General data protection regulations (GDPR)

 

Who we are and how we process your personal data.

 

Stirling Spirit complies with their obligations under the General data protection regulation (GDPR) by keeping personal data up to date; by storing ( and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are put in place to protect personal data.

 

We use your personal data for the following reasons 

 

  • To deliver the services that clients’ have requested.
  • To contact those clients as  necessary in accordance with the services they have requested.
  • To maintain our own accounts and records.
  • Individual client data will never be passed to a third party without the express consent of the respective  client.
  • In accordance with the need to maintain the possibility of access to a Clients data as a result of returning clients or those who may wish to lodge a complaint in respect of our professional services to either our professional body or our insurers, we retain client data for a minimum period of 7 years.
  • Our lawful basis for processing client personal data

The client has given clear consent for Stirling Spirit to process their personal data for specific purpose.  Further, the processing is necessary for both my client’s and my own legitimate interests.

 

Your rights and your personal data

 

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data;

 

  • The right to request a copy of your personal data which Stirling Spirit holds about you;
  • The right to request that Stirling Spirit corrects any personal data if it is found to be inaccurate or out of date;
  • The right to request your personal data is erased when it is no longer necessary for Stirling Spirit to retain such data;
  • The right to withdraw your consent to the processing at anytime;
  • The right, where there is dispute in relation to the accuracy of processing of your personal data, to request a restriction is placed on further processing.
  • The right to lodge a complaint with the information commissioners office.

 

Complaints notice 

 

The client has the right to complain to the independent commissioners office (ICO) if they think there is a problem with the way we are handling their data.

 

( see https://ico.org.uk/concerns/handling/ ).