Data protection (GDPR) policy
Owner and Data Controller
Owner contact email: firstname.lastname@example.org
For purposes of the policy, references to “we,” “our,” and “us” mean ThirtyC Limited.
ThirtyC owns and operates the website at www.thirtyc.com. Our site provides a wide range of information to our site’s visitors. Like many websites, we also collect information from our visitors, including personally identifiable information, such as your full name, e-mail address, and other information that you may provide to us, and non-personally identifiable information (e.g., aggregate statistics about what parts of our Site are most popular).
We also deal with customers by email, over the phone, face to face, and via social media. We will collect personally identifiable information from you such as your full name, email address, contact address and other information that you may provide to us.
Before using this site or communicating with us – and particularly before providing personally identifiable information to us – you should read this entire policy. Use of this site or communicating with us constitutes your agreement to the terms of this policy. If the terms of this policy are not acceptable to you, do not provide any personally identifiable information to us.
Scope of policy
Please be aware that this policy applies to information which we process about you. It does not apply to information which you provide via any other web sites.
How we collect your information
(a) How we collect your information via our site
Active information collection
This site collects information from its visitors in two ways: actively and passively. Active information collection refers to instances in which we gather information from you when you fill it in and send it to us, such as by completing a contact form or sending us a message via an e-mail reply mechanism provided by this site. Active information collection can include both personally identifiable information (e.g., your full name or information that is unique to you) and non-personally identifiable information (e.g., if we were to ask for a list of the top three things you like about our site). Passive information collection refers to instances in which we collect information from you that you have not actively provided (please see the next section of this policy for a summary of our passive information collection practices).
(a) Registration Information
If you are interested in receiving electronic updates, alerts, and other information from us regarding this site and our products and services, you must provide us with an e-mail address. In completing your registration, we may also ask for optional information, such as how you found us, to help us better serve you in the future.
(b) Feedback Information
We welcome your comments and feedback regarding this Site and our products, services and programs. This Site provides an e-mail address that permits you to send us your own e-mail address, comments, and any other information you choose to include. E-mail is not secure. As a result, you should carefully consider what information you wish to send to us via e-mail.
Passive information collection
We may use special technologies to passively collect information while you are visiting www.thirtyc.com (that is, you do not actively provide this information). These technologies allow us to collect certain kinds of non-personally identifiable information, including your Internet domain name, the type of web browser you use, the operating system you use, the date and time of your visit www.thirtyc.com, the specific pages you visit, and the address of the web site you visited prior to entering www.thirtyc.com. We may link this passively collected non-personally identifiable information with personally identifiable information you have actively provided elsewhere on this site.
Below we have summarised the primary means of passive information collection at our Site.
(ii) Internet Protocol (IP) Addresses
This site uses Internet protocol (IP) addresses. IP addresses are unique identifiers automatically assigned to each computer when logging onto the Internet. IP addresses allow us to collect much of the same information we collect through cookies, including browser type, what pages you visit, and how long you stay on the site. In general, IP addresses allow us to identify problems with our servers, prepare aggregate demographic information and other information regarding this use of this site, and improve the functions of this site.
(b) How we collect information through other channels
We collect information from you when you call us, when you send emails or other messages to us, when we meet with you in person, when you communicate with us via social media.
(c) Information about other people.
If you provide information to us about any person other than yourself, such as people you are enquiring on behalf of, you must ensure that they understand how their information will be used and that they have given their permission for you to disclose it to us and for you to allow us, and our service providers, to use it.
(d) Sensitive personal data
Unless we make it clear otherwise, our policy is not to ask for any sensitive personal data from you (that is information about you, or anyone you are enquiring on behalf of) about, for example, racial or ethnic origin, political opinions, religious beliefs.
If you choose to provide this sensitive personal data to us as part of a particular service (where such information has been requested and the reasons for that discussed with you) or for any other reason, this will mean that you have given (and we accept) your explicit consent for us, our outsourced service providers, and third parties which are providing or fulfilling your arrangements to use that information for the reasons described in this policy, or as explained at the time you provide that information to us.
What do we do with your information
The personally identifiable information we process about you, and anyone that you are enquiring on behalf of, will only be used and disclosed in accordance with this policy or as specifically disclosed to you at the time you provide the information.
The personally identifiable information that we process may be used in the following ways:
(a) To respond to your requests, it will be accessed by our staff, service providers which act on our behalf, and carefully selected third parties in the course of providing quotes that you request for our products and services.
