This statement explains what we do with your personal data and how you can exercise your rights over it.
Who we are and how to contact us
We are Gratte Brothers Group Limited. We are an English company with company number 2732546, and our registered office is 2 Regents Wharf, All Saints Street, London, N1 9RL. We own and operate our website, www.gratte.com.
This statement is intended to provide a succinct, easily understood overview of what we do with people’s personal data. If you have any questions or concerns about the information in this statement, or about our handling of personal data, more generally, or if you would like more detailed information on a particular point, you should contact us by emailing us at humanresources@gratte.com, by calling us on 020 7837 6433, or by writing to us at the above address for the attention of the HR department.
The personal data we handle, what we do with it and why
Our Retention Policy
We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements.
Different types of data may have different retention periods, depending on the nature of the data and our legal or operational requirements. For example, some data may be deleted immediately after use, while other data may be retained for a number of years to comply with statutory obligations.
Where no specific retention period is defined, we will securely delete or anonymise your personal data when it is no longer required. If you would like to see specific detail on the retention periods applicable to your personal data, please contact us by emailing us at humanresources@gratte.com.
That way, we can keep the website privacy notice as always current and always compliant, even when we make future changes to the data retention policy.
Website analytics and cookies
When you visit the website, we will set certain ‘cookies’ on your device. Some of them are necessary to allow the site to work (for example, the site needs to place a ‘session’ cookie in order to enable you to navigate the site). However, the site also uses third party services called Google Analytics and Hotjar to gather information about how people use the site, in order to help us to improve it and fix problems with it. The final results as presented to us by Google and Hotjar are statistical in nature and do not identify you personally.
Click the link to learn more about how Google processes your data.
Click the link to learn more about how Hotjar processes your data.
We do this on the basis of our legitimate interest in understanding how the site is used and to improve the user experience.
Who we share that data with
We share you personal data with some of our trusted suppliers who need to receive it in order to provide their services to us, such as our website host, WP Engine, our mailing list provider, MailChimp and our cybersecurity services provider, Mimecast.
If we sell all or part of our business, or merge with another organisation, we may transfer personal data that we have collected as described in this privacy policy, along with our other business assets, to the organisation that we are selling to or merging with.
We may also share your personal data with entities, organisations or individuals outside our organisation where this is necessary to prevent or detect fraud, to obtain legal advice, to enforce the terms of our contracts, or otherwise as permitted or required by law.
We require all parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Transfer of your data outside the European Economic Area
We store your personal data in the United Kingdom or in countries within the European Economic Area (EEA).
If we do transfer your personal data outside the EEA, we would only do so where we have a legal basis for doing so and where we ensure that your personal data is protected to the same standard as it would be protected in the UK. We would do this by entering into data sharing agreements with the recipients of your personal data based outside the EEA which comply with the EU Commission’s standard clauses for the transfer of personal data outside the EEA.
Please contact us for further information as to the transfer of your personal data outside the EEA using the contact form on our website, by emailing us at humanresources@gratte.com, by calling us on 020 7837 6433, or by writing to us at our registered office address for the attention of the HR department.
Your rights and how to exercise them
The law gives you certain rights in respect of the information that we hold about you. Below is a short overview of those rights. The website of the Information Commissioner’s Office (http://www.ico.org.uk) also has a wealth of useful information in respect of your rights over your personal data.
If you wish to exercise your rights, the best way to do so is by email to humanresources@gratte.com, but if you prefer you can also write to us at our registered office address for the attention of the HR department.
Your right to a copy of the information we hold about you
With some exceptions designed to protect the rights of others, you have the right to a copy of the personal data that we hold about you, as well as information about what we do with it, who we share it with and how long we will hold it for. We may make a reasonable charge for additional copies of that data beyond the first copy, based on our administrative costs.
Your right to have inaccurate information about you corrected
You have the right to have the information we hold about you corrected if it is factually inaccurate. In most cases the easiest way to do that is to ask your usual contact with us to arrange that.
Your right to object to what we do with your data, and to have restrictions placed upon it
Where we process your personal data on the basis of our legitimate interest, you have the right to object to that processing and to have restrictions placed upon it while we consider your objection.
Your right to have your information deleted in some circumstances
You have the right to require us to delete the information that we hold about you if it is no longer necessary for the purpose we collected it for, and there is no other legal basis on which we must, or are allowed to, retain it.
Your right to complain to the ICO
You have the right to lodge a complaint about our handling of your personal data with the supervisory authority, which in the UK is the Information Commissioner’s Office.
You can contact the Information Commissioner’s Office on 0303 123 1113.