GDPR AND PRIVACY POLICY
In accordance with the General Data Protection Regulation (GDPR), Aman the agents Limited have implemented this privacy policy to inform you, our customer, of the types of data we process about you. We have also included within this policy the reasons for processing your data, the lawful basis that permits us to process it, how long we keep your data for and your rights regarding your data. This notice will apply to historic and current customers.
DATA PROTECTION PRINCIPALS.
Under GDPR, personal data held by us must follow the core principals here in.
1. Processing is transparent, fair and lawful.
2. Data collected is for legitimate and specific purposes.
3. Data collected is relevant to and limited to what is required for the purpose of processing.
4. Data will be kept up to date and rectified where inaccurate as soon as possible.
5. Data is processed in a way that ensures that the correct security of personal data including accidental loss, destruction or unauthorised use is dealt with using appropriate technical or organisational measures.
6. GDPR procedures are complied with for the transferring of personal data internationally.
DATA HELD.
1. Aman the agents Limited will hold various types of data in order to process information and conduct business in an efficient and legal manner.
2. Specifically, we hold your name, address, telephone number and email.
3. We will hold photographic and or photo copied documents, such as passport, driving licence, bank statements, council tax statements in accordance with the Money Laundering Regulation 2003 and Proceeds of Crime Act 2002.
4. Your data will be collected at various stages and this is kept in secure files and or within the company`s IT system.
LAWFUL BASIS FOR PROCESSING DATA.
1. Business to business and customer contact.
2. Marketing information purposes.
3. Your data will be processed to comply with GDPR and will be held for as long as is legally required or no longer necessary.
DATA SHARING.
1. Employees of Aman the agents limited who have the responsibility for processing your data will comply with GDPR guide lines. All employees have been informed of GDPR required procedures to conduct their daily business requirements.
2. We may share your data with other parties, with your authorisation, to facilitate quotes or access. This would specifically include financial services, surveyors and solicitors. There may be other reasons to share data to comply with legal obligations put upon us. Third parties must ensure the data provided is not compromised and in turn implement appropriate technical and organisational measures to ensure the security of your data under GDPR.
3. We do not share your data with bodies outside of the European Economic Area.
PROTECTING YOUR DATA.
Aman the agents Limited are aware of the requirements under GDPR to ensure your data is protected against accidental loss, disclosure destruction or abuse. Processes have been implemented to protect against this.
DATA RETENTION PERIOD.
We will hold your data for as long as we need to conduct business with you or as long as you allow us to hold your data. Some data retention periods are set by Law and can vary depending on why we need your data and for that reason we may not be able to delete your data.
YOUR RIGHTS A DATA SUBJECT.
Your rights to the data Aman the agent Limited hold on you.
1. To request a copy of the information we hold on you.
2. To request any inaccuracies are corrected on data we hold on you in a timely fashion.
3. To request that data we hold on you is erased. In certain circumstances this may not be possible as it falls outside of the Law and requirements of professional bodies.
4. The right to transfer your data we hold on you to another party.
5. The right to object to the inclusion of data.
COMPLAINT PROCEDURE.
If you believe your data rights have been breached in anyway by Aman the agent limited you are able to speak to our appointed compliance officer Mr Abdul Aman 07436 618778.
Should you wish to raise this directly to the Information Commissioner ( ICO ) they can be contacted at Information Commissioner`s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone 0303 123 1113.
Data will be held in accordance with HMRC, AML and ICO requirements.