Privacy policy

Information We Collect

Gibbsonn Limited is a Data Controller (as defined in the UK General Data Protection Regulation)

We collect and process the following personal information:

• Primary personal identifiers such as your name, contact number, email address and IP address

• Our website form also gathers information about which services you may be interested in

• Cookies have been included in our website on an opt-in basis to provide us with information about which pages are visited and for how long

• This helps us to improve our site’s performance and the experience of our website visitors

• Our third-party hosting companies provide EU GDPR compliance by invoking standard contractual clauses

• Gibbsonn Limited exercises third-party due diligence processes to ensure GDPR compliance

• We collect personal information about our clients on appropriately protected digital devices

• The information we collect is necessary to carry out our services

• We will never pass on your personal information to unconnected third parties unless your permission has been sought and gained

• We will never sell your personal information to third parties

How we collect personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To tell us about the products and services that you are interested in

• In order for us to be able to contact you to discuss products and services you require

• To arrange meetings and to install and deliver products and services on your behalf

• To operate standard business functions such as contact, invoicing and quality control

We use the information that you have given us to deliver the services that you, the client, have asked us to provide.

We may share your contact information only with our suppliers or installation partners solely to deliver the products and services that we have been asked to provide. When requested and required, Gibbsonn Limited will maintain client confidentiality and will not disclose commercially or financially sensitive information to third parties unless otherwise agreed with you, our client.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

1. Consent: You can remove your consent at any time. You can do this by contacting andy.sontage@gibbsonn.co.uk

2. Fulfilment of a contract: We have a contractual obligation to provide the agreed services.

3. Legal Obligation: For compliance with mandatory accounting practices.

How We Store Your Personal Information

All reasonable precautions are taken to ensure that your personal information is securely stored. This includes using access controls for electronic devices and keeping operating software and applications up to date. Our web forms protect information by enforcing the prevailing HTTPS:// encryption standard.

How Long We Store Your Personal Information For

Gibbsonn Limited will retain the personal information of our clients for at least 6 years to fulfil our obligations to HMRC as a business. After this period, if a working relationship no longer exists between us or unless we are asked to delete this information prior to this, we will then dispose of your personal information by deleting it from our computers and any recycling bins and backups.

Your Data Protection Rights

Under the Data Protection Act (2018), data subjects have rights including:

Your right of access: You have the right to ask us for copies of your personal information or information relating to our data processing.

Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond.

Please get in touch with us at andy.sontage@gibbsonn.co.uk if you wish to make such a request.

How To Complain

If you have any concerns about our use of your personal information, please send your complaint in writing to us at andy.sontage@gibbsonn.co.uk. You can also complain to the ICO if you are unhappy with how we have used your data or how we have managed your complaint.

By Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

ICO Helpline: 0303 123 1113

ICO Website: https://www.ico.org.uk

Privacy Notice Updated: 12/02/24