Who we are
PSP Facilitating Limited (trading as Public Sector Plc) is a company incorporated and registered in England and Wales with company number 06132334 and registered office at Synergy House, 114 – 118 Southampton Row, London WC1B 5AA.
For the purposes of applicable data protection law, we are the data controller of any personal data we collect or receive from you.
Collection of Personal Data
We will collect and store personal data about you as follows:
Identity and contact information: If you complete any forms on our website or are required to register to access any part of our website, or if you contact us in any other way, we may collect your name, email address and any other information you provide to us; and
Technical data: We process details of your visits to our website and the pages that you access, by collecting [your internet protocol (IP) address, cookie data (see section 11 below for further information about cookies), browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website].
Use of Personal Data
We use your personal data to:
- provide you with services, products or information at your request;
- provide you with information about services and products which we believe may be of interest to you (where you have consented to be contacted for such purposes);
- present our website in the optimum way for you and your device. The details you give us may be combined with information about your use of our website and information from any other of our records;
- notify you of any changes to our website; and
- as we believe to be necessary or appropriate:
- in order to comply with a legal obligation. This applies where the processing is necessary for us to comply with the law;
- to protect our legitimate rights, privacy, property or safety, and/or those of a third party and your rights do not override those interests.
Under applicable data protection laws, we must have a legal basis in order to process your personal data. The legal bases on which we may process your data are:
Legitimate interests: where processing of your personal data is necessary for us to pursue our legitimate interests, for example, for the purposes of enhancing users’ experience of our website and services, to promote our business.
Consent: where you have consented for us to process your personal data for one or more specific reasons, for example, for electronic marketing messages.
Legal obligation: where processing of the data is required by law.
It is important to us that we only contact you about services, products and information which you may want or need. You will therefore only receive such communications from us if you have consented to, and have not at any point opted out from, receiving marketing communications from us.
Opting out from receiving marketing communications from us is easy and you may do so at any time by contacting us at firstname.lastname@example.org. We will process your request to be opted-out of marketing promptly and within 30 days of receipt.
Where you opt out of receiving these marketing communications, we may still process your personal data for other required purposes, as specified in section 4 above.
Storage and Disclosure of Personal Data
We have put in place appropriate technical and organisational security measures to prevent any unauthorised access to your personal data. Your personal data will be stored on our secure servers.
We sometimes transfer your personal data with certain third parties, including third parties based outside of the European Economic Area (EEA). The third parties to which we may transfer your personal data include:
suppliers that we engage to provide some of our services or to provide services to us. To enable them to do this, we may need to let them process your personal information. Our staff and those working for our agents or contractors have a responsibility to keep your information confidential and are only allowed to use it to provide products and services on our behalf;
- other companies in our corporate group; and
- a purchaser or potential purchaser of our business.
- In addition, we may disclose your personal data to third parties where we have a reasonable need to do so in order to comply with, or enforce, any legal obligation.
We will only transfer your data to a location outside of the EEA where suitable safeguards have been put in place. These safeguards are intended to ensure a similar degree of protection is afforded to your data wherever it may be transferred and include:
only transferring your personal data to countries which have been deemed to provide an adequate level of protection for personal data by the European Commission;
where your data will be transferred outside of the EEA, entering into specific contractual terms which have been approved by the European Commission and which give personal data the same protection as within the EEA; or
where your data will be transferred to the US, ensuring that the third party to which we are transferring your data is part of the Privacy Shield.
For more information on the safeguards we use when transferring personal data overseas, please contact us at email@example.com.
Right of access to your Personal Data
You have certain rights in relation to the personal data we process and hold about you. These include:
- Right to rectification: you have the right to require us to correct any inaccuracies in your data.
- Right to erasure: you have the right to require us to delete your data, subject to certain legal requirements.
- Right to restriction of processing: you have the right to require us to restrict the way in which we process your personal data. You may wish to restrict processing if, for example:
- You contest the accuracy of the data and wish to have it corrected; or
- If you would prefer restriction to erasure.
Right to data portability: you have the right to obtain from us easily and securely the personal data we hold on you for any purpose you see fit.
Right to object to processing: you have the right to require us to stop processing your personal data should you wish the data to be retained but no longer processed.
Right of access: you have the right to request access to personal data that we may process about you.
Right to withdraw consent: you have the right at any time to withdraw consent allowing us to process your personal data.
If you would like to exercise any of the above rights, please write to our Data Protection Lead Officer at our address set out above, and:
include proof of your identity (such as a copy of your driving licence or passport) and address (such as a recent utility or credit card bill); and specify the right you wish to exercise.
We will respond to requests made by you within one month.
Transmission of Personal Data
Our general email enquiry forms are not sent via an encrypted channel and for this reason we ask that you do not include confidential information when using them (such as bank account details).
We respect the privacy of personal email accounts and we store your email addresses just as securely as other personal data. We will not send you unwanted email messages or junk mail, and your details will not be passed to any third party for marketing purposes without your consent.
We may use email in response to enquiries you make about our services.
Third party links
Our website may contain links to third party websites. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services, such as contact and location data. Please check these policies before you submit any personal data to these websites or use these services.
Retention of your data
We will not retain your personal data for longer than is necessary for the purposes for which the personal data is processed. When calculating the appropriate retention period for your data, we consider the nature and sensitivity of the data, the purposes for which we are processing the data, and any applicable statutory retention periods. Using these criteria, we regularly review the personal data which we hold and the purposes for which it is held and processed.
When we determine that personal data can no longer be retained (or where you request us to delete your data in accordance with your right to do so (please see section 7 above for more information)), we ensure that this data is securely deleted or destroyed.
For more details about our retention periods, please contact us at firstname.lastname@example.org.
As a result of improvements we make to our services, amendments to laws or regulation or developments in the technology or processes we use, we may change the information we hold about you and/or the way in which or the purposes for which we process such information.
Where we are required to inform you of such change, or where we require your consent, we will notify you of the change. However, unless you inform us otherwise, we will deem your continued use of our website and services to which the change relates to constitute your consent to the relevant change.
Please help us
We want our website and service to exceed your expectations on all occasions. To do so we need the information we hold about you to be accurate and up to date. Please help us by informing us promptly of any changes to your personal circumstances, using the contact details below.
You should be aware that you have the right to raise any concerns in relation to how we process your personal data to the Information Commissioner’s Office (ICO).
Data Privacy Lead
Public Sector Plc
114 – 118 Southampton Row