Bray and Slaughter are committed to protecting and respecting privacy.
About the Policy
We are a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you and to make you aware of how and why your personal data will be used, and how long it will usually be retained for.
The Information We Hold About our Supply Chain
We will collect, store, and use the following categories of personal information about you:
We may also collect, store and use the following “special categories” of more sensitive personal information:
How is your information collected?
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How we will use information about an individual
We will use the personal information we collect about you:
We are allowed to process this information about you because it is in our legitimate interests to protect the health, safety and vital interests of you and others. We also need to process your personal information to ensure the efficient operation of our sites and services.
If you do not provide information
If you do not provide information when requested, it may be necessary for us to exclude you from site and to inform your employer.
How we use particularly sensitive personal information
We will use your particularly sensitive personal information in the following ways:
You will not be subject to decisions based on automated decision-making.
Why might you share my personal information with third parties?
We will only share your personal information with the following third parties for the purposes or processing your application:
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
We will retain your personal information in accordance with our Data and Document Retention Policy and in accordance with the requirements of health and safety legislation.
Rights of access, correction, erasure and restriction
Under certain circumstances, by law you have the right to:
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact the Data Protection Officer in writing, whose details are provided below.
Right to withdraw consent
If you have consented to us holding your details you have the right to withdraw your consent for processing for that purpose at any time. To withdraw your consent, please contact us in writing. Once we have received notification that you have withdrawn your consent, we will no longer process your personal data, subject to our retention policy, we will dispose of your personal data securely and you will no longer be able to access our sites or services.
If you talk to us over the Internet (for example by email) remember that this form of communication is not always secure. These kinds of messages may go through a number of countries before they are delivered. That is just the nature of the Internet, so we cannot accept responsibility for any unauthorised access or loss of personal information if it is beyond our control. We may use ‘cookies’ to monitor how people use our site. A cookie is a piece of information stored on your computer’s hard drive that records how you have used a website.
Data Protection Officer
If you have any questions about this Supply Chain Privacy Notice or how we handle your personal information, please contact the Data Protection Officer who details are as follows:
Data Protection Officer
Bray and Slaughter
Bristol BS3 5RD
Or email: firstname.lastname@example.org
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please consider contact us in the first instance.
This policy was updated on 8th January 2021.