☰

Privacy Policy

 

GDPR (DATA PROTECTION) POLICY

At Combe Estate we take protecting your privacy extremely seriously.  It is important to us that you trust us with your personal information and to prepare for the new GDPR compliance regulations which are to be implemented in May 2018, we want to make sure that you understand what information we hold about you and how we collect, store and process it in order to provide our services to you.

Why this policy exists

This data protection policy ensures Combe Estate:

  • Complies with data protection law and follow good practice
  • Protects the rights of staff, customers and partners
  • Is open about how it stores and processes individuals’ data
  • Protects itself from the risks of a data breach

Data protection law

The Data Protection Act 1998 describes how organisations — including Combe Estate — must collect, handle and store personal information.

These rules apply regardless of whether data is stored electronically, on paper or on other materials.

To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.

The Data Protection Act is underpinned by eight important principles. These say that personal data must:

  1. Be processed fairly and lawfully
  2. Be obtained only for specific, lawful purposes
  3. Be adequate, relevant and not excessive
  4. Be accurate and kept up to date
  5. Not be held for any longer than necessary
  6. Processed in accordance with the rights of data subjects
  7. Be protected in appropriate ways
  1. Not be transferred outside the European Economic Area (EEA), unless that country or territory also ensures an adequate level of protection

Personal Information

The personal information stored is limited to name, address, telephone numbers and email address (if provided).  This information is required for accounting and marketing purposes.  If any of your personal information changes or you believe that any of the information we hold is incorrect, please let us know by telephoning 01404 45576 or emailing info@combeestate.com.

Description of Processing

The following is a broad description of the way this organisation/data controller processes personal information.  To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices the organisation has provided or contact the organisation to ask about your personal circumstances.

What do we use your personal information for?

We process personal information to enable us to promote our goods and services, to maintain our accounts and records and to support and manage our staff.

Type/classes of information processed

 We process information relevant to the above reasons/purposes.  This may include:-

  • Personal details
  • Family, lifestyle and social circumstances
  • Financial details
  • Employment and education details
  • Goods or services provided

We also process sensitive classes of information that may include:-

  • Physical or mental health details
  • Racial or ethnic origin
  • Religious or other beliefs of a similar nature
  • Trade Union Membership

Who the information may be shared with

 We sometimes need to share the personal information we process with the individual themselves and also with other organisations.  Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA).  What follows is a description of the new types of organisations we may need to share some of the personal information we process with for one or more reasons.

Where necessary or required we share information with:-

  • Family, associates and representatives of the person whose personal data we are processing
  • Employment and recruitment agencies
  • Current, past and prospective employers
  • Educators and examining bodies
  • Central government
  • Credit reference agencies
  • Suppliers, service providers and professional advisors
  • Debt collection and tracing agencies

Transfers

It may sometimes be necessary to transfer personal information overseas.  When this is needed information is only shared within the European Economic Area (EEA).  Any transfers made will be in full compliance with all aspects of the Data Protection Act.

 How do we protection your personal information?

We aim to protect your personal information in the following ways:-

  • Storing information in secure locations, including information stored electronically.
  • Destroying information which is no longer relevant unless there is a legitimate reason or statutory obligation to retain it.
  • Minimise where practicable, the number of staff or third parties who have access to your information and ensure that we carry out due diligence checks on any third parties who we may involve.

What are you rights?

You have the following rights regarding your personal information:-

  • To make a request to see the personal information we hold about you.
  • To ask us to erase personal information that we hold about you, unless there is a statutory, regulatory or otherwise legitimate reason for us not to comply (we will always provide you with more details about your rights in our response to your request).
  • To ask us to provide you or a third party with the personal information we hold about you.

If you wish to exercise any of your rights regarding the personal information we hold about you, please make a request by email to info@combeestate.com or in writing to our address below.

Marketing

We may contact you in the ways described in our Privacy Notice or in any other way about similar products and services to those you have purchased, unless you tell us that you would prefer not to receive such marketing information.

You can telephone, write or email info@combeestate.com at any time to opt-out of receiving such marketing from us.

Contact Details

If you have any questions about this Privacy Notice or our treatment of your personal information, you can email us at info@combeestate.com, telephone us on 01404 45576 or write to us at Combe Estate, Beech Walk, Gittisham, Honiton, Devon, EX14 3AB

We are registered under the Information Commissioners Office under registration reference: Z730793X