IN SUMMARY
AFC Europe Ltd collects personal data about you for various reasons (as further detailed in this privacy notice) including: 1) to deliver the products and services you’ve requested from us, 2) to meet our legal responsibilities, 3) to understand how you are using our website, and 4) to send marketing communications to you.
DATA AND HOW WE USE IT
Your personal data includes things such as your name, your address and when we’ve been in touch. We use data like this to help us deliver services, to let people know about any changes to your service and other purposes set out in the in detail section below.
OUR RESPONSIBILITIES
As a professional services business, we have to keep your data for lots of lawful reasons too. We’ll usually keep your personal data for up to six years after we’ve stopped working with you.
We might supply your data to other people we work with too, but we only give them what they need and its under strict confidentiality.
YOUR RIGHTS
You have lots of rights when it comes to your data. You can see what data we have about you at any time. In some circumstances, you can withdraw your consent for us to keep it too. And of course, you can ask us a question about it at any time.
You can do this by sending an email to our Risk and Compliance officer, Chris Billinge on enquiries@afceur.com
More information about your rights is set out in the in detail section below.
IN DETAIL
1. AFC Europe Ltd (registered company number 00675195) (we’ll refer to ourselves as “the business”, “we” or “us” for the rest of this policy) and the other companies in our group, take data protection seriously.
This privacy notice aims to give you information on how we collect and process your personal data through your use of this website, including any data you may provide through this website when you use our live chat function or register for one of our events.
This website is not intended for children.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements any other notices and privacy policies and is not intended to override them.
We are the controller and are responsible for your personal data.
We’ll only use your personal data for the purposes set out in this privacy notice, which includes: 1) to deliver the products and services you’ve requested from us, 2) to meet our legal responsi
2. We collect personal data about you when:
- you visit our website. This might include device information (such as your IP address, location, device identification numbers, or provider), usage information and browsing history (such as information about how you navigate within our services), your browsing history (in relation to our website and which elements of our services you use the most), location data and demographic information (such
as your country).
We collect this information to better understand our audience, to improve our website and to provide relevant targeted advertising of our services to you after you leave our website through third party partners (such as Google advertising). For further information please see our Cookie Policy
- you request a proposal from us to provide you with a service
- you, your employer or one of our clients engage us to provide our services. We’ll also collect data during the period we’re delivering those services
- you get in touch with us. That could be by filling in forms on our website or corresponding with us by email, phone, post, social media or through our website (including use of our live chat function)
- we consult third parties and/or review data which is available to the public. For example, we may ask for data from your employer or find it on Companies House.
3. Here’s the kind of information we’ll hang on to for a bit:
Personal data means any information about an individual from which they can be identified (not including any data which has been anonymised). We may collect, use, store and transfer the following types of personal data:
- identity data – including your personal details such as your full name, title, job title and other similar
identifiers - contact data – including your address, email address and telephone numbers
- financial data – including bank account details
- technical data – including your IP address, device identification numbers or provider, operating system and platform, browser type and version and other technology on the device you use to access our website
- transaction data – including details about payments to and from you and other details of services you have purchased from us
- profile data – including purchases or orders made by you, your interests, preferences, feedback and survey responses
- usage data – including details of how you use our website and any services you’ve received from us
- communications data – including our correspondence and communications with you (whether by email, telephone, through our live chat function or otherwise) and details of the communication we’ve had with you relating to the delivery or proposed delivery of a service (including information about any complaints you make (although we try to keep these to a minimum!) and any questions you ask us)
- marketing data – including information from research, surveys and marketing activities, together with your preferences in relation to receiving marketing from us and our third parties
- information we receive from other sources (for example, publicly available information, information provided by your employer or our clients, credit reference agencies etc).
If you fail to provide personal data:
Where we need to collect personal data by law, under the terms of the contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
4. Here’s the kind of information we’ll hang on to for a bit:
In order to process your data, we are obliged to identify at least one of what’s called our “lawful basis for processing”.
We may process your personal data:
- to help us perform the things we said we’d deliver (or you instructed us to deliver) and perform the contract we are about to enter into or have entered into with you. This might apply where we’re processing your personal data because you’re a subcontractor, supplier, or customer of a client of ours. The lawful bases that apply here are “performance of a contract” and/or “to comply with a legal obligation”(where we are obliged to process your data to satisfy a legal requirement);
- for the purposes of our own business interests (providing these interests don’t override any of your own interests, rights and freedoms which require the protection of your personal data of course!).
Examples of these business interests might include direct marketing, business development, statistical and management purposes (this would be “legitimate interest”); and/or - for certain additional purposes if you provide your consent. Please bear in mind: where we ask for your consent to using your data, you have the right to withdraw this consent at any time (called“consent”).
Where we process any special category data, we recognise that we need to take even more care over it. When using your special category data, we will use it in accordance with the law and will ensure that suitable and specific measures are in place to safeguard your fundamental rights and interests. We process special categories of personal data under Article 9(2)(a) GDPR, where you have provided explicit consent (this is “explicit consent”). Examples of when we may process special category data about you includes health information we receive from you as part of providing certain services to you (i.e., wills, probate and
administration of trusts matters).
We might use your personal data for more than one of these purposes at the same time.