‘Company’ means Pandable Ltd. East Barn, High Street, Sloley, NR12 8HJ.
The visitor/user of the Website is referred to as ‘you’ or ‘Your’.
‘Personal Information’ means any information from which you can be personally identified, including online identifiers like email address and I.P address (a digital address which identifies the device you access the internet with).
‘Website’ means any subdomain on pandable.co.
The Company is a Data Controller under the General Data Protection Regulations and is committed to safeguarding the privacy of website visitors.
This Notice is to ensure that you have all the information regarding how the Company may collect and process your Personal Information when using our Website and to comply with our obligations and your rights created by applicable law.
The Company takes pride in keeping up to date with advances in technology and legal developments, this can result in changes to this privacy notice so you should refer to them on a regular basis to ensure that you are aware of our policies that are current at the time of your visit to our Website.
You can be assured your Personal Information will only be collected, processed and stored in accordance with this notice.
Your Personal Information
When visiting the Website the Company may collect the following information –
web pages visited
click and mouse movements
This information is collected by third-party processors who generate reports and statistics, which helps us to
monitor usage and performance of the Website;
maintain a Website that is user-friendly and compatible with popular equipment and software;
analyse and maintain the security of the Website and trace inappropriate or malicious use.
Where a third party is used to process your Personal Information who is based outside the EU the Company shall ensure that the third party meets standards in relation to the security of your Personal Data which are consistent with the General Data Protection Regulations.
The Company shall not use automated processing of your Personal Information to form or make decisions.
The Company will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of Personal Information, including storing of data on a secure, password and firewall protected servers.
In the event of a breach of the security measures taken to protect your personal information the Company will inform you as soon as is reasonably practical.
In order that the Company is able to provide you with an optimum service and to ensure that all obligations under UK Data Protection legislation are complied with, you must let the Company know if any Personal Information which you have provided changes or becomes inaccurate or out of date.
The Company may permit third parties to advertise on the Website. These third parties may use tracking features to enable them to record the number of views, clicks and the referral source.
If you visit an advertiser’s website they will have their own Privacy Notice which you should read and accept.
If you make an enquiry about any services or request information using the Website, you are required to provide us with your name, business name (where appropriate) and an email address.
This Personal Information is processed
for a legitimate interest in order that the Company can respond to your enquiry or provide the requested information;
by consent to send commercial communications including the availability of new products, services, events, special offers and discounts, newsletters and notifications, where you request or permit such communications
Where an enquiry progresses into a contract to provide Services we will use your Personal Data
for the administration and performance of the contract.
to deliver any services to you.
for the recording of financial transactions.
for internal records that we are legally obliged to keep.
to deal with complaints, disputes and legal actions.
where necessary to protect the vital interest of you or another person;
to send commercial communications from us (including the availability of new products or Services, events, special offers and discounts, newsletters, notifications), where you give your consent to receiving such communications.
to send commercial communications from selected partners, associates or affiliates, but only where you expressly request or consent to such communications.
We use third party processors, such as computer software, when processing your Personal Data.
If any of our processors are based outside of the E.U. we shall ensure that the country provides adequate security measures for the storage of your Personal Data, for example if the processor is based in the U.S.A. they will need to subscribe to the U.S. Privacy Shield which provides similar provisions to the European standards and requirements; in addition the processor will need to provide, or be subjected to suitable and appropriate contractual obligations and guarantees.
When making any payments of invoices for providing Services, all payments are processed by your bank or payment processing merchant. The Company does collect, retain or store any payment card details.
Sharing your Personal Information
The Company may share your Personal Information with our employees, officers, agents, consultants, suppliers or subcontractors only insofar that it reasonably necessary
in order to deal with an enquiry or to provide requested information;
to consider whether to enter into a contract with you;
for the performance of a contractual obligation between you and the Company;
under a legitimate interest that is stated within this Privacy Notice;
required by Law or order of a Court;
necessary for the prevention of fraud or other criminal activity;
for the purposes of establishing, exercising or defending legal rights;
required to by a purchaser in the event of selling the Company;
otherwise with your consent, request or instruction.
