Economic Data Services Ltd (“we” or “us”) is committed to data protection and data privacy. With the General Data Protection Regulation (GDPR) becoming enforceable from 25 May 2018, we have undertaken a GDPR readiness programme to review our entire business, the way we handle data and the way in which we use it to provide our services and manage business operations.
We respect the privacy rights of individuals and are committed to handling personal information responsibly and in accordance with applicable law. This notice sets out the personal data that we collect and process about you, the purposes of the processing and the rights that you have in connection with it.
If you are in any doubt regarding this notice, please contact us using the contact details at the end of this policy.
We will process your personal data for the purposes: –
The types of personal information we may process include, but are not limited to:
To process your information, we mainly rely on the following legal basis: –
We take care to allow access to personal data only to those who require such access to perform their tasks and duties.
We will ensure that we take technical and organisational measures to ensure, as far as reasonably possible, the confidentiality, integrity and availability of your information at all times. If you have any concerns please contact us using the contact details at the end of this policy.
We will not normally need to transfer personal data to countries outside of the United Kingdom. If we export your personal data to a different country, we will take steps to ensure that such data exports comply with applicable laws. For example, if we transfer personal data outside the European Economic Area (EEA), such as to the United States, we will implement an appropriate data export solution such as entering into contracts with the data importer that contain EU model clauses or taking other measures to provide an adequate level of data protection.
Personal data will be stored in accordance with applicable laws and kept for as long as needed to carry out the purposes described in this notice or as otherwise required by law. Personal data will be kept for 12 months following the termination of customer/supplier relationships.
You may exercise the rights available to you under data protection law as follows:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. You can read more about these rights at:
To exercise any of these rights, please contact us using the contact details at the end of this policy.
We will not transfer any personal data to other third-party service providers.
We may disclose personal data to third parties on other lawful grounds, including:
We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This notice was drafted with clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of personal information. However, we are happy to provide any additional information or explanation needed.
If you want to make a complaint about the way we have processed your personal information, you can contact the Information Commissioner’s Office in their capacity as the statutory body which oversees data protection law – www.ico.org.uk/concerns.
This notice may be updated periodically to reflect any necessary changes in our privacy practices. In such cases, we will inform you by publishing this on our website www.edsluk.com. We encourage you to check this notice periodically to be aware of the most recent version.
Please address any questions or requests relating to this notice to the Data Controller: