GDPR Policies

Data Privacy Policy – Website

Introduction

ECS is committed to safeguarding the privacy of its website users.  We are committed to ensuring that your privacy is protected, respected and dealt with in accordance with applicable laws.

Our website and online services incorporate privacy controls, which affect how we will process your personal data.  By using these privacy controls, you can state whether you would like to receive direct marketing communications and limit the publication of your information.

The data we capture from our customers is used for the provision of our services, billing and payment collection.  The legal basis for this processing is contract: the processing is necessary for a contract you have with us, or you have asked us to take specific steps before entering into a contract.

Where we store your information and how we protect it.

We store and retain information in the United Kingdom.  It is held securely on our servers.

Retaining and deleting personal data

We have data retention policies and procedures designed to help ensure we comply with our legal obligations in relation to the retention and deletion of personal data.

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose of those purposes.  Personal data will be stored for a period of three years or such period we deem appropriate.

All personal data that is disposed of by us will be carried out in a secure manner.  Paper-based files will be securely shredded.  Electronic copies of information will be permanently deleted from our system.

Your rights

You have rights under the data protection law.  Some of these rights are complex.  Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

Data protection legislation provides individuals with the right to see what information organisations hold about them.  This is known as a ‘subject access request’.  If you would like to make a subject access request please write to The Data Protection Officer at ECS. You may have the right to request that we delete the information that we hold about you.  This doesn’t apply in all circumstances, in particular, those in which we may require your information to enable us to comply with a legal or compliance obligation.

In circumstances where you believe that the information that we hold about you is incorrect, please advise accordingly and we will update our records within one month (or two months if your request is complex).

Your principal rights under the data protection law are:

  • The right to access;
  • The right to rectification;
  • The right to erasure;
  • The right to restrict processing;
  • The right to object to processing;
  • The right to data portability;
  • The right to complain to a supervisory authority; and
  • The right to withdraw consent.

Changes to this policy

This policy may change at any time.  You should check this page periodically in order to ensure that you are aware of any changes.

Direct marketing

ECS issues communications to prospects, contacts and customers by email and mail.  We only do this where you have opted in to receive them or a legitimate interest has been identified.

Cookies

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

If you are using our website we will automatically obtain information from you as part of that visit. This information will not identify you, however, will allow us to:

  • to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • improve our site to ensure that content is presented in the most effective manner for you and for your computer;
  • allow you to participate in interactive features of our service when you choose to do so;
  • as part of our efforts to keep our site safe and secure.

You can restrict or block the cookies used by our site through your browser settings but this will impact your user experience.

Alternatively, you can visit www.aboutcookies.org that provides directions on how to block cookies on all major browsers. The site also explains how you can delete cookies that have already been stored on your computer and provides general information about cookies.

You should be aware that restricting cookies might affect the functionality of the websites you visit.

Links to other websites

Our website may contain links to other websites. These websites will have their own privacy policies for which we do not accept any responsibility. This policy does not extend to your use of any other website or to any information you may provide or may be collected by any other website. 

Data Privacy Policy – Customers

Introduction

ECS is committed to safeguarding the privacy of its customers.  We are committed to ensuring that your privacy is protected, respected and dealt with in accordance with applicable laws.

Our website and online services incorporate privacy controls, which affect how we will process your personal data.  By using these privacy controls, you can state whether you would like to receive direct marketing communications and limit the publication of your information.

The data we capture from our customers is used for the provision of our services, billing and payment collection.  The legal basis for this processing is contract: the processing is necessary for a contract you have with us, or you have asked us to take specific steps before entering into a contract.

We may process your account data, which may include your name, address, phone number and email address.  The account data may be processed for the purposes of operating your website, providing our services, ensuring the security of websites and services, maintaining and safeguarding back-ups of our databases and communicating with you.  The legal basis for this processing is contract: the processing is necessary for a contract you have with us, or you have asked us to take specific steps before entering into a contract.

We may pass your data to third parties only to provide you with the services we are contracted to provide you with.  A list of third party data sub-processors is available on request.

