PR23 is committed to protecting your personal data and handling it responsibly.
This policy covers the personal data that PR23 collects whenever you interact with us, including when you use our websites and apps and when you correspond with us such as by email or by telephone.
PR23 collects, stores, processes or transmits this data in order to provide services to you. This may include marketing of our services, the processing of orders for you and customer service activities, or for the purposes of conducting corporate activities such as interacting with suppliers, job applicants or other interested parties.
Personal data PR23 collects from you
We collect personal data from your interactions with us, such as when you engage with our websites and apps or when you email or telephone us.
The personal data we collect from you includes:
- your name
- your company/organisation
- your job title
- your address of employment
- your telephone number
- your email address
- your IP address
- your browser or device information
- information about your use of our websites and apps
- your communications and queries with us
Your personal information is held and processed in the UK.
PR23 does not undertake any automated decision making relating to any service activities.
PR23 will not collect data relating to minors as defined under UK law.
PR23 will not pass your information on to any third parties not relating to any service activities.
Why PR23 processes your personal data
This section explains the reasons why we process your personal data and our lawful basis for doing so.
We process your personal data when necessary for contractual reasons, such as to provide products and services that you have requested.
We process your personal data when necessary to pursue our legitimate interests in the following:
- tailoring our websites and communications for you. We collect information about your engagement with us online (such as pages that you have visited on our websites and apps)
- monitoring, improving and protecting our products, content and services
- responding to your comments, queries or complaints
You have a right to object to any processing that we undertake for our legitimate interest.
We will keep your personal information for as long as required to perform the service requests made by you to PR23.
After the services have been delivered in full, we may keep your data for up to 5 years for the following reasons:
- To respond to any questions or complaints
- To comply with the legal requirements
You have the right to object to any use of your personal data for processing that we undertake based on our Legitimate interests.
In addition to your rights to object, you have the right to ask us:
- for access to information about your personal data or for a copy of your personal data
- to correct or erase your personal data
- to restrict (i.e. stop any active) processing of your personal data
- to provide you with certain personal data in a structured, machine readable format and to transmit that data to another organisation
These rights may not always be absolute, for example if fulfilling your request would reveal personal data about another person, or if you ask us to erase data which we are required by law to keep or have a compelling Legitimate interest in keeping. If this is the case then we'll inform you when we respond to your request.
Data transfers and the use of Data Sub Processors
PR23 will not share your data with a third party not directly associated with the provision of services without your explicit consent. PR23 will also not transfer your data to a third party country outside of the UK or European Economic Area ('EEA') that is not compliant with the applicable data protection laws via adequacy agreement or other legally appropriate means as defined by the Information Commissioners Office without your explicit consent.
PR23 makes use of a number of third party organisations for the purposes of delivery of services to you. PR23 typically only transfers the personal data relating to you, where required for the activities set out below, to the following third parties or Data Processors:
- third party suppliers involved in: website hosting; systems maintenance; database management; identity checking and payment processing
- government authorities or law enforcement officials, to assist with their official requests and comply with our legal obligations
- recruitment and vetting agents, to assist with our recruitment processes
PR23 will update this list from time to time as our systems and operations evolve and inform you accordingly.
No data transfer will be undertaken that is outside of the purposes stated in this policy, or that will materially degrade the security of your data or your rights, in any event, the security provisions will be compliant with the applicable Data Protection Laws. Such Data Processors and Sub Processors will be contractually bound to process only in accordance with our instructions and to maintain technical and organisational controls in compliance with our security policy and the requirements of the GDPR.
PR23's commitment to confidentiality and security of processing
PR23 will use appropriate technical and organisational security measures to ensure an appropriate level of confidentiality, integrity and, where PR23 is the Data Controller, availability of your data and to ensure its availability in the event of a business continuity incident. PR23 will undertake security and data protection assessments of any third parties we elect to use prior to transfer of any of your data.
How to contact us and exercise your rights
We will do our best to assist with any queries you have about your personal data. You can also exercise the right at any time, or discuss any other data protection matters with us, by contacting us at firstname.lastname@example.org or write to PR23 Limited, The Mill Building, Worthing, West Sussex, BN11 1LY, for the attention of the Data Protection Officer. The email address is monitored within working hours and you should receive a reply within two working days.
If you have unresolved concerns, you also have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred. This is likely to be the Information Commissioner's Office in the UK.