Where an enquiry does not progresses into a contract to provide Services or you do not request or consent to commercial communications the Company shall not retain your Personal Information for more than 2 years.
If we engage in a contract to provide Services to you, the Company shall retain some records for a period not exceeding 2 years after the Services have ended where appropriate or required by law.
Where processing of your Personal Information is based on your consent you may withdraw your consent at any time by informing the Data Controller or by using a link provided for that purpose in each commercial communication that the Company sends.
Upon receipt of a notice withdrawing your consent to process your Personal Information the Company shall stop processing the Personal Information except:
where there are compelling legitimate grounds for the processing, which override your interests, rights and freedoms; or
the processing is for the establishment, exercise or defence of legal claims.
Where you withdraw consent the Company shall inform all third parties (if any) that your consent to processing has been withdrawn.
The Company shall restrict the processing of your Personal Information if the following circumstances arise
where you contest the accuracy of the Personal Information, the Company shall restrict the processing until the accuracy of the Personal Information has been verified.
where you have objected to the processing where it was necessary for the performance of a public interest task or purpose of legitimate interests, and the Company is considering whether the legitimate grounds override your grounds.
when processing is unlawful and you oppose erasure and you request restriction instead.
if the Company no longer need the Personal Information but you require the information to establish, exercise or defend a legal claim.
Where processing of your Personal Information is restricted, the information shall be stored but no further processing shall occur and the Company shall
inform any third party to whom your Personal Information has been disclosed or shared that the Information is restricted;
inform you when any restricted period comes to an end.
Access to Personal Information
You may require the Company to provide you with
confirmation whether or not your Personal Information is being processed; and
access to any Personal Information that the Company holds about you.
The Company shall provide the requested information within one month of receipt of the request.
This information will be provided free of charge except where a request is manifestly unfounded or excessive (for example it is a repetitive request, or where the Company needs to process large amounts of data) in which case the Company shall make a charge for reasonable administrative costs in dealing with the request or refuse to respond and provide a justifiable reason for refusing to respond which you may seek judicial remedy or complain to the Information Commissioners Office.
Any Personal Information that you provide for the performance of a contract which is stored electronically shall be held in a portable format (readable in a format that will be commonly used on other computer systems) and the Company shall provide this information to you or directly to another organisation (where technically feasible) upon your request.
The right to rectify errors
Where any Personal Information that is processed is inaccurate or incorrect you have the right to instruct the company to correct the Personal Information.
The Company may, where the Company believes that the Personal Information is correct ask you for evidence to clarify or confirm that the Personal Data is wrong.
Right to erase Personal Information
You have the right in certain circumstances to instruct the Company to erase your Personal Information where
the Personal Information is no longer necessary in relation to the purpose for which it was originally collected or processed.
the Personal Information was processed with your consent and you withdraw your consent.
you object to the processing and there is no overriding legitimate interest for continuing the processing.
the Personal Information was unlawfully processed or obtained.
the Personal Information has to be erased in order to comply with a legal obligation.
the Personal Information is processed in relation to the offer of information services to a child.
Where you have the right and you issue an instruction to erase your Personal Information the Company shall use all resorts to
inform all third parties to whom the Company has disclosed or shared your Personal Information of the requirement to erase your Personal Information which they hold;
in the event that your Personal Information has been published online the Company shall endeavour to ensure that any links or references are also removed;
The Company may refuse to erase your Information only
the processing is necessary for the performance of a contract;
to exercise the right of freedom of expression and information;
to comply with a legal obligation;
the processing is for the performance of a public interest task or exercise of official authority;
for public health purposes in the public interest;
archiving purposes in the public interest, scientific research historical research or statistical purposes; or
the exercise or defence of legal claims.
You can exercise any of your rights by contacting the Data Controller at Pandable Ltd. East Barn, High Street, Sloley, NR12 8HJ.