This privacy notice is provided to inform about how and why your personal data is used so that we are transparent in your data’s use and to ensure that you are aware of your rights under data protection legislation. NetVector Consulting provides IT consultancy and support services for small, medium and large sized businesses and is the Data Controller. You can contact us by post at South Barn, Crockham Hill, Edenbridge, TN8 6SR, United Kingdom or email enquiries@netvector.co.uk or call us on +44 (0)3700 500 040.
Which personal data do we process and why?
We process your personal data so we can engage commercially with you to supply our services and support packages. We use your personal data for administration, account management, maintaining communication and for service evaluation and feedback.
As a client or prospective client, we process name, email address, job title, organisation name, business physical address and telephone number. The lawful basis we use for this is Article 6.1.f UK GDPR (Legitimate Interest). Our legitimate interest is to develop and maintain the client relationship. We will also use your business related data to provide relevant marketing material under the lawful basis of Article 6.1.f UK GDPR – legitimate interest. As with any legitimate interest processing, you have the right to object to this and you can do so by contacting us using the information provided above.
If we require your personal data for a contractual reason and you fail to provide the information required, we will be unable to provide the agreed services to you.
Who are the recipients of your data?
As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:
- It is possible that we might be obliged to disclose personal information in response to a court order or other lawful obligation. Our lawful basis for this is Article 6.1.c -legal obligation.
- We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. We would do this as under the basis of Article 6.1.f – legitimate interest as we have a legitimate interest in developing our business.
- We may also share data with law enforcement as part of our service response, our lawful basis for this is Article 6.1.f – legitimate interest.
What about data processed by third parties on our behalf?
We use the services of other organisations in the processing your data. We use cloud-based platforms for email and document storage, video conference and customer relationship management / support logging, also our website processes limited personal data such as through our contact form. We also use organisations that perform maintenance and service work on our behalf such as our web site hosts. We ensure these third party providers manage your data is handled in accordance with the requirements of the UK GPDR.
Do we transfer your data outside of the UK?
We transfer personal data outside of the UK to the USA via our third party providers. These transfers of data are facilitated through the UK extension to the EU – US Data Privacy Framework.
How long do we keep it?
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain some personal data of our clients for 7 years for financial reporting purposes otherwise data is deleted from our system within 3 months of the end of the commercial relationship. Personal data used for marketing purposes is deleted 2 years after last contact. Email correspondence is retained for 10 years.
These are your rights
The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:
- You have the right to get access to and copies of your personal data.
- You can ask us to rectify any inaccurate information we may be holding.
- You can request we restrict our processing of your data.
- You can ask us to erase your personal data if it is no longer required for the purpose we collected it or have no legal obligation to retain it.
- You have the right to object to processing we undertake under a legitimate interest basis.
You also have the right to lodge a complaint about our processing with a supervisory authority, in the UK, this is the Information Commissioner’s Office:
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
If you want to exercise any of these rights, please contact us using the above contact details.
Automated decision making
Netvector does not conduct any profiling or automated decision making.
Changes to our privacy policy
We keep our privacy policy under review, and we will place any updates on our website. This privacy notice was last updated in September 2024.