CSI PRIVACY POLICY

This privacy policy explains how CSI collects, stores, uses and protects your personal data. For simplicity, Whitehouse CSI is referred to as ‘we’, ‘us’ and ‘our’ throughout this policy..

What this privacy policy covers:

We collect, store and process your full name, email address, direct telephone numbers, postal/billing address, job title and place of work.
We also store information gathered by the use of cookies. Cookies are small pieces of text that track your patterns of behaviour and store them in your web browser. Cookies are used to make your internet browsing more useful to you, by storing your preferences and enabling the delivery of relevant advertisements and functions to you.
We use cookies to identify which pages on our site are being used. This helps us analyse data about our web traffic and improve our website based on the needs of our audience. No personal information is stored, and in no way are we able to access your computer or sensitive data about you.
You can choose to accept of decline cookies. Most web browsers accept cookies, but you can modify your browser settings to decline them if you prefer. This may prevent you from taking full advantage of our website.

When you submit a message to us using our website’s contact form
When you sign up to receive our newsletters on our website
When you engage with us through social media platforms
When you choose to provide feedback, or complete a survey we may send you
When you provide us with a business card with your details on
When you enter into a contract with us in order for us to provide you with a service
When you email or telephone us directly and openly share your information
Occasionally we will source data from trusted GDPR compliant suppliers

There are a number of different lawful bases on which we rely on for collecting and processing personal data. These are as follows:

Consent
This means that we have received clear consent from you to process your personal data for a specific purpose. An example of this would be if you were to tick a box confirming that you would like to receive email newsletters. Your consent will be ‘granular’, which means you will be able to give separate consent for separate things (e.g. receiving emails, telephone calls, direct mail).
The consent lawful basis applies to our data collection through our website’s contact form, our newsletter signup form, and any competitions or surveys we organise.

Contractual
If you are, or if you become, a customer of ours, we are contractually obliged to hold your personal data on record. This will allow us to communicate with you via email or telephone, in order to carry out the service you have requested from us.
Similarly, if you have requested a quotation from us to carry out a service, we are contractually required to process your data to deliver on our agreement.

Legal obligation
We may need to collect and process your data, if we are required by law to do so. This can include passing on details of people involved in criminal or fraudulent activity.

Legitimate interests
Your data may be processed under the legitimate interests’ basis, in ways you would reasonably expect from us. This would have minimal privacy impact and would not affect your individual rights or freedom.
Examples include using information about your previous purchases from us to build a picture of your current situation and potential need for our services.
We will also use your email address and telephone number to contact you directly with marketing messages and educator pieces which we feel would be relevant and beneficial to you.
Legitimate interests covers our data sourcing from external GDPR compliant suppliers, inbound enquiries, being handed a business card, and social media engagement.

To process any orders or services that we are contractually obliged to.
To respond to any requests for quotations or information.
To respond to enquiries, queries or complaints, of which we would keep a record of any notes taken during these communications.
To send you promotional offers and information about our services that are likely to interest you.
To process payments and invoices through our accounting software, we may be required to process your name, email address and billing address.
Your details may be passed onto a third-party supplier, only for us to deliver a certain service that we are sub-contracting. On these occasions, we will notify you of the third party that is involved and gain explicit consent before doing so.
To send you communications when required by law, or which are necessary to inform you of important changes e.g. to this privacy policy.

Where necessary, your details may need to be shared with one of our third-party suppliers who provide us with an outsourced service.
Where possible, we aim to keep the relationship between our clients and suppliers anonymous, however for services such as delivery of an item we may need to pass on name and address details of an individual.
On these occasions, we will notify you of the third party that is involved and gain explicit consent before doing so.
Our suppliers may only use your data for the intended purpose and we work closely with them to ensure that your data is protected.

We apply careful consideration to how we store and protect data.
Your data is stored in Videntium Software on SQL Server in which we log your details, purchasing activity and notes from when any communication occurs with you. Our system is password protected with a limited number of log-ins and users.
Our electronic communication systems such as emails and social media channels are password protected with a limited number of administrators.
We monitor our systems regularly and carry out updates and maintenance where required, in order to strengthen the security of our storage and processes.
When we collect your personal data, we will keep it for as long as we feel is necessary for the purpose for which it was collected. This can be up to six years unless you request to opt out of our communications. It also includes our direct marketing activity that is covered by our ‘legitimate interests’ basis.

You have the right to request a copy of the personal data that we hold about you, and to correct it if it is incorrect or incomplete. This will be free of charge.
If you would like to access the information we hold about you, please contact us at info@csicx.com

There are a number of ways in which you can opt out of communications from us.

When receiving any marketing communications from us via email, click on the ‘unsubscribe’ link. This will automatically stop further emails from being sent to you.
Email us at info@csicx.com

© 2021 All Rights Reserved - Privacy Policy