GDPR Privacy Policy

This Privacy Policy explains how we collect personal information through your interactions with us, including by telephone, email, digital marketing, our website and other sales channels, and how we use that information.
​
Please note, this Privacy Policy does not apply to any activity operated by third parties, who will have their own Policies covering the use of your personal information.

Under UK data protection law, you have a number of rights in relation to your personal information. These include:
​

• The right to be informed about how we collect and use your personal data.

• The right of access to request a copy of the personal data we hold about you.

• The right to rectification to ask us to correct inaccurate or incomplete personal data.

• The right to erasure (also known as the "right to be forgotten") in certain circumstances.

• The right to restrict processing where the accuracy or use of your personal data is contested.

• The right to data portability where processing is based on your consent or a contract and carried out by automated means.

• The right to object to processing where we rely on legitimate interests or process data for direct marketing purposes.

• Rights relating to automated decision-making and profiling, where applicable

To exercise any of these rights, please contact us using the details provided within this Privacy Policy.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
 
We encourage you to contact us first so that we can try to resolve your concerns.

When we first collect your personal information, we will tell you that we want to keep in contact with you to keep you informed about our products and services that we think may be of interest to you. The information we send will be based on the preferences you originally selected. You have the right to request that we cease sending marketing communications, whether by e-mail or otherwise, to you. You can do this by checking certain boxes when we collect your personal information or by clicking the unsubscribe link in the marketing e-mails you receive from us. You can also do this by contacting us at hello@changeconnect.co.uk

We may use your personal information to:
​

• Marketing communications – Where permitted by law, we may contact you by email, telephone, text message or post about our products, services, promotions, events and offers that we think may be of interest to you. Where required, we will only do so with your consent. You can opt out of receiving marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us directly.

• Service communications – We may also contact you regarding your account, the products and services you receive from us, invoices, payment reminders, service updates, changes to our terms or other important non-marketing information. These communications are necessary to administer your account and are not affected by your marketing preferences.

​
If you are a registered user of our website, then these communications may be personalised for you, based on your browsing preferences.

We will not sell, trade, rent or otherwise pass on your personal information to others, including any personal information that we collect through the use of cookies, except as described here or with your prior consent.

We may share personal information with service providers who perform functions and services on our behalf. Such third parties will be provided with personal information necessary to perform the services on our behalf but are not authorised to use such information for any other purposes.

We may disclose your personal information when you enter a competition (for example to the competition sponsors or to provide winners with their prize).

We will always ask for your consent before we publish any material provided by you or information about you. We may carry out research or analysis, which contains your personal information, via our site. We may also disclose personal information about you to comply with applicable laws and when requested to do so by law enforcement agencies or government bodies.

We reserve the right to transfer personal information we have about you in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal information you have provided to us in a manner that is consistent with our Privacy Policy.

Following such a sale or transfer, you may contact the entity to which we transferred your personal information with any inquiries concerning the processing of that information

We do not routinely transfer personal data outside of the United Kingdom (UK) or the European Economic Area (EEA).
​
Where it is necessary to transfer personal data outside the UK or EEA, we will ensure that appropriate safeguards are in place in accordance with UK GDPR. These safeguards may include the use of adequacy regulations, the International Data Transfer Agreement (IDTA), or other legally approved transfer mechanisms.
​
All personal data we hold is stored securely, and we take appropriate technical and organisational measures to protect it from unauthorised access, loss or misuse.

• We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information
   

• We will store all the personal information you provide on our secure (password- and firewall-protected) servers.
   

• You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet
   

• You are responsible for keeping the password you use for accessing our website confidential; we will not ask you for your password (except when you log in to our website)

We may update this Privacy Policy from time to time to reflect changes to our business, legal obligations or regulatory requirements. Any updates will be published on this page and will take effect from the date they are published.

Our website includes hyperlinks to, and details of, third party websites. We have no control over, and are not responsible for, the privacy policies and practices of third parties.

Our website uses Cookies. Cookies are simple text files that website and apps store on your hard drive or browser. Typically, they contain two pieces of information: a site name and unique user ID. Cookies are used to remember your preferences for a site and to record how many times you have visited a site. This means we can tailor your experience depending on your preferences and measure overall usability of our website and apps. We do not use any cookies that identifies you individually. Most browsers allow you to refuse to accept cookies, via their “tools” or “settings” menu but be aware deleting cookies will have a negative impact on the usability of many websites.

We only process personal data where we have a lawful basis to do so under the UK General Data Protection Regulation (UK GDPR). Depending on why we are processing your information, we may rely on one or more of the following lawful bases:

• Performance of a Contract – We process your personal data where it is necessary to provide our products or services, fulfil our contractual obligations, or take steps at your request before entering into a contract.

​

• Legal Obligation – We process personal data where it is necessary to comply with our legal or regulatory obligations, including tax, accounting, fraud prevention and other statutory requirements.

​

• Legitimate Interests – We may process your personal data where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. This includes improving our services, maintaining the security of our systems, preventing fraud, responding to enquiries and managing our business operations.

​

• Consent – Where required by law, we will ask for your consent before processing your personal data, for example when sending certain marketing communications. Where we rely on your consent, you have the right to withdraw it at any time. Withdrawing your consent will not affect the lawfulness of any processing carried out before your consent was withdrawn.

 
Please note that where we process your personal data under a contractual, legal or legitimate interest basis, your right to withdraw consent does not apply, as consent is not the lawful basis for that processing.

We have procedures in place to identify, investigate and respond to suspected personal data breaches.
 
Where a personal data breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with UK GDPR requirements.
 
Where a breach is likely to result in a high risk to affected individuals, we will also notify those individuals without undue delay where required by law.
 
We maintain records of personal data breaches and the actions taken to investigate and mitigate their impact.

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, tax, accounting or reporting requirements. When your personal data is no longer required, it will be securely deleted or anonymised in accordance with our data retention procedures.

If you have any questions or comments about this Privacy Policy or if you would like to exercise your rights, please contact us at: hello@changeconnect.co.uk or you can submit your request in writing to Change Connect Ltd, DS House, Stanhope Industrial Park, Stanford le Hope, SS17 0EH
 
Change Connect Ltd. Registered address: 4 Kings Court, Newcommen Way, Severalls Industrial Estate, Colchester, CO4 9RA. Reg. No. 11928877