Nik and Carole Privacy & Cookies Policy
This Privacy & Cookies policy explains the Privacy & Cookies policy of Nik and Carole Ltd (“Nik and Carole”), Company No. 6848364, VAT No. 948658461, whose registered address is Nik and Carole, Suite C, King’s Court, Railway Street, Altrincham, Cheshire WA14 2RD, UK.
Nik and Carole is acutely aware of its obligations and responsibilities with regard to the privacy of all stakeholders (including, but not limited to brands; clients; prospects; suppliers; staff/candidates). Specifically, Nik and Carole is committed to ensuring that all data processing is: –
- processed lawfully, fairly and in a transparent manner
- collected for specified, explicit and legitimate purposes
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
- accurate and, where necessary, kept up to date
- kept in a form which permits identification of data subjects for no longer than is necessary
- processed in a manner that ensures appropriate security of the personal data
This Privacy & Cookies Policy was last updated in May 2018, with a number of changes made in anticipation of the General Data Protection Regulation, set for implementation in May 2018.
2. Collection of personal information
Why do we collect personal information about you?
The reason we chose to collect, and process personal information depends on your relationship with Nik and Carole: –
Brand: If you are a decision-maker at a brand (for example a Managing Director at a retail business), we may collect and process personal data on you. The objective is to help us connect with potential clients and ultimately build relationships with businesses that are interested in working with us in a more effective manner.
In this instance, we are collecting and processing your personal data using Legitimate Interests as the Legal Basis for Processing. The Legitimate Interest is that by processing your personal data, you are more likely to receive communications from us about services and work that are relevant to your role and your business. We are careful not to process any sensitive personal information, and restrict data processing to corporate/B2B data. We have determined in our Legitimate Interests Assessment, and a Data Protection Impact Assessment that this data processing activity is very unlikely to have an adverse impact on your privacy.
Client: If you are a client of Nik and Carole, we collect and process personal information in order to most effectively deliver the service that you have subscribed to.
In this instance, we are collecting and processing your personal data using Legitimate Interests as the Legal Basis for Processing. The Legitimate Interest is that we need to process data on you to improve your experience of the Nik and Carole platform. We are careful not to process and sensitive personal information, and restrict data processing to corporate/B2B data. We have determined in our Legitimate Interests Assessment, that this data processing activity is very unlikely to have an adverse impact on your privacy.
Prospect: If you are a Prospect (a business that we believe is likely to benefit from Nik and Carole’s services), we may collect and process personal data on you as part of our efforts to sell, promotion and market our services to you.
In this instance, we are collecting and processing your personal data using Legitimate Interests as the Legal Basis for Processing. The Legitimate Interest is that we believe the service we provide is likely to be of interest to you (although please tell us if it is not and we will remove you from future communications). We are careful not to process any sensitive personal information, and restrict data processing to corporate/B2B data. We have determined in our Legitimate Interests Assessment, and a Data Protection Impact Assessment that this data processing activity is very unlikely to have an adverse impact on your privacy.
Supplier: If you are a supplier to Nik and Carole, we collect and process personal information as part of our contractual relationship with you.
In this instance, we are collecting and processing your personal data using Legitimate Interests as the Legal Basis for Processing. The Legitimate Interest is that it is necessary to collect and process person data on you as part of our contractual relationship with you. We are careful not to process and sensitive personal information, and restrict data processing to corporate/B2B data. We have determined in our Legitimate Interests Assessment, and a Data Protection Impact Assessment that this data processing activity is very unlikely to have an adverse impact on your privacy.
Staff member or candidate: If you are a staff member of Nik and Carole, or you have applied for a job with us, we will collect and process personal information as part of our relationship with you.
In this instance, we are collecting and processing your personal data using Legitimate Interests as the Legal Basis for Processing. The Legitimate Interest is that it is necessary to collect and process person data on you as part of our relationship with you as a staff member or candidate.
How do we collect personal information from you?
