Privacy notice

Who we are

Great Yarmouth Services Ltd ("we", "our" or "us") is committed to protecting and respecting your privacy. We are the data controller for the purposes of Data Protection legislsation, which consists of:

• the UK General Data Protection Regulations (GDPR)
• the UK Data Protection Act 2018

Our registered office is Town Hall, Hall Plain, Great Yarmouth, Norfolk, NR30 2QF, contact phone number 01493 801750.

This notice and any other documents referenced sets out the basis on which any personal data we collect from you, either directly via our website www.greatyarmouthservices.co.uk or that you provide to us by other means, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

How we use your personal data

We will use your personal information for the purposes of undertaking work in relation to a contract we have entered into with you. The lawful ground for processing this information is defined under Article 6(1)(b) of the UK GDPR, where processing is necessary for the performance of a contract to which you are party, or in order to take steps at your request before entering into a contract.

We also deliver services on behalf of Great Yarmouth Borough Council, the lawful ground for processing when undertaking this work is defined under Article 6(1)(e) of the UK GDPR, commonly known as public task.

We will not generally collect any data known in Data Protection legislation as special category data; this includes:

• details about your race or ethnicity, religious or philosophical belief
• sex life or sexual orientation
• political opinions
• trade union membership
• information about your health and genetic and biometric data

Where special category data is required, we will provide further privacy information at the point of collection.

Your personal data is processed in accordance with Data Protection legislation. We maintain strict security standards and procedures in order to prevent unauthorised access to your data by anyone, including our staff. We use leading technologies such as (but not limited to) data encryption, firewalls and server authentication to protect the security of your data.

Marketing

We may process information that you provide to us to pursue our legitimate interests in a way which may reasonably be expected in the normal course of our business and which does not materially impact your rights, freedom or interests.

The lawful ground for processing this information is defined under Article 6(1)(f) of the UK GDPR, for example where processing is necessary for the purposes of the legitimate interests pursued by the data controller.

You can opt out of receiving marketing messages from us at any time by contacting us at admin@greatyarmouthservices.co.uk, Where you decide to no longer receive marketing messages, this will not apply to personal data provided to us as a result of a product or service purchase, product or service experience, or other transactions that we are lawfully required to retain.

Data Sharing

We may use other third party service providers to provide certain services for us, acting as our authorised data processors. Examples of authorised data processors include billing and fulfilment partners, IT solution providers and contractors who process information on our behalf to deliver services. For example, we may use the services of third parties in order to:

• fulfil orders
• deliver packages
• send postal mail and emails
• send text messages (SMS)
• provide marketing assistance
• process credit card payments
• provide fraud checking services

When acting as authorised data processors, our service providers are required to only process data in accordance with our instructions, in line with our Data Protection Policy, and are subject to appropriate confidentiality and security obligations.

In addition to the specific disclosures of personal data set out in this section, we may also disclose your personal data when it is necessary to comply with a legal obligation to which we are subject, or for:

• the prevention or detection of crime
• the apprehension or prosecution of offenders
• in order to protect your vital interests or the vital interests of another natural person.

International transfers of your personal data

We store your data on our secure servers in the United Kingdom and retain it for a reasonable period to meet our business needs or as long as the law requires.

However, your data may be transferred to, stored at, and processed at a destination inside the European Economic Area by our partners or service providers. Where this is the case we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice.

Data Retention Periods

Your information will be kept strictly confidential. It will be stored in a secure, password-protected database or spreadsheet on the Company's computer system.

Your personal information will be kept for six years following the year in which the service procured was delivered and paid for, after which time it will be securely destroyed. The only exception to this is where we are under a legal obligation to retain information for a longer period, for example when removing and disposing of Asbestos.

We will only use your data within the terms of data protection laws. We will review dates for keeping personal data in the future and when required update these privacy notices.

Automated Decision Making

We do not make use of any automated decision making and do not plan to use this technology in the foreseeable future. Should this position change we will update this privacy notice accordingly.

Your rights

You have a number or rights available to you, including:

• the potential right to see copies of all the data held about you
• to ask for data to be corrected or deleted
• to request we restrict what we do with your data in certain circumstances
• to object to what we may do with your data and to data portability.

Please note these rights are not absolute and there are circumstances where they do not apply or where we may override these rights; however, you will be informed if this is the case.

Further information

If you want more information you may contact our Data Protection Officer at gdpr@great-yarmouth.gov.uk. If you are unhappy with the way your personal information is being handled you can contact the independent Information Commissioner at: https://ico.org.uk/.

Changes to our Privacy Notice

This page will be updated with any changes we may make to our Privacy Notice in the future.