PRIVACY NOTICE
Jamen Jones as a data controller is bound by the requirements of the General Data Protection Regulations (GDPR).
Jamen Jones takes privacy seriously and we only use personal data to provide the services you have requested from us.
Data
We will obtain, process and retain your personal data in accordance with our agreement for services. We will only use the information subject to your instructions, data protection law and our duty of confidentiality.
The data collected may be verbal, written or electronic.
We may also use the data for operational and administrative purposes including (but not limited to)
Updating and enhancing client records
Analysis for management purposes
Statutory returns
Legal & Regulatory compliance
Crime prevention
We may anonymise or pseudonymise the data held so it can no longer be associated with you, in which case we may use it without further notice.
We will process your personal data in accordance with money laundering regulations. This data is only processed for this purpose.
Our work for you may require us to pass your information to our third-party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing the Services to you on our behalf. However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the Services and we have contracts in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.
We will not share your information for marketing purposes with any company.
Safeguards of Data Transfer outside of Europe
As part of our services offered to you, the data you provide to us may be held on third party servers held outside the EU. Where the data is held within the EU, the third-party providers are GDPR compliant. Where the provider may be in the US, we understand the data/services fall under the US Privacy Shield.
Data Security
We take steps to ensure that the data we hold for you is held securely.
Data sent over the Internet cannot be guaranteed to be 100% secure. We cannot guarantee the security of the data you transmit to us. Once we receive your data we make our best efforts to ensure its security on our systems.
Data Retention
We will hold your data for in line with statutory and regulatory requirements and where our insurers require where we have ceased to act for you.
Your Rights
Under GDPR you have rights about data we hold about you
Access – You have the right to request a copy of the information that we hold for you. If you would like a copy of the data we hold for you, please email us. We will respond within 30 days of receipt your request.
Rectify – You have the right to rectify any personal data we hold for you if you think this is inaccurate.
Object – You have the right to object to the processing of your personal data. We may be able to deny this request if we can show legitimate grounds for the processing. We will restrict the processing of data while we review your objection.
Data Portability – You have the right to receive the personal data in a structured commonly used and machine-readable format and have the right to transmit this data to another controller.
Erasure – You have the right to be forgotten and can request us to completely delete all the information that we hold about you.
Complaint – You have the right to complain if you feel your data has not been processed within GDPR. You are able to lodge a complaint with the supervisory authority in the UK which is the Information Commissioner’s Office.
Profiling – You have the right for your data not to be profiled. We would advise you that the firm does not use personal data held for profiling.
Glossary of Terms
What is personal data?
Personal data relates to any information about a natural person that makes you identifiable which may include (but is not limited to):
- Names and contact information i.e. emails and telephone numbers
- National Insurance Numbers
- Employment history
- Employee numbers
- Personal tax
- Payroll and accounting data
What is sensitive personal data?
Sensitive personal data refers to the above but includes genetic data and biometric data. For example:
- Medical conditions
- Religious or philosophical beliefs and political opinions
- Racial or ethnic origin
- Convictions
- Biometric data (eg photo in an electronic passport)