At Orca Business Support Limited we are committed to ensuring your privacy and maintaining personal data in line with the General Data Protection Regulation known as “GDPR”. Our privacy policy provides all the assurances and information that you need to know about the use of your personal data within our business.
Orca Business Support Limited is referred to both as a Data Controller and a Data Processor. In instances, we are the Data Controller for the personal data that we directly collect and, in instances, the Data Processor for personal data provided by our clients. In this latter case personal data provided by the client’s customer/prospective customer will be managed on your behalf.
The personal information you provide about your business and employee's when you become a client of Orca Business Support Ltd or enquire about our services, is necessary so that we can meet our contractual obligations to you or our commitment to you.
The items of information we may collect include:-
All information is collected via telephone calls, emails, web enquiries and service agreements.
Information collected from you or on your behalf is used to convey information to you and to enable us to perform our duties under our agreements & terms and conditions.
We do not share personal information with third parties except as necessary to carry out our business; to meet our obligations; to meet your requests; as required by law or as required by other legal processes. We never sell your personal information.
We use business information for the purposes of providing our services, maintaining relationships (such as informing our clients and prospective clients of services that may be of interest to them) and for our other related business activities. All clients have the opportunity to opt-out of receiving any marketing material from Orca Business Support Limited, although some information needs to be communicated to all clients, that may be deemed as “marketing” as it is part of our obligations
Our legal basis for collecting and processing personal data is that you have given us consent to processing and that processing is necessary for the performance of the agreement between us and so we can properly perform our duties under the terms of that agreement. If you have enquired about our services then we will communicate with you to satisfy your enquiry. Other reasons will include the need to improve our services, process records, process payments and occasionally send information of interest.
We will only process the data to enable us to provide the bespoke service that you would expect from us.
We may contact you via a variety of methods including email, telephone, direct mail and text messaging.
We retain our contractual information for the duration of your contractual agreement and for a period after the contractual agreement has expired in line with our data retention policy.
Any specific information provided to us to enable us to meet our contractual obligations is securely deleted as soon as our agreement ends.
In cases where data is held for the sole purpose of marketing, any information will be held until you advise you would like your data to be removed or deleted, and you would like to receive no further communication including special bespoke offers. Opt out details will be available within all appropriate communication channels.
All data will be kept securely on our servers, these are virtual servers that are based in the EEA. No data is stored or shared outside of the EEA. We will take all reasonable and appropriate steps to protect your personal information but cannot guarantee the security of personal data which you transfer to us over the internet.
In addition, we have technological and operational security policies and procedures in place to protect your personally identifiable information from loss, misuse, alteration or unintentional destruction.
We use relevant systems and employee access safeguards to ensure that your data is not misused and that only those authorised to have access for the performance of their duties do so.
Under the General Data Protection Regulation, you have rights which you can exercise in relation to the information we hold about you.
We are committed to protecting your rights and should you choose to exercise those rights then please contact us to discuss the grounds and implications.
Your rights relating to your personal data:
The GDPR provides the following rights relating to personal data:
Please refer to www.ico.co.uk for further information.
Should you wish to contact us about these rights then please do so by using the following e mail address: dataprotection@weareorca.com
You can contact us using the details below to:
David Toner Orca Business Support Limited Orca House Rossett Business Village Rossett Wrexham LL12 0AY
Email: dataprotection@weareorca.com
We hope to resolve any issues you have, however, if you remain dissatisfied then you have the right to apply directly to the Information Commissioner for advice or a resolution. The Information Commissioner can be contacted at: -
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF www.ico.org.uk