necessary to deliver the website to the device used by you;
- to take the necessary steps to enter into and in the performance of a contract with you;
- that is necessary for the administration of an account if you register with the Website;
- for the recording of a financial transaction.
- for internal records that we are legally obliged to keep.
- to deal with complaints, disputes and legal actions.
- where necessary to protect the vital interest of you or another person;
- to send commercial communications from us (including newsletters and notifications), where you request or consent to such communications.
- to send commercial communications from selected partners, associates, or affiliates only where you expressly request or consent to such communications.
- Use of the Website
- When visiting the Website, we may collect the following information –
- the country from where you gain access to the Website;
- the browser used by your device;
- the operating system used by your device;
- the screen resolution and other settings of the device you use;
- the web pages that you visit or access;
- the length of time you spend on a webpage;
- the referral source, if any (the way how you arrived at the Website);
- the IP address of the device used to access the Website
- With the exception of the IP address, The information is anonymised and you cannot be personally identified from it, therefore it is not classified as Personal Data.
- The information is used with a legitimate interest or consent to
- generate website usage reports and statistics;
- maintain a Website that is user friendly and compatible with popular equipment and software;
- the IP address may be used to help identify a device used for inappropriate or malicious use and maintain the security of the Website;
- If you make an enquiry about the Website, its Content or our services, you will be required to provide us with your name and an email address.
- This information is processed with a legitimate interest – in order that we can respond to your enquiry.
- If you request and we agree to provide any services we may require your name, company or trading name, address, telephone number email address, and Amazon account details.
- We will use your Personal Data
- For the administration and performance of a contracy.
- For the recording of any financial transactions.
- For internal records that we are legally obliged to keep.
- To deal with complaints, disputes and legal actions.
- To detect miss-use.
- Where necessary to protect the vital interest of you or another person;
- To send commercial communications from us except where you opt-out of receiving such communications.
- Sharing your Personal Data
- We may use and share your Personal Data with our employees, officers, agents, consultants, suppliers, or subcontractors insofar as reasonably necessary
- For dealing with an enquiry or administering a registration.
- For performance of a contractual obligation.
- To the extent that we are required to do so by law.
- In connection with any legal proceedings or prospective legal proceedings.
- To establish, exercise or defend our legal rights.
- With the purchaser (or prospective purchaser) of any business, asset, or account which we are (or are contemplating) selling.
- We may also engage other businesses for website, IT or analytic support and maintenance who may, whilst performing their services have access to your Personal Data. These businesses will be working under a contract for services that contain strict conditions in relating to accessing Personal Data and will be subject to confidentiality undertakings.
- Automated Processing
- We shall not use automated processing of your Personal Data to form or make decisions except where authorised or required by law (for example for the detection of fraud or tax evasion); or you have given your express consent. If we use automated processing you are entitled to request details of the automated process.
- Data Security
- We will take reasonable technical and organisational precautions to prevent the loss, misuse, or alteration of Personal Data, including
- storing of data on a secure, password protected and firewall protected device;
- limiting access to data to only personnel who need access for the performance of a contract or the administration and management of an account;
- Data transfers outside the EU
- We shall not generally transfer or process any personal data outside the boundaries of the E.U. In the event that any data is transferred outside of the E.U. we shall inform you of the countries where the data takes place and ensure that the county has sufficient security measures and guarantees in place to protect the security of your Personal Data.
- Data retention
- Personal Data shall be retained for as long as necessary to fulfil the purpose which it was collected.
- We may retain Personal Data for longer than is necessary for the purpose which it was collected to comply with a legal obligation or where we may need to exercise or defend our legal rights which means the some information may be retained for up to six years.
- Your rights
- You have the right to know
- the identity and contact details of the Data Controller and Data Protection Officer (where applicable);
- To know the purpose and legal basis for processing your Personal Data, and where processing is based on the legitimate interests of the Data Controller, what those legitimate interest are;
- To know whether your Personal Data is transferred or processed beyond the EU and that appropriate safeguards are in place.
