Privacy Policy
1. Introduction
Compass Commercial Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK laws.
2. Definitions
-
Personal Data: Any information relating to an identified or identifiable natural person.
-
Processing: Any operation or set of operations performed on personal data or sets of personal data.
-
Data Subject: Any living individual who is the subject of personal data held by us.
3. Data Controller
Compass Commercial Ltd is the data controller for the personal data we process. Our contact details are: Compass Commercial Ltd, Griffin Bridge House, 56 Northfield Road, Dudley.
West Midlands, United Kingdom, DY2 9JA.
Email: info@compasscommercial.co.uk
Phone: [insert phone number]
4. Data Collection
4.1 Information We Collect
We may collect and process the following types of personal data:
-
Contact Information: Name, email address, phone number, postal address.
-
Business Information: Company name, job title, industry.
-
Financial Information: Bank details, payment information.
-
Technical Data: IP address, browser type, operating system, device information.
-
Usage Data: Information about how you use our website and services.
4.2 How We Collect Data
We collect personal data in the following ways:
-
Direct interactions: When you fill out forms on our website, communicate with us by email, phone, or otherwise.
-
Automated technologies: As you interact with our website, we may automatically collect technical data through cookies and similar technologies.
-
Third parties: We may receive personal data about you from third-party sources like analytics providers or public databases.
5. Purpose of Data Processing
We will process your personal data only for specific, explicit, and legitimate purposes, including but not limited to:
-
Providing and managing your access to our website and services.
-
Personalizing and improving your user experience.
-
Communicating with you regarding our services or responding to your inquiries.
-
Processing transactions and sending invoices.
-
Complying with legal obligations.
6. Legal Basis for Processing
Under GDPR, the lawful bases for processing your personal data include:
-
Consent: When you have given explicit consent to the processing of your personal data.
-
Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party.
-
Legal Obligation: When processing is necessary for compliance with a legal obligation.
-
Legitimate Interests: When processing is necessary for the purposes of our legitimate interests, provided these interests are not overridden by your rights and interests.
7. Data Sharing
We may share your personal data with:
-
Service Providers: Companies that provide services on our behalf, such as IT and system administration services, payment processing, and customer support.
-
Professional Advisors: Consultants, lawyers, and auditors who assist us in carrying out our business activities.
-
Regulatory Authorities: If required by law or to protect our rights.
8. International Transfers
Your personal data may be transferred to countries outside the European Economic Area (EEA). Where such transfers occur, we will ensure that appropriate safeguards are in place to protect your personal data, such as the use of standard contractual clauses approved by the European Commission.
9. Data Security
We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, use, alteration, and disclosure. These measures include encryption, regular security assessments, and access controls.
10. Data Retention
We will retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. When we no longer need your personal data, we will securely delete or anonymize it.
11. Your Rights
Under GDPR, you have the following rights regarding your personal data:
-
Access: You can request access to your personal data and obtain a copy.
-
Rectification: You can request correction of any inaccurate or incomplete personal data.
-
Erasure: You can request the deletion of your personal data, subject to certain conditions.
-
Restriction: You can request the restriction of processing of your personal data under certain conditions.
-
Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
-
Objection: You can object to the processing of your personal data under certain conditions.
To exercise any of these rights, please contact us using the contact details provided above.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: info@compasscommercial.co.uk
Phone: 01384 217850
Post: Compass Commercial Ltd, Griffin Bridge House, 56 Northfield Road, Dudley, West Midlands, United Kingdom, DY2 9JA.
​
By using our website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy.