Privacy Hub

Privacy Notice

I am committed to safeguarding the privacy of my website visitors, clients and prospects. 

This privacy notice tells you what to expect me to do with your personal information when you make contact with me or use one of my services. 

Use the drop-downs below to find the information you need.

 

I, Patrick Cantellow, act as the data controller for information acquired via my website, or information you may have shared directly with me. 

If you need to contact me regarding your privacy, please use the contact form here, via post or telephone. 

My postal address:

Patrick Cantellow, 24 Wadham Place, Sittingbourne, Kent, ME10 4LZ

Telephone: 01795 371 005

Most of the personal information I process is provided to me directly by you for one of the following reasons:

  • You made an enquiry to me.
  • You shared your business card with me at an event.
  • You subscribed to my e-newsletter.
  