PRIVACY POLICY

This Privacy Policy explains how we collect, use, and share your personal data when you visit or interact with our website https://www.crestnicholsonatrackheath.com/ (the "Website").

The website is managed by Connect Public Affairs Ltd ("Connect", "we", "us", or "our"), a company registered in England and Wales with company number 02624575 and registered office at Grove House, 1 Grove Place, Bedford MK40 3JJ. Connect acts on behalf of Crest Nicholson to collect information relating to the Green lane west development proposals.

We are committed to protecting and respecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

We at Connect Public Affairs Ltd, trading as Connect, registered address: Grove House, 1 Grove Place, Bedford, Bedfordshire MK40 3JJ, company number: 03449749 (“we” or “our” or “us”) want to make sure all the personal information we have collected about you is safe and secure whether we collect it through our website at https://connectpa.co.uk/ (“Site”) or from other sources. This Policy set outs our commitments to you, in compliance with, and beyond the General Data Protection Regulation (commonly known as the GDPR) and explains how we collect, store and use your personal information.

We have not appointed a Data Protection Officer to oversee our compliance with data protection laws as we not required to do so, but our Data Protection Compliance Manager has overall responsibility for data protection compliance in our organisation. If you have any questions about this Policy or what we do with your personal information, their contact details are set out in the "Contact" section below.

Privacy Notices

Collecting specific, relevant personal information is a necessary part of us being able to provide you with any services you may request from us or in providing services to our clients or just managing our relationship with you.

When we hold or use your personal information as a data controller (see below for a description of what this is) we will provide you with a privacy notice which sets out in detail what information we hold about you (such as your contact details, address, email address, phone number etc), how your personal information may be used and the reasons for these uses, together with details of your rights.

Where we collect personal information from you directly, we will provide this privacy notice at the time we collect the personal information from you. Where we receive your personal information indirectly, we will provide this privacy notice when we first contact you, first pass the data to someone else or within a month, whichever is earlier.

We will only provide this privacy notice to you once, generally at the start of our relationship with you. However, if the applicable privacy notice is updated substantially, then we may provide you with details of the updated version. You are encouraged to check back regularly for updates.

A copy of our current privacy notice can be found at https://connectpa.co.uk/privacy-policy/

The difference between data controllers and data processors

A data controller is a person who controls how personal information is processed and used. A data processor is a person who processes and uses personal information in accordance with the instructions of a third party, i.e. the data controller.

This distinction is important. You have certain rights in relation to your personal information, for example, the right to be provided with the personal information held about you and details of its use and the right to have certain personal information either erased or anonymised, commonly referred to as the right to be forgotten (see below on what rights you have). These rights can generally only be exercised against a data controller of your information.

In most cases we will be a data controller of your personal information. In any case where we are not a data controller this means that you cannot exercise these rights against us directly (i.e. where we only act as a data processor), but you can do so against the data controller (i.e. the person who controls how we process the personal information). In these cases we will endeavour to inform you who is the data controller of your personal information so that you can direct any such requests to them.

Moreover, it is only a data controller that will provide you with a privacy notice about your personal information, so where we process your personal information as a data controller we will provide you with a privacy notice. Where we process your personal information as a data processor for a third party, that third party should provide you with a privacy notice which will set out details regarding the processing of your personal information, which should also include the processing to be carried out by us on their behalf.

What information do we collect about you?

We collect personal data from a range of sources including our website, email and when you attend our events.

The personal data we collect will include contact data and personal data.

Types of personal data we process may include information such as;

personal details such as name and address
financial details (when attending events which require a paid ticket)
feedback and complaint details
employment details

We may also obtain your data from a client who has commissioned us to carry out work, and from other consultants working on a project, as well as other third-party providers i.e. list-brokers.

We will always check that we have a legal purpose for processing your personal data and will only collect the personal data that we require for that purpose.

How do we use your personal information?

We will use your personal information in the collection of data for our clients and the campaigns and accounts we manage. Data is only passed to our clients or other third parties if you give us consent to do so. We will also use your personal information to administer any training services or events you sign up to, and may send you information we think you might find useful, provided you have indicated that you are happy to be contacted for these purposes.

To see how we use your personal information, please see our current privacy notice, which can be accessed via https://connectpa.co.uk/privacy-policy/

Who do we share your personal information with?

Details of how we disclose your personal information are set out in the relevant privacy notice provided to you, but generally it is where we need to do so in order to run our organisation (e.g. where other people process information for us). In such circumstances, we will put in place arrangements to protect your personal information.

We currently use the following companies, who will process your personal data as part of their contracts with us: Google LLC to store and process your data, Mailchimp and Campaign Monitor for sending emails to you, and Insightly CRM to manage our relationship with you.

Outside of that we do not disclose your personal information unless we are required to do so by law.

If we transfer personal information about you outside the European Economic Area (EEA), where the data protection laws may not be as comprehensive as those in the UK, we will let you know and ensure that all reasonable security measures such as standard contractual clauses approved by the European Commission, binding corporate rules, or Privacy Shield certification are taken and that any third party processers will be required to process the information in accordance with information protection laws and we will notify you in your privacy notice if we are the information controller.

We do not sell, trade or rent your personal information to others.

How long do we hold your personal information for?

Further details of how long we hold onto your personal information for are set out in the relevant privacy notice provided to you, but we will only hold your information for as long as is necessary and where you ask us to delete records we may delete it earlier.

The duration for which we retain your personal information will differ depending on the type of information and the reason why it was collected. However, in some cases personal information may be retained on a long term basis: for example, personal information that we need to retain for legal purposes will normally be retained for at least six years in accordance with usual commercial practice and regulatory requirements.

What are your rights?

Full details of your rights are set out in the relevant privacy notice provided to you, but you are entitled by law to ask for a copy of your personal information at any time. You are also entitled to ask us to correct, delete or update your personal information, to send your personal information to you or another organisation and to object to automated decision making.

We may use automated decision-making or profiling in some of our services, such as our marketing campaigns or customer support. This means that we may use your personal data to evaluate certain aspects of your preferences, interests, behaviour, or needs, and provide you with personalised offers, content, or features. We do this to improve your experience with our services, and to ensure that they are relevant and tailored to your needs.

You have the right to object to this processing and to request human intervention or an explanation of the logic involved. You can do this by contacting us at gdpr@connectpa.co.uk. We will respect your choices and stop any automated decision-making or profiling that affects you, unless we have a compelling legitimate ground to continue.

Where you have given us your consent to use your personal information in a particular manner, you also have the right to withdraw this consent at any time.

To exercise any of your rights, or if you have any questions relating to your rights, please contact us by using the details set out in the "Contact" section below. You can also unsubscribe from any direct marketing by clicking on the unsubscribe link in the marketing messages we send to you.

You should note that some of your rights may not apply as they have specific requirements and exemptions which apply to them and they may not also apply to personal information recorded and stored by us. However your right to withdraw consent or object to processing for direct marketing are absolute rights.

If you are unhappy with the way we are using your personal information you can complain to the UK Information Commissioner’s Office or your local data protection regulator. More information about your legal rights can be found on the Information Commissioner’s website at https://ico.org.uk/for-the-public/.

However, we are here to help and would encourage you to contact us to resolve your complaint first.

Linking with third party sites

Our Site may contain links to and from other websites which may be of interest, or the websites of our clients or sub-contractors. If you follow a link to any of these websites, please note that these websites have their own privacy policies and they will be a data controller of your personal information. We do not accept any responsibility or liability for these policies and you should check these policies before you submit any personal information to these websites.

In addition, if you linked to this Site from a third-party site, we cannot be responsible for the privacy policies and practices of the owners or operators of that third-party site and recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions.

Security

We employ a variety of technical and organisational measures to keep your personal information safe and to prevent unauthorised access to, or use, or disclosure of it. Unfortunately, no information transmission over the internet is guaranteed 100% secure nor is any storage of information always 100% secure, but we do take all appropriate steps to protect the security of your personal information.

Certain parts of our Site use "cookies" to keep track of your visit and to help you navigate between sections. A cookie is a small data file that certain websites store on your computer's hard-drive when you visit such websites. Cookies can contain information such as your user ID and the pages you have visited. The only personal information a cookie contains is information that you have personally supplied.

Please note that providers of third party content may also use cookies over which we have no control.

We use cookies on this Site to:

Analyse web traffic – We collect information about which pages are visited, how long you spend on the page, which links you click and what you searched for to arrive on the site. This helps us analyse data about web page traffic and improve our website. This information is anonymised and is not connected to any personal information about who you are, only what you do on the site.
Remember what items you may have added to your shopping basket as you move from page to page or if you add items to your basket and then return to the website on another day.
Remember whether you are logged in if you have created an online account.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not and to provide a seamless experience when you are booking one of our services through the Site. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Log files

In common with most websites, our Site logs various information about visitors, including internet protocol (IP) addresses, browser type, internet service provider (ISP) information, referring / exit pages and date / time stamp.

We may use this information to analyse trends, administer the Site, track your movement around the Site and gather broad demographic information.

Changes to this policy

Any changes we may make to this Policy in the future will be posted on our Site and, where appropriate, notified to you by email. When we change this Policy in a material way, we will update the version date at the bottom of this page. Please check back frequently to see any updates or changes to this Policy and should you object to any alteration, please contact us as set out in the "Contact" section below.

Contact

In the event of any query or complaint in connection with the information we hold about you, please email gdpr@connectpa.co.uk or write to us at: Data Protection Compliance Manager, Connect, 3rd floor, Millbank Tower, London SW1P 4QP.

Whilst this privacy policy sets out a general summary of your legal rights in respect of personal information, this is a very complex area of law. More information about your legal rights can be found on the Information Commissioner’s website at https://ico.org.uk/for-the-public/.

Version date: 8 July 2024