Launch North West Ltd are committed to safeguarding any personal data which is stored or processed. We take the privacy and security of such information very seriously. This data protection policy explains which information is collected about you and why, what we do with it and how we handle and store that information.
The policy also outlines our responsibilities under The General Data Protection Regulation (GDPR) and how we will comply with it.
This policy sets out how Launch North West Ltd will process the personal data of its staff, suppliers and other third parties.
This policy applies to all the personal data Launch North West Ltd process regardless of the format or media on which the data is stored on or who it relates to.
This data protection policy ensures Launch North West Ltd:
This policy applies to all members of staff who are employed by Launch North West Ltd including honorary staff and associates, contractors, or any third parties who carry out work on behalf of Launch North West Ltd involving the handling of personal data.
There are six data protection principles defined in Article 5 of the GDPR. These require that all personal data be:
We are committed to upholding the Data Protection Principles. All personal data under our control must be processed in accordance with these principles.
We only process personal data on the grounds of one or more of the lawful bases set out in the GDPR. These include the consent of the data subject.
Consent must be freely given, specific, informed and unambiguous.
A data subject should indicate their agreement either by statement or a positive action (double opt in). Assumptions are not to be made given the absence of any express agreement.
Data subjects are able to withdraw their consent at any time. Launch North West Ltd will keep records of all consents to demonstrate compliance with GDPR requirement.
We, as the Data Controller for your data, are responsible for implementing appropriate technical and organisational measures to ensure compliance with the data protection principles listed above.
As part of this responsibility we appoint Jo Leigh to be Launch North West Ltd Data Protection Officer. We will also implement controls to:
Personal data we collect is only for explicit and legitimate purposes. We will not process the data in any manner that is incompatible with these purposes.
If there are any changes to the purposes of data collection and processing, we will inform the data subject of these new purposes and, if necessary, we will request their renewed consent.
The data we collect and process will be limited to what is strictly necessary and relevant for the intended purposes. If and when data is no longer required for these purposes, we will delete or anonymise it in accordance with our data protection procedures.
We will check the accuracy of any personal data at the point of collection and at regular intervals afterwards. Any inaccurate or out of date information with be either corrected or deleted in accordance with our data protection procedures.
Unless a longer retention period is required or permitted by law, personal data will not be kept in an identifiable form for any longer than is deemed necessary for the stated purposed for which the data is processed. We will ensure that when personal data is no longer required, it will be deleted or anonymised in accordance with our data protection procedures. We will require third parties to also delete or anonymise data where and when applicable.
Launch North West Ltd are committed to taking reasonable and appropriate steps to protect the personal data we hold from misuse, loss or unauthorised access. This is implemented by using a range of technical and organisational measures against unauthorised or unlawful processing, against accidental loss, destruction or damage.
In the event of a data breach, Launch North West Ltd will notify the appropriate regulator (unless the breach is unlikely to result in a risk to the right and freedoms of individuals) and in certain instances the data subject. We will also keep records of all personal data breaches.
Data Subjects are people who Launch North West Ltd hold personal data on. Data subjects have many rights regarding the processing of their personal data. These rights include, but are not limited to the following:
By law Launch North West Ltd are required to keep full and accurate records of all our data processing activities. These records include:
Launch North West Ltd are subject to rules and privacy laws when marketing to our customers. We will only market to our customer who have consented for such communications via emails, text or automated calls. If or when a customer opts out or un-subscribes, we will no longer send marketing communications to them.
Launch North West Ltd will only disclose personal information to third parties under the following circumstances:
We will only share personal data with other employees or agents of the company if the recipient requires this data in order to fulfil their role.
As part of the Information Security Management System, this policy will be reviewed on a continual basis by Launch North West Ltd Management team. This policy will also be reviewed as part of the biennial review of the ISMS.