1.1 This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and other service users; in other words, where we determine the purposes and means of the processing of that personal data.
1.3 We will ask you to consent to the use of your personal data in accordance with the terms of this policy when you first visit our website.
1.4 In this policy, “we”, “us” and “our” refer to Bob Orr.
How we use your personal data
2.1 In this Section 2 we have set out:
(a) the general categories of personal data that we may process;
(b) the purposes for which we may process personal data; and
(c) the legal bases of the processing.
2.2 We may process your personal data meaning any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier. This data may include your:
(a) name and job title;
(b) contact information including email address;
(c) demographic information such as postcode, preferences and interests.
2.3 Your personal data:
(a) may be gathered by personal phone call, email correspondence, postal correspondence or assessment interview.
(b) may be processed for the purpose of evaluating and monitoring the services provided by us.
(c) The legal basis for this processing is consent obtained either verbally or by correspondence from you.
Providing your personal data to others
3.1 We may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Retaining and deleting personal data
4.1 This Section 4 sets out our data retention policies and procedure, which are designed to ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
4.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
4.3 We will retain your personal data as defined in Section 2.2, for a minimum period of three years following the last date of contact, and for a maximum period of seven years following the last date of contact.
4.4 Notwithstanding the other provisions of this Section 4, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
5.1 We may update this policy from time to time by publishing a new version on our website.
5.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
5.3 We may notify you of changes to this policy by email.
6.1 You may instruct us in writing or by email to provide you with any personal information we hold about you.
6.2 We may withhold personal information that you request to the extent permitted by law.
6.3 You may instruct us at any time not to process your personal information for marketing purposes.
7.1 Bob Orr Solutions, both the website and company are owned and operated by Bob Orr.
7.2 Our principal place of business is at 14 Halmyre Street, Edinburgh, EH6 8PZ.
7.3 You can contact us:
(a) by post, to the address given above;
(b) using our website contact form;
(c) by telephone, using the contact number published on our website.
Data protection officer
8.1 Our data protection officer’s contact details are: Bob Orr.