SME Advisor Limited is a specialist consultancy, providing outsourced Human Resources, Health & Safety, related Training Services and ancillary Human Resource based services to businesses.
As an essential part of our business, we collect and manage client and non-client data. In doing so, we observe the UK data protection legislation, and are committed to protecting and respecting clients’ and non-client’s privacy and rights.
As such, we act as a “Data Controller” in respect of the information gathered and processed by us.
To ensure that you are informed about how we operate, we have developed this privacy notice, which details how we collect, manage, process, store and share information about you as a result of you visiting this site, consulting with us or through using our training services.
The privacy notice also provides you with information about how you can have control over the use of your data.
If you have any comments or queries regarding our use of your data, please contact our Data Protection Officer at email@example.com
You can also write to our Data Protection Officer at SME Advisor Limited, 5 & 7 Sussex Business Village, Lake Lane, Barnham PO22 0AL.
What Information Do We Collect?
In general terms, we collect information about you to enable us to:
- Administer our relationship with you, provide services and respond to enquiries
- Fulfil our contract with employers to provide outsourced Human Resources, Health & Safety and Training services
- Introduce consenting customers to providers of Private Medical Insurance
- Enable business development including sending newsletters, information updates and details of our services
- Process applications for employment
- Deliver requested information to you about our services and products
- Ensure the billing of any services and obtain payment
- Process and respond to any complaints
- Enable us to meet our legal and other regulatory obligations imposed on us
The information we need for these purposes is known as “personal data.” This includes your name, address (work or home), email address, telephone and other contact numbers and financial information.
We collect this in a number of different ways. For example, you may provide this data to us by email, via our website, over the telephone, by letter or through a contractual relationship that we hold with your employer who use our services
We also process sensitive classes of information that includes:
- Physical or mental health details, and
- Racial or ethnic origin.
We will seek your permission if we need to record any of your sensitive personal data on our systems.
How Do We Use The Information?
We use the data we collect from you for the specific purposes listed in the table below. Please note that this table also explains:
- The legal basis for processing your data, linked to each processing purpose; and
- In what circumstances your data will be shared with a third-party organisation.
|Purpose for processing data||Legal basis for processing data
|Third party organisations with whom data is shared|
|To administer our relationship with you, to provide services and respond to enquiries.||To meet the requirements of a contract.
|To administer our relationship with you, to provide introductions (where requested) to third party suppliers.||To meet the requirements of a contract.||Selected approved third-party suppliers.|
|To fulfil our contract with employers to provide outsourced Human Resources, Health & Safety and Training services.||To meet the requirements of a contract.||Your employer.|
|To ensure the billing of any procured services by you and obtain payment.||To meet the requirements of a contract.
|Government VAT and tax inspectors, external auditors, internal auditors.|
|To communicate with you on our services relevant to your interests and in line with your preferences.||To seek explicit consent prior to sending individuals the information and in line with preferences.||None.
|To provide enquirers support by telephone.
|To fulfil contractual obligations this includes taking action before entering into a contract.||None.
|To process and respond to complaints.||To meet a legal obligation.
Under the terms of data protection legislation, you have the following rights:
Right To Be Informed
This privacy notice fulfils our obligation to tell you about the ways in which we use your information.
Right To Access
You have the right to ask us for a copy of any personal data that we hold about you. This is known as a “Subject Access Request.” Except in exceptional circumstances (which we would discuss and agree with you in advance), you can obtain this information at no cost.
We will send you a copy of the information within 30 days of your request.
To make Subject Access Request, please write to our Group Data Protection Officer (details above).
Right To Rectification
If any of the information that we hold about you is inaccurate, you can either contact us on 0330 333 4997 or contact our Data Protection Officer (details above).
Right To Be Forgotten
You can ask that we erase all personal information that we hold about you. Where it is appropriate that we comply, your request will be fully actioned within 30 days.
Right To Object
You have the right to object to:
- The continued use of your data for any purpose listed above for which consent is identified as the lawful basis for processing i.e. you have the right to withdraw your consent at any time.
- The continued use of your data for any purpose listed above for which the lawful basis of processing is that it has been deemed legitimate.