(b) We and/or our authorised service providers (such as our marketing agencies, and data analytics providers) may also use your personally identifiable information to review your dealings with us including your preferences; to review, develop and improve our products and services, to improve our customers’ experience, and for internal market research, strategic development, and statistical analysis.
We reserve the right to share without restriction aggregated, anonymised and other non-personally identifiable information regarding site usage, traffic patterns, demographics, and other statistics about our site and our products and services.
We reserve the right to use or disclose personal information which we process about you and other people which you provide information about, as necessary to comply with applicable laws, regulations, legal processes, and law enforcement inquiries, as required by litigation, to take precautions against liability, and protect the security and integrity of the site and the safety of our customers and site users.
Google Analytics (Google Inc.)
We use Remarketing with Google Analytics to advertise online.
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilises the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualise and personalise the ads of its own advertising network.
Third-party vendors, including Google, may show you ads on sites across the Internet.
We and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies together to inform, optimise and serve ads based on your past visits to this website.
We and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies together to report how your ad impressions, other uses of ad services and interactions with these ad impressions and ad services are related to visits to our site.
We will use data from Google’s Interest-based advertising or 3rd-party audience data (such as age, gender and interests) with Google Analytics to optimise how we show you ads across the internet.
If you would like to opt out of receiving google analytics cookies: see currently available opt outs for the web.
Using the Ads Settings, you can opt out of Google Analytics for Display Advertising and customise Google Display Network ads.
Personal Data collected: Cookies and Usage Data.
Legal basis of processing
The Owner may process Personal Data relating to Users if one of the following applies:
ThirtyC may process personal data for one of the following reasons:
where individuals have given their consent for one or more specific purposes;
processing is necessary for the purposes of the legitimate interests pursued by ThirtyC or by a third party;
provision of data is necessary for the performance of an agreement and/or for any pre-contractual obligations there of;
processing is necessary for compliance with a legal obligation to which the ThirtyC is subject;
processing is related to a task that is carried out in the public interest or in the exercise of official authority
If you require further information on the specific legal basis for processing your data, please contact us at email@example.com
We take reasonable steps to ensure that personally identifiable information that you send us is accurate, current, and complete. Toward that end, we provide you with reasonable access to your personal information to correct errors or delete the information you have provided. If you wish to correct or delete your personally identifiable information, please contact our Data Protection Officer by e-mail at firstname.lastname@example.org or by post at ThirtyC, Furzehall Farm, Wickham Rd, Fareham PO16 7JH.
To respond to your request or inquiry, we may require follow-up or contact information to allow us to verify that you are the person authorised to view the information you are requesting. We may, at our discretion, refuse to allow you access to certain information if, in our view, to provide such access would jeopardise another person’s privacy; would violate any applicable law, regulation, or directive; or would unreasonably burden this site.
Although we take reasonable steps to protect the personally identifiable information that you provide via this site, no system is 100% secure or error-free. Therefore, we do not, and cannot, guarantee the security or accuracy of the information we gather. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
One way we protect your personally identifiable information is through usernames and passwords. This safety measure is only effective if you protect the secrecy of both your username and password. If you ever suspect your username or password may have been compromised or subject to unauthorised use, contact us immediately at contacting us by e-mail at email@example.com.
Personal data shall be processed and stored for as long as required by the purpose they have been collected for. This shall include:
personal data collected for purposes related to the performance of a contract until such contract has been fully performed;
personal Data collected for the purposes of legitimate interests shall be retained as long as needed to fulfil such purposes;
until consent is withdrawn;
Furthermore, the we may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority
Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
you have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes.;
the right to request a copy of the personal data which we hold about you;
the right to request that we correct any personal data if it is found to be inaccurate or out of date;
the right to request your personal data is erased where it is no longer necessary to retain such data;
the right to withdraw your consent to the processing at any time, where consent was your lawful basis for processing the data.
the right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable i.e. where the processing is based on consent or is necessary for the performance of a contract with the data subject and where the data controller processes the data by automated means);
the right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
You can exercise your right at any time by contacting us at firstname.lastname@example.org.
Changes to this policy
We reserve the right to change this Policy at any time and in our sole discretion, for example to take account of new data protection legislation, and to reflect our current business practices. If we do change the Policy, the new Policy will be posted here, along with its revision date. We encourage you to check this Policy periodically and – at a minimum – before each instance in which you provide personally identifiable information to us.
ThirtyC Limited are at Furzehall Farm, Wickham Rd, Fareham PO16 7JH. Please contact us by email at email@example.com or by telephone on +44 23 9216 1030. Opening hours (UK GMT) are Monday – Friday 0900 – 1800.
This policy was last revised on 05 September 2018