This Privacy Notice will help you understand how we collect, use and protect your personal information. If you have any queries about this Privacy Notice or how we process your personal information, please contact SDC Ltd by email: email@example.com or by post to SDC Ltd 18a Rothesay Place, Edinburgh, EH3 7SQ.
The organisation responsible for the processing of your personal information is SDC Ltd, located at 18a Rothesay Place, Edinburgh, EH3 7SQ. This means that we are a 'data controller' under the Data Protection Act 1998 (and, once in force, to the General Data Protection Regulation (also known as the GDPR)).
The personal data you have provided, we have collected from you, or we have received from third parties includes:
Most of the personal information we hold about you is that which we collect directly from you, for example:
We may store and use your personal information for the purposes of:
Our "legitimate interests" as referred to above (and below) include our legitimate business purposes and commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements.
It is not the intention of SDC Ltd to use your data for marketing or supply your data to any third-party marketing companies.
Where relevant given the nature of the services provided to you, we may also share your information with the following categories of third parties:
We will retain your personal information for a number of purposes, as necessary to allow us to carry out our business. Your information will be kept for up to 12 years on our main systems after which time it may be archived, deleted or anonymised. Some of the archived information may be retained for up to 50 years. These data retention periods are subject to change without further notice as a result of changes to associated law or regulations. If you have any questions in relation to the retention of your personal data, please contact SDC Ltd at the details provided above.
Under the Data Protection Act 1998 you have the following rights:
Once the GDPR comes into force on 25 May 2018, you will also have the following rights:
Please note that these rights may be limited by data protection legislation, and we may be entitled to refuse requests where exceptions apply. If you are not satisfied with how we are processing your personal information, you can make a complaint to the Information Commissioner. You can find out more about your rights under data protection legislation from the Information Commissioner's Office website: www.ico.org.uk