HRA Writing respects your right to privacy and complies with its obligations and adheres to the principles under the Data Protection Bill 2018 and the General Data Protection Regulation (GDPR).
The purpose of this Privacy Notice is to outline how I deal with any personal data you provide to me. I take great care with any personal data I hold, so that I provide the highest standard of service to you, whilst taking steps to keep your data secure and to ensure it is only used for the specified, explicit and legitimate purposes stated within this privacy notice.
Unless otherwise stated the controller of your personal data for all purposes outlined in this privacy policy is HRA Writing.
Information Collection
In order to run my business, I collect personal data. Personal data is any information about a living person that can be used to identify that person. I will only collect information that is adequate, relevant, and limited to what is necessary in relation to the purposes identified within this privacy notice.
Purposes for which I hold your Information
Data controllers are required to have a lawful basis for all processing of personal data. Within the GDPR there are 6 lawful bases in total, and of those, there are 2 which I rely upon: Contract and Consent
1. Contract
The following process is an example of those which I undertake which are necessary for the performance of a contract to which the data subject is a party:
- Storing contact details (name, email address and home address) securely in order to process invoices and complete and send work.
2. Consent
Before carrying out the following processes I will ask for your consent:
- Adding your contact details to a mailing list for a newsletter;
- Sharing your personal details with a sub-contractor, e.g. someone helping me with proofreading work.
Data Sharing
Occasionally personal data will be shared with sub-contractors, e.g. if I use other services to help with proofreading. This will not happen unless your explicit consent has been obtained. Further, a data processing agreement will be completed by the sub-contractor if your personal data is being shared in this way; this sets out explicit instructions as to how the sub-contractor will use and secure your personal data.
Retention
In accordance with the GDPR, HRA Writing does not store personal data indefinitely; it is only stored for as long as necessary to complete the task for which it was originally collected.
What are your rights?
You have the right to:
- Be informed about how HRA Writing uses your personal data;
- Request access to the personal data that HRA Writing holds;
- Request that your personal data is amended if it is inaccurate or incomplete;
- Request that your personal data is erased where there is no compelling reason for its continued processing;
- Request that the processing of your data is restricted;
- Object to your personal data being processed
Where the processing of your data is based on consent, you have the right to withdraw this consent at any time.
Raising concerns or making a complaint
If you have a concern about the way HRA Writing is collecting or using your personal data, in the first instance you can contact me with your concerns. If you are not satisfied with the outcome, you can contact the Information Commissioner’s Office, Monday – Friday, 9am – 5pm, on 0303 123 1113.
HRA Writing
August 2024