- Information may be collected in the following ways: –
- Face-to-face (e.g. in an interview)
- Phone (e.g. in a telephone conversation with one of our researchers)
- Email (e.g. in a negotiation with one of our sales team)
- Desk research (in this case, only publicly-available personal information is processed – e.g. we may find and store information that you have posted on LinkedIn)
- Post (e.g. we may record data that you send to us by post)
What type of information is collected?</h3<
The types of data we will collect on may include: –
- Your name
- Corporate email address
- Workplace address
- Written Records/notes of conversations that you have had with us
- A report that has been written by our team, detailing your supplier preferences and business challenges
- Records of emails that we have sent you/you have sent us
- Your current professional position
- Personal email address (staff and candidates only)
- Home address (staff only)
Aside from the two last examples above, all data collected and processed by Nik and Carole is ‘corporate’ or ‘business to business’ data.
Nik and Carole has trained its staff to ensure that no ‘special categories’ or personal data (e.g. the ethnicity, or religious beliefs of data subjects) are collected and/or processed.
Nik and Carole does not collect or process personal data on children.
How is your information used?
We use your information for a variety of reasons, depending on the nature of your relationship with us, including: –
- To deliver the service that you have signed up to effectively
- To make a decision on whether or not to try and sell our services to you
- To deliver a tailored programme of project management
Disclosure to third parties
For brand data, we may choose to disclose your personal information to a select group of third parties, namely business that provide services or relevant to your business. We do this because we believe that by doing so, you are more likely to receive relevant business introductions that will be of interest to you in a corporate capacity.
We are committed to real transparency about this element of our data processing, so may speak to you about it on the phone or send you an email explaining/confirming that we are processing your personal data and it will be shared with third parties.
We are committed to giving you the opportunity to ask for us not to disclose your information to these third parties. If you object, please tell us on the phone, reply to an email we’ve sent you, email email@example.com or write to us at the address above.
Keeping the data we hold on you up to date
We endeavour to keep the information that we hold on you as up-to-date as possible, so have put in place a process to clean our data on a rolling cycle, with the help of third party specialist software providers and suppliers. If you find that any data m is not up-to-date or, you receive a communication from us that includes incorrect information, please alert us by emailing firstname.lastname@example.org.
3. Controlling personal information that we hold on you
As a data subject, we acknowledge that you have a right to control whether or not we collect and process personal data on you, and to ask for us to stop processing/delete data that we hold.
Nik and Carole is committed to ensuring that we process personal data in line with your wishes, so please tell us if you’re unhappy with us holding any of the data that we do. You can do this: –
- By phone: please call 0161 929 7737
- Write to us: Nik and Carole, Suite C, King’s Court, Railway Street, Altrincham, Cheshire WA14 2RD
- By email: Please email email@example.com
We will ensure that any requests for personal data to be deleted, are actioned within 2 business days of the request being received.
We are also committed to keeping personal data that we hold as accurate and up-to-date as possible. If you believe that we hold personal data on you that isn’t up to date and want this rectified, please contact us.
Cookies are files that include very small amounts of data, commonly used as an anonymous unique identifier. These are transmitted from your web browser from the web page that you have visited, and may subsequently be stored on the hard drive of the computer (or other device) that you are using.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.aboutcookies.org or http://www.allaboutcookies.org.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
5. Email marketing & newsletters
From time-to-time we may send you content via email that we believe is likely to be of interest to you.
For companies that we believe are likely to be interested in our services we may from time to time decide to send you information by email, post or phone that we believe will be of interest to your role.
This information may include extracts of research that we have done, or the opportunity to speak with our team to conduct a demonstration of Nik and Caroles’ services (if you’re not interested in receiving these communications, please let us know).
For Nik and Carole clients, we will also send regular emails – to update you on latest information available via our service.
We are careful to ensure that all email correspondence sent out by Nik and Carole includes a clear ‘unsubscribe’ link, and have a robust internal policy in place to deal with unsubscribe requests we may receive from stakeholders.
6. Data Security
All data held by Nik and Carole on its clients and their associated business activities, by staff at King’s Court. The nikandcarole.co.uk website is hosted in a secure data centre.
While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.
7. Retention of data
Nik and Carole may retain data for differing periods of time for different purposes as required by law or best practices. However, under no circumstances will we retain your personal data for a period of longer than five years (from the point of collection or updating) unless there is a critical business reason to do so (for example, we may need to maintain records of invoices issued to you for longer than this for accounting reasons).
8. Links to Other Sites
9. If you email us
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware you have a responsibility to ensure that any email you send is within the bounds of the law.
10. The personal information of children
Our Services do not address anyone under the age of 15. We do not knowingly collect personal identifiable information from children under 15. In the case we discover that a child under 15 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.