About this Policy
This privacy notice explains how we look after your personal data (in all situations where we collect your data) and sets out your privacy rights and also explains how the law and our approach to privacy and personal data protects you.This privacy notice supplements any other privacy notices that we may provide to you at the point that we collect data from you and should be read in conjunction with those notices.
Our status and details
For the purpose of the GDPR we are the data controller and any enquiry regarding the collection or processing of your data should be addressed to our Data Protection Officer using the contact details below:
By using the Website you consent to this policy. We are registered with the Information Commissioner’s Office for this purpose.
Information we collect
We may collect and process the following data about you:
Information that you provide by filling in forms on our website www.cityxpert.co.uk. This includes information provided at the time of posting material
or requesting information on services. We may also ask you for information when you report a problem with our site.
If you contact us by any means with queries, complaints etc., we may keep a record of that correspondence.
When you engage with us on social media.
We may also ask you to complete surveys that we use for research and quality control purposes, although you do not have to respond to them.
Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own admin purposes or otherwise and the resources that you access.
We will collect, process and store personal data only if it is directly provided to us by you. You may do this in your capacity as the user of this Website, by esquiring in relation to our goods or services, becoming a customer or supplier, or potential supplier.
Grounds of processing
In technical legal terms we process personal data provided while using our website (or calling our office with an enquiry) under the ground of “legitimate interests” and “consent”. Cityxpert’ legitimate business interest is the supply of web design and digital marketing services and the marketing of our business. The purpose of this processing is to enable to respond to your queries with regards to our services (received over the phone and/or through our website), to inform you about additional services that we think might interest you and to ask for your feedback on our services/performance etc.
Uses made of the information We use information held about you in the following ways:
To ensure that content from our site is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To carry out our obligations arising from any contracts entered into between you and us or for due diligence purposes before entering into a contract.
To allow you to participate in surveys or interactive features of our service, when you choose to do so.
To notify you about changes to our service.
Email Marketing which represent some new offers of our services arrive .
We do not sell, rent or trade your personal information to third parties for marketing purposes without your consent.
We will give you the chance to refuse any marketing e-mail from us or from another trader in all e-communications, but if you wish for to unprescribed or exercise your right to be forgotten at any time, please email email@example.com
Collection, transfer and disclosure of your information
Cityxpert gathers and processes personal data in accordance with the Data Protection Act 1998 and the General Data Protection Regulations 2016. We only distribute your data within Citxpert and store data through a CRM system, Pipedrive.
We may disclose your personal information to third parties only under the following circumstances:
In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If Cityxpert or substantially all of its assets are acquired by a third party, in which case personal data held by it about its clients will be one of the transferred assets.
Regulatory bodies. We may disclose your data to regulatory bodies to enable us to comply with the law and to assist fraud protection and minimize credit risk. This may include Identity, Contact and Transactional data.
Our Suppliers. We may disclose your data to third parties that are involved in the fulfillment of our services to you.
Rights of Data Subjects
In addition to imposing various duties upon data controllers the Data Protection Act & GDPR provide individuals (data subjects) with certain rights. The purpose of doing so is to empower and enable users to check what data relating to them is being held and what is being done with it. These rights come with responsibilities, it is not granted to subjects so that they may make enquirers out of idle curiosity but rather so that they can check what data is being processed on them and how accurate that data is.
The rights of data subjects are as follows:
The right to establish the existence of personal data;
The right of access;
The right of objection (unsubscribe);
The right to be forgotten (deleted);
The right of rectification;
The right to complain.
Should you have any issues, please reach out to firstname.lastname@example.org
The transmission of information via the Internet or email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data while you are transmitting it to our site; any such transmission is at your own risk.
We have put in place security measures to prevent your data from accidental, loss or disclosure. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorized access.
Where we have given you (or where you have chosen) a password so that you can access certain parts of our site, you are responsible for keeping this password confidential. You should choose a password it is not easy for someone to guess.
In the event of a data breach we will notify the ICO and you in the event that the breach results in any likelihood of loss or damage to you.
The length of time that we retain, and store data depends on the purpose for which it was collected. We will only store data for as long as is required to fulfil that purpose, or for the purpose of satisfying legal requirements.
It is a legal requirement that we keep certain data about our customers and suppliers for at least 10 years. The type of data includes Contact, Identity, Financial and Transaction Data.
Where you have requested that we provide you with marketing materials we will retain your data until such time as consent is withdrawn by you.
The GDPR gives you a range of rights in relation to the personal data that we collect from. You have the right to:
Access your personal data. This right is commonly known as the ‘data subject access request’ and enables you to receive a copy of the personal data we hold about you. You will not need to pay a fee to access your personal data unless we can justifiably demonstrate that the request is repetitive or excessive. We will respond to all legitimate data access requests within one month, but we may need to obtain further information from you in order to confirm your identity and the legitimacy of the request.
Request update of the personal data. This enables you to have any incomplete or inaccurate data corrected.
Erasure of your personal data. This enables you to ask us to delete personal data where there is no justifiable reason for us continuing to retain and process it. We may not always be able to delete the data such as if there is an ongoing contractual relationship between us or if we are legally required to retain the data.
Object to processing of your personal data where we are relying on consent or our legitimate interests (or those of a third party) as the justification for processing the data.
Restrict the processing of your personal data. This enables you to ask us to change the processing of your personal data. For example, you may wish to vary the basis on which we contact you.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, machine-readable format.
Withdraw consent. Where we are relying on consent to process your personal data you may withdraw that consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
You can exercise these rights at any time by writing to us at the address detailed above, or by email to email@example.com.
Use of this site means you agree to the terms and conditions of use of this website, which constitutes a contract governed by English Law.
Links to third party sites
This site www.cityxpert.co.uk includes links that will allow you to leave the site. These linked sites are not under the control of cityxpert and we are not responsible for the content of any linked site or any link contained in a linked site, or any changes or updates to such sites. Cityxpert is providing these links only as a convenience, and the inclusion of a link does not imply endorsement by Cityxpert of any site.
Changes to this policy