Privacy Notice

Effective 25 Oct 2021

The type of personal information I may collect

I currently collect and process the following information:

Personal identifiers, contacts and characteristics (for example, name and contact details)
Name, job title(s), work address, email address and phone number(s)
Payment and delivery details, including billing address and details
Details of fault tickets, service requests and orders logged
Order history

How I get the personal information and why I have it

Most of the personal information I process is provided directly by you for one of the following reasons:

To enable fulfilment of a service agreement
To enable fulfilment of sales orders
To ensure communication is maintained between me and my customers
To enable me to comply with legal and regulatory obligations with regard to customers, users and suppliers

You may also indirectly share personal data where a service agreement requires me fulfil the role of a "data processor". Any data shared as such will only be involved in agreed processes.

Information is not shared with any other organisations or individuals unless explicitly agreed for the purpose of fulfilling a service agreement.

Under the General Data Protection Regulation (GDPR), the lawful bases relied on for processing this information are:

Your consent. You are able to remove your consent at any time. You can do this by contacting Paul Verrall as detailed below.
I have a contractual obligation.

How personal information is stored

Your information is securely stored for as long as necessary to support the completion of a contract/ transaction or until such a time that you request to withdraw your data from our systems. Information is stored securely on the privately owned computers and servers of Paul Verrall within the United Kingdom. In addition to this Paul Verrall may store your information in the following third party services:

Information used for the purpose of necessary communication with your organisation (e.g. email) are stored in “Google Workspace” associated with the domain “mrverrall.co.uk” and in accordance with EU Data Protection Law. Further details here: https://admin.google.com/terms/apps/7/2/en/dpa_terms.html
Incident and support tickets are stored and processed using cloud services provided by Atlassian.com in accordance with EU Data Protection Law. Further details here: https://www.atlassian.com/trust/privacy/country/europe-and-gdpr
Backup service are provided using “Backblaze B2 Cloud Storage” and restricted only EU based datacentres. Further details here: https://www.backblaze.com/company/gdpr.html

Any personal information identified within data processed for the purpose of a backup shall be encrypted at transfer and at rest.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that I transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.

Please contact me if you wish to make a request (see "How to complain")

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to me at:

Name: Paul Verrall

Address: 23 Coulston Road, Lancaster, LA1 3AD

e-mail: paul@mrverrall.co.uk

You can also complain to the ICO if you are unhappy with how I have used your data.

The ICO’s address:

Information Commissioner’s Office,

Wycliffe House

Water Lane

Wilmslow

Cheshire, SK9 5AF

Helpline number: 0303 123 1113