- The right to access your Personal Data
- The right to erase Personal Data.
- The right to restrict processing.
- The right to portable data.
- The right to withdraw consent
- The right to complain.
- The right of access.
- You may require us to provide you with any Personal Data we hold about you. To obtain a copy of any Personal Data we hold contact the Data Controller.
- The Personal Data will be provided free of charge except where a request is manifestly unfounded or excessive (for example it is a repetitive request, or where we need to process large amounts of data) in which case we shall make a charge for our reasonable administrative costs in dealing with the request or refuse to respond but we must provide a justifiable reason for refusing to respond.
- We shall provide the requested Personal Data within one month of receipt of the request, however where there is a substantial amount of information or it is difficult to collate we may extend this timeframe by one month by providing you notice.
- As we take the issue of protecting your Personal Data seriously, we follow strict storage and disclosure procedures which mean that we may occasionally require proof of identity from you prior to disclosing such information.
- The right to erase Personal Data
- You have the right in certain circumstances to instruct us to erase your Personal Data where
- The Personal Data is no longer necessary in relation to the purpose for which it was originally collected/processed.
- You withdraw your consent.
- You object to the processing and there is no overriding legitimate interest for continuing the processing.
- The Personal Data was unlawfully processed or obtained.
- The Personal Data must be erased in order to comply with a legal obligation.
- The Personal Data is processed in relation to the offer of information services to a child.
- Where you have the right and you issue an instruction to erase your Personal Data we shall use all reasonable efforts to
- Inform all third parties to whom we have disclosed your Personal Data of the requirement to erase your Personal Data which they hold;
- In the event that your Personal Data has been published online we shall endeavour to ensure that any links or references are also removed, however due to the Cashing of information it may take same time before the Data is no longer visible or available, for example in search engine;
- We may refuse to erase your Personal Data only
- to exercise the right of freedom of expression and information;
- to comply with a legal obligation or for the performance of a public interest task or exercise of official authority;
- for public health purposes in the public interest;
- archiving purposes in the public interest, scientific research historical research or statistical purposes; or
- the exercise or defence of legal claims.
- The right to restrict processing
- We shall, upon your request, restrict the processing of your Personal Data if the following circumstances arise
- Where you contest the accuracy of the Personal Data we shall restrict the processing until we have verified the accuracy of the Personal Data.
- Where you have objected to the processing where it was necessary for the performance of a public interest task or purpose of legitimate interests, and we are considering whether our legitimate grounds override your grounds.
- When processing is unlawful and you oppose erasure and you request restriction instead.
- If we no longer need the Personal Data but you require the information to establish, exercise or defend a legal claim.
- Where processing of your Personal Data is restricted, the information shall be stored but no further processing shall occur.
- We shall inform any third party to whom we disclosed your Personal Data that the Information is restricted.
- We shall inform you when and restricted period comes to an end.
- The right to portable data
- Any Personal Data where the lawful purpose for processing is consent or for the performance of a contract which is stored by us electronically we shall hold that Personal Data in a portable format (readable in a format that will be commonly used on other computer systems) and we shall provide this information to you or directly to another organisation (where technically feasible) upon your request.
- The right to complain.
- If you are not happy with the way we collect or store your Personal Data you can make a complaint to the Information Commissioners Office, however we would appreciate you contacting us first to give us the opportunity to provide an explanation or put things right.
- The right to withdraw consent
- If you provide your consent to process your Personal Data in a particular way, you may withdraw your consent at any time by informing the Data Controller at the address at the bottom of this notice.
- Upon receipt of a notice withdrawing your consent to process your Personal Data we shall stop processing the Data except:
- Where is it necessary for the performance of a contract.
- Where there are compelling legitimate grounds for the processing, which override your interests, rights and freedoms; or
- the processing is for the establishment, exercise, or defence of legal claims; or
- where the processing of the Personal Data is carried out under an obligation in law.
You can contact us regarding any aspect of the collection, use or storage of your Personal Data at the address provided at the top of this notice.