Alex Howes
@aihowes
alex@alexhowes.co.uk

Privacy Policy

Introduction

This privacy policy describes the information on how I (Alex Howes) collect and process your personal data in which you provide through this website or by working with me.

By providing me with your data you agree that you are over 13 years of age.

Data controller and Contact Details

Alex Howes (referred to as I, my and me in this privacy policy) is the controller and responsible for your personal data.

If you have any questions about this privacy policy, have any requests to exercise your legal rights or are not happy with any aspect of how I collect and use your data then please let me know using the contact details below:

Additionally, you have the right to complain to the Information Commissioner's Office, although I would appreciate the chance to rectify any issues you have beforehand.

What data is collected

The data and types of data listed below may be collected and processed:

Personal Data which may include your first name, last name, email address, telephone number or username.

Financial data which may include bank account details, and details about any payments to and from you and other details of the products or services bought from me

Technical Data which may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access this site.

Usage Data which may include information about how you use our website, products and services. By processing your Usage Data I consequently process Aggregated Data. This data does not reveal your identity therefore, by itself, it is not personal data. An example of this is where I review your Usage Data to work out the percentage of website users that are using a specific feature of our site.

What data is NOT collected

Sensitive data which may include race, ethnic origin, politics, religion, trade union membership, genetics, biometrics, health, sex life, or sexual orientation is NOT collected or processed.

How data is collected

Direct Communication: You may provide your personal data by filling in a contact form on one of my websites or by communicating with me by post, phone, email or otherwise.

Automated technologies, analytical tools: As you use my website, I may collected Technical data about your device and interactions with the website. This data is collected by using cookies, server logs and similar technologies. Please read the Cookie Policy for further details on how I use cookies.

Third party and publicly available sources: I may partner with other companies who may obtain personal data and share it with me.

Disclosures of personal data

I may have to share your personal data with government bodies that require me to report processing activities.

I will never intentionally disclose the personal data of my website visitors or clients without their prior consent.

I do NOT and will NOT sell any of your personal data to anyone

International Transfers

I am subject to the provisions of the General Data Protection Regulations that protect your personal data. Where we transfer your data to third parties outside of the EEA, we will ensure that certain safeguards are in place to ensure a similar degree of security for your personal data. As such:

I may transfer your personal data to countries that the European Commission have approved as providing an adequate level of protection for personal data by; or

If I use US-based providers that are part of EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place; or

Where I use certain service providers who are established outside of the EEA, we may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe.

If none of the above safeguards is available, I may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.

Your legal rights

Under certain circumstances, you have rights under the GDPR in relation to your personal data. These include the right to:

Not all rights under the GDPR can be exercised; it is dependent on the lawful basis that was used to process the personal data in the first place. For more information read about lawful basis for process on the ICO website.

You can read about these rights in more detail on the ICO website.

If you wish to exercise any of the rights set out above please email me at privacy@alexhowes.co.uk. I may need to request specific information from you to help me confirm your identity and to speed up my response.

I try to respond to all requests within one month. If it is a complex request I may take longer, but I will notify you and keep you update.

Data security

I have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. I also allow access to your personal data only to any employees and partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.

I may have to share your personal data with Third parties. In the instance in which this may happen I require all third parties to respect the security of your personal data and require them to treat it in accordance with the law and this privacy policy. I do not permit them to use your personal data for their own purposes.

I have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if I am legally required to.

Data retention

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

Depending on the method in which the data was collected and reasoning for processing that data some data will be kept for longer than others.

When determining the appropriate retention period, I will consider the amount, nature and sensitivity or personal data and the potential risk from unauthorised use or disclosure of your personal data.

By law, some information from clients and customers must be kept for six years after the duration of a contract between us for tax purposes.

Changes to this privacy policy

This version of the privacy policy was last updated on the 23rd May 2018

If I modify this policy in a way that will affect your legal rights and I have your contact details I will let you know of this change. Otherwise, please revisit this page periodically to stay aware of any changes.

Legal grounds for processing

Below lists some specific ways in which I may collect your data from, what legal basis has been used and what I use that information for.

Contact form

By entering your information into any contact form on my website or by messaging me through my email address I will be processing your data under legitimate interests. If in any cases where I would like to use your data for marketing purposes I will have a separate opt-in method allowing you to decide whether I can use your details for marketing purposes, this will then be covered under the "Marketing and Newsletter Subscription" point below.

Clients, Customers and My Services

If you or your business use my services, are a client or a customer, I will be processing your data and under contractual basis. In most cases this means using your data to contact you regarding agreed works, any quotations for any future work and processing invoices.

Marketing and Newsletter Subscription

If you have chosen to sign up for a newsletter or for marketing I will be processing your data under the legal basis of consent. Marketing forms have either a range of options allowing you to consent to different forms of data processing or a piece of text will be prominently displayed on the form explaining what data processing your are consenting to.

Using this and other websites

By using this site technical data such as an IP address and user-agent string is logged on the server. The legal basis for processing this data is legitimate interest, namely the protection and security of the website and business. This data is also used to help visitors should there be a technical problem.