For the purpose of the Data Protection Act 2018 (the Act) and the General Data Protection Regulations 2016/679 (the “GDPR”) the data controller is Quadmark (07490835) – trading as Quadmark Ltd – with its registered office at 300 St John Street, Clerkenwell, London, EC1V 4PA.
If you have contacted us or have used our website
- The types of information we collect and how we use it
- Who does my information go to?
- Our lawful basis for processing data
- Online advertising
- Processing of personal data using analytics
- Social media platforms
- How long do we keep your information for?
- Disclosure of your information
- Your rights of access
If you are a Quadmark applicant AND website users
Contacting us and the ICO
If you have contacted us or have used our website
1. The types of information we collect and how we use it
Generally, you control the amount and type of information you provide to us when using our
website or otherwise interacting with us. The personal data that we collect depends on the context of your interaction with us and/or the website, the choices you make and the services you purchase. We categorise those activities in the following ways:
a) Information collected through our website.
This information may include personal details such as your name, email address, postal address and telephone number., personal description, your preferences and other information provided by you. For example, when completing one of our contact forms.
When you use our website, we also collect certain technical information that is sent by your browser to our website (stored as log files). This includes information, such as your IP address, browser type, operating system, language, time zone setting, access times and any referring website addresses. We use this information to provide our website and its features to you, to administer it and fix technical issues, and to improve it. We also use it to carry out analytics and advertising. See our Cookies Policy.
b) Information collected when you correspond with us.
If you contact us, or enquire with us, we may keep a record of that correspondence. We may use this information to deal with your query and thereafter to keep a record of your query.
c) Information collected when delivering our projects and services.
We may collect personal data from the staff and other connected parties of our customers when providing our services to them. The types of information may change depending on the service, but we typically collect names and business contact information.
2. Who does my information go to?
We may share your personal data with third parties where necessary for a legitimate business reason, for example:
- Suppliers of IT services and third parties engaged by us for the purpose of providing services to us, such as our professional advisers; the services that we provide to our
customers; or to comply with our legal obligations.
- Market research providers who assist us in generating reviews of our products and services; and
- Government and regulatory authorities, for example to respond to a legal request or comply with a legal obligation;
- In the event that we sell, buy or merge any business or assets, including to the prospective seller or buyer of such business or assets and their respective professional advisers.
3. Our lawful basis for processing data
EU and UK data protection laws require us to tell you what our lawful basis is when processing your personal data.
The lawful basis we rely on to process your personal data is typically one of the following:
- Your consent, for example when you subscribe to marketing communications or allow us to set certain cookies (you can withdraw this consent at any time).
- Where it is necessary for our or a third party’s legitimate interests, where these are not overridden by your individual rights: our legitimate interests include using personal data to improve our website.
4. Online advertising
The purpose of our online advertising is to provide you with relevant products, based on the sort of products you are viewing on our website or those of our products that you view through our advertising agencies/networks on other selected websites. The technology behind these adverts depends on cookies and device IDs.
5. Processing of personal data using analytics
We use analytics cookies to collect information on your behaviour on our site to analyse how our visitors use our website. We use this information to generate, aggregate, and therefore anonymise, reports. For information on how you can turn off cookies used for this purpose, see our Cookies Policy below.
6. Social media platforms
Any communication, engagement and action on social media are subject to the terms and conditions and privacy policies held from each social media platform. In order to protect your own privacy and personal details, we advise that you use social media sites wisely.
We may offer social sharing buttons to allow you to share content directly from web pages to social media platforms. Please note, that you are using social sharing buttons at your
own discretion and these social media platforms may be tracked to save requests and
to share a web page through your social media account.
7. How long do we keep your information for and where do we keep it?
When you contact or correspond with us, we will keep your personal data securely stored until it is no longer required. To determine the appropriate retention period for personal data, we consider the purposes for which we process your personal data and whether we can achieve those purposes and whether we still need the personal data for that purpose. As a guide, we will usually retain personal data of website users for one year from the date on which you make contact with us, and then securely dispose and destroy the information.
Any personal data that we obtain may be transferred to and stored by a third party at a locality inside or outside the UK or the European Economic Area (EEA), including in a country where the law provides less protection for personal data. If we transfer personal data to a third party outside of the UK or EEA, we will, as required by applicable law, ensure that your privacy rights are protected by appropriate safeguards, such as an EU or UK “adequacy decision” or the EU or UK’s standard contractual clauses. Please contact us if you would like more information about these safeguards.
8. Disclosure of your information
We may disclose information about you to law enforcement officials in the investigation of any alleged unlawful activities by you. We may also be required to disclose information to a court or regulatory body when required to do so by law.
9. Your rights of access, correction, erasure, and restriction to information
EU and UK data protection law gives you certain rights in relation to your personal data, for example to:
- request a copy of the personal data that we hold about you;
- object to our processing of your personal data or receive a machine-readable copy of your personal data; or
- request that we rectify, delete, or limit the processing of your personal data.
Should we be entitled to refuse your request, reasons will be given for the refusal. We may also request that you provide further information and identification to enable your request to be processed.
You have the right to ask us not to process your personal data for marketing purposes.
You can ask us to stop using your personal data for marketing at any time by using one of the methods detailed within the contact section below.
You have the right to request a copy of personal information that we hold about you. To do this, simply write to the Data Controller using the contact details at the end of this policy. We may charge you a reasonable fee, not exceeding the statutory maximum, to meet our costs in providing you with details of the information we hold about you. Should we be prevented from disclosing your personal information, reasons will be given for the refusal. We may also request that you provide further information and identification to enable your request to be processed.
If you have a concern or complaint about how we have used your personal data, as a first step, we ask that you raise this in writing with us by contacting us using any of the means listed below:
The Operations Department
300 St John Street
You are also entitled to raise your concerns with your local supervisory authority for data protection (in the UK, this is the Information Commissioner’s Office (ICO) and please see below for further information on how to contact the ICO).
The website may, from time to time, contain links to and from other websites (for example,
social media sites such as Facebook, Instagram and Twitter). If you follow a link to any of these other websites, please note that these websites have their own privacy and cookie policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
For job applicants and web users
If you are a Quadmark applicant and website user
Contacting Quadmark and the ICO
If you have any questions about our policy and your data, please contact Quadmark here, or write to us here:
Data Protection Officer
300 St John Street
You can find detailed information about your rights under the Data Protection legislation, and complain to the UK Information Commissioner’s Office.
Information Commissioner’s Office
Tel: 0303 123 1113 (local rate) or, if you prefer to use a national rate number, 01625 545 745