Privacy Policy
This policy applies between you and DSL regarding personal data collected by us through this website, or by post, e-mail and in person, to comply with the General Data Protection Regulations (GDPR).
1. What does this privacy policy cover?
This privacy policy covers our use of your personal information which is collected through or in connection with this web application. For the purposes of this policy, “this application” means the DSL web application. By submitting your personal data to us, you will be treated as having given your permission for disclosures referred to in this policy. It also covers personal data provided to us in the normal course of business.
2. Who is responsible for the personal information collected on/through this application?
DSL, a limited company registered in England and Wales with registered number 03320842, VAT registration number GB 690 7135 25 and registered office at Warwick House, Banbury Rd, Southam CV47 2PT, England, controls the personal data collected through or in connection with this application.
For the purpose of the Data Protection Legislation and this notice, we are both the ‘data controller’ and the ‘data processor’. This means that we are responsible for how we hold and use personal data about you, in accordance with our legal obligation to fulfil the services for which we have been engaged.
3. Glossary of useful terms
Personal data. The meaning of ‘personal data’ refers to any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. It may include :
- Your name and your contact information
- National Insurance numbers
- Employment information
- Financial information such as credit history
- Specific data relevant to the service we provide you with, such as personal tax information or payroll and accounting data
Sensitive personal data. The GDPR refers to sensitive personal data as “special categories of personal data”. The special categories specifically include genetic data, and biometric data where processed to uniquely identify an individual.
Data Controller. A ‘data controller’ determines the purposes and means of processing personal data.
Data Processor. A “data processor” is a person or organisation which processes personal data for the controller.
Data Processing. Data processing in relation to information or data means obtaining, recording or holding the information or data or carrying out any operation or set of operations on the information or data, including:
- the organisation, adaptation or alteration of the information or data,
- the retrieval, consultation or use of the information or data,
- the disclosure of the information or data by transmission, dissemination or otherwise making available, or
- the alignment, combination, blocking, erasure or destruction of the information or data.
4. Information collection and use
We collect and use personal information though our online form (such as your name, email address, and telephone) to give you a call back when requested. We also use your name, contact details and delivery address to:
- Send you service messages by email or by phone
- Provide our business services to you
- Prevent and detect fraud
We also obtain personal data about you when:
- You request a proposal from us in respect of the services we provide;
- You engage us to provide our services and also during the provision of those services;
- You contact us by email, telephone, post (for example when you have a query about our services); or
- From third parties and/or publicly available resources (for example, from your employer or from Companies House).
5. What information we hold about you
The information we hold about you includes the following:
- Your personal details (such as your name and/or address);
- Details of contact we have had with you in relation to the provision, or the proposed provision, of our services;
- Details of any services you have received from us;
- Our correspondence and communications with you;
- Information about any complaints and inquiries you make to us;
6. How we use personal data we hold about you
We may process your personal data for purposes necessary for the performance of our engagement with you and to comply with our legal obligations.
We may process your personal data for the purposes necessary for the performance of our contract with our clients. This may include processing your personal data where you are an employee, subcontractor, supplier or customer of our client.
We may process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing, business development, statistical and management purposes.
We may process your personal data for certain additional purposes with your consent, and in these limited circumstances where your consent is required for the processing of your personal data then you have the right to withdraw your consent to processing for such specific purposes.
Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.
Situations in which we will use your personal data
We may use your personal data in order to:
- carry out our obligations arising from any agreements entered into between you and us (which will most usually be for the provision of our services);
- carry out our obligations arising from any agreements entered into between our clients and us (which will most usually be for the provision of our services) where you may be a subcontractor, supplier or customer of our client;
- provide you with information related to our services and our events and activities that you request from us or which we feel may interest you, provided you have consented to be contacted for such purposes;
- notify you about any changes to our services.
If you refuse to provide us with certain information when requested, we may not be able to perform the contract we have entered into with you. Alternatively, we may be unable to comply with our legal or regulatory obligations.
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
Change of purpose
Where we need to use your personal data for another reason, other than for the purpose for which we collected it, we will only use your personal data where that reason is compatible with the original purpose.
Should it be necessary to use your personal data for a new purpose, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.
7. How long will hold your data for
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
When assessing what retention period is appropriate for your personal data, we take into consideration:-
- The requirements of our business and the services provided;
- Any statutory or legal obligations;
- The purposes for which we originally collected the personal data;
- The lawful grounds on which we based our processing;
- The type of personal data we have collected;
- The amount and categories of your personal data; and
- Whether the purpose of the processing could reasonably be fulfilled by other means.
We will hold your data for a minimum of 7 years in line with our regulatory requirements.
8. Sharing your information
We share your data with the below in the following circumstances as an essential part of being able to provide our services to you, as set out in this statement:
- Our company and any of our employees
- Companies that helps us to provide our services to you such as delivery companies
- Professional service providers who help us run our business
- Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud
Why might you share my personal data with third parties?
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so.
Which third-party service providers process my personal data?
“Third parties” includes third-party service providers. The following activities are carried out by third-party service providers: IT and cloud services.
All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data. We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
What about other third parties?
If we are asked to share your personal data with a third party, for example in connection with a mortgage application, we will contact you first. We may also need to share your personal data with a regulator or to otherwise comply with the law.
9. Marketing messages
If you have said we can, we’ll send you marketing messages by email to keep you aware of DSL news and to help you use and find our services.
10. How to stop marketing messages
You can stop receiving marketing messages from us at any time.
You can do this:
- By clicking on the ‘unsubscribe’ link in any email
- By contacting us on at ask@dslaccounting.com
Once you do this, we will update your profile to ensure that you don’t receive further marketing messages.
11. The use of cookies
We use cookies on our website. We are able to read these cookies for information purposes when you revisit this application. The type of information we collect as a result of a cookie being accepted by you is specific to your PC and includes the IP address, the date and time the PC visited this application, what parts of this application were looked at and whether the web pages requested were delivered successfully. This information is anonymous; it represents a computer rather than a person. The full details of the information collected can be seen on our cookie policy page.
We use the cookie information to improve our knowledge of the use of this application and to enable us to be able to ascertain whether it is operating at an optimal level. You can erase or block this information by changing the settings on your computer (please refer to your help screens or manuals). If you do erase or block this information you may not be able to utilise some features of this application.
12. Keeping our records accurate
It is important that the personal data we hold about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us.
13. Your rights
By law you have the right to:
- Request how your personal information is being used
- Request access to your personal data. This enables you to receive details of the personal data we hold about you and to check that we are processing it lawfully.
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it or retain it. We will not delete personal data where there is a legal obligation for us to hold it.
- Request us to stop direct marketing messages.
- Request the transfer of your personal data to you or another data controller if the processing is based on consent, carried out by automated means and this is technically feasible.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
14. Security of your personal data
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents and contractors who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
15. Will this privacy policy change?
From time to time we may make changes to this privacy policy. If we make any substantial changes to this privacy policy and the way in which we use your personal data we will post these changes on this page and will notify you of any significant changes.
16. How you can contact us
If at any time you would like to contact us about our privacy policy, you can do so by emailing our customer services team at ask@dslaccounting.com