Right To Restrict Processing
- If you wish us to restrict the use of your data because
– you think it is inaccurate, but this will take time to validate,
– you believe our data processing is unlawful, but you do not want your data erased,
– you want us to retain your data in order to establish, exercise or defend a legal claim, or
– you wish to object to the processing of your data, but we have yet to determine whether this is appropriate, please contact our Data Protection Officer (details above).
Right To Data Portability
If you would like to move, copy or transfer the electronic personal data that we hold about you to another organisation, please contact our Data Protection Officer (details above).
Rights Related To Automated Decision-Making
If you would like to object to automated decision making without any individual involvement, and to the profiling of your data, please contact our Data Protection Officer (details above).
Is The Processing Of Information Likely To Cause Individuals To Object Or Complain?
We are not aware of any justifiable reasons that would constitute a legitimate reason for objecting or complaining about the way we process or control information.
How Long Will We Retain Information For?
We will typically retain information for a period of seven years. This is due to regulatory reasons and to ensure our business records are adequate to maintain the requisite levels of insurance to protect our clients and non-clients.
None of the information that we collect process or store as a result of this website is transferred outside of the European Economic Area (EEA).
Data Privacy And Security
We maintain a comprehensive data management work programme, which includes processes for ensuring that data protection is a key consideration of all new and existing IT systems that hold personal data.
Where any concerns, risks or issues are identified, we conduct relevant impact assessments in order to determine any actions that are necessary to ensure optimum privacy.
We also maintain an active information security work programme which seeks to protect the availability, confidentiality and integrity of all physical and information assets.
Specifically, this helps us to:
- Protect against potential breaches of confidentiality;
- Ensure all IT facilities are protected against damage, loss or misuse;
- Increase awareness and understanding of the requirements of information security, and the responsibility of our colleagues to protect the confidentiality and integrity of the information that they handle; and
- Ensure the optimum security of this website.
Cookies And Links To Other Websites
By using our websites you agree that we can place these types of cookies on your device.
We may also use analytics tools provided by Google, Inc. (“Google”) or other similar providers. Analytics tools serve cookies through our website and collects aggregated data on an anonymised basis about users and visitors’ use of the website. The data collected enables us to understand aggregated user or visitor activity and how we may improve our website or charitable offering. This data is collected and used on an anonymised, aggregated basis only and does not enable any user or visitor to be personally identified.
In addition, we may also use marketing automation tools. These companies serve cookies to profile users or visitors’ interests and activity. We may use data collected through these cookies to serve users or visitors with information, new articles and advertising tailored to their specific needs and requirements.
You have the right to refuse or disable cookies served through our website although, if you choose to do so, certain functionality may become unavailable to you. As the means by which you may do this vary from browser to browser, we recommend that you visit your browser’s help menu for further information.
We respect your right to choose whether or not to accept cookies.
Please note that if you do not set your browser and e-mail settings to disable cookies, you will be indicating your consent to receive them.
If you wish to find out more about cookies and clear gifs, you may like to visit www.allaboutcookies.org an independent third-party resource that explains what cookies and clear gifs are and how you may manage them. Please note that we are not responsible for, and have no control over, the content of this third-party website.
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Right To Cancel And Refunds
You can cancel any services you order via the website within 7 days of your order being accepted, except that where the services are provided within 7 days of the order being accepted, your right to cancel ceases once provision of the services starts. You should send any notice of cancellation of an order immediately to firstname.lastname@example.org
Please give full details of the order when you notify us of your cancellation. Where you cancel an order in accordance with these terms and conditions, we will refund to you any sums paid for that order within 30 days of receipt of your cancellation.
Questions and comments regarding this Privacy Notice are welcomed and should be sent to our Data Protection Officer (details above).
You can also contact our Data Protection Officer if you have any concerns or complaints about the ways in which your personal data has been handled.
Alternatively, you have the right to lodge a complaint with the Information Commissioner’s Office who may be contacted at www.ico.org.uk
5 & 7 Sussex Business Village, Lake Lane, Barnham PO22 0AL
Tel: 0330 333 4997
e mail: email@example.com