Occasionally we will be required to use information that is provided to us to comply with our overriding obligations to external authorities.  As such, we may, in certain circumstances, be required to disclose your information in the prevention of a crime or to comply with any legal or regulatory compliance obligations imposed upon us.

Where we store your information and how we protect it

We store and retain information in the United Kingdom.  We store all customer information in our customer management system, which is held securely on our servers.

Retaining and deleting personal data

We have data retention policies and procedures designed to help ensure we comply with our legal obligations in relation to the retention and deletion of personal data.

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose of those purposes.  Personal data will be stored for a period of three years or such period we deem appropriate.

All personal data that is disposed of by us will be carried out in a secure manner.  Paper-based files will be securely shredded.  Electronic copies of information will be permanently deleted from our system.

Your rights

You have rights under the data protection law.  Some of these rights are complex.  Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

Data protection legislation provides individuals with the right to see what information organisations hold about them.  This is known as a ‘subject access request’.  If you would like to make a subject access request please write to The Data Protection Officer at ECS.

You may have the right to request that we delete the information that we hold about you.  This doesn’t apply in all circumstances, in particular, those in which we may require your information to enable us to comply with a legal or compliance obligation.

In circumstances where you believe that the information that we hold about you is incorrect, please advise accordingly and we will update our records within one month (or two months if your request is complex).

Your principal rights under the data protection law are:

  • The right to access;
  • The right to rectification;
  • The right to erasure;
  • The right to restrict processing;
  • The right to object to processing;
  • The right to data portability;
  • The right to complain to a supervisory authority; and
  • The right to withdraw consent.

Changes to this policy

This policy may change at any time.  You should check this page periodically in order to ensure that you are aware of any changes.

Direct marketing

ECS issues communications to prospects, contacts and customers by email and mail.  We only do this where you have opted in to receive them or a legitimate interest has been identified.

Data Privacy Policy – Direct Marketing

Introduction

ECS is committed to safeguarding the privacy of its database of UK businesses.  We are committed to ensuring that your privacy is protected, respected and dealt with in accordance with applicable laws.

The data we hold and process in our database is used for direct marketing.  The legal basis for this processing is our legitimate interests, namely direct marketing.

Our website and online services incorporate privacy controls, which affect how we will process your personal data.  By using these privacy controls, you can state whether you would like to receive direct marketing communications and limit the publication of your information.

Where we store your information and how we protect it

We store and retain information in the United Kingdom.  We store all customer information in our customer management system, which is held securely on our servers.

Retaining and deleting personal data

We have data retention policies and procedures designed to help ensure we comply with our legal obligations in relation to the retention and deletion of personal data.

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose of those purposes.  Personal data will be stored for a period of three years or such period we deem appropriate.

All personal data that is disposed of by us will be carried out in a secure manner.  Paper-based files will be securely shredded.  Electronic copies of information will be permanently deleted from our system.

Your rights

You have rights under the data protection law.  Some of these rights are complex.  Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

Data protection legislation provides individuals with the right to see what information organisations hold about them.  This is known as a ‘subject access request’.  If you would like to make a subject access request please write to The Data Protection Officer at ECS.

You may have the right to request that we delete the information that we hold about you.  This doesn’t apply in all circumstances, in particular, those in which we may require your information to enable us to comply with a legal or compliance obligation.

In circumstances where you believe that the information that we hold about you is incorrect, please advise accordingly and we will update our records within one month (or two months if your request is complex).

Your principal rights under the data protection law are:

  • The right to access;
  • The right to rectification;
  • The right to erasure;
  • The right to restrict processing;
  • The right to object to processing;
  • The right to data portability;
  • The right to complain to a supervisory authority; and
  • The right to withdraw consent.

Changes to this policy

This policy may change at any time.  You should check this page periodically in order to ensure that you are aware of any changes.

Direct marketing

ECS issues communications to prospects, contacts and customers by email and mail.  We only do this where you have opted in to receive them or a legitimate interest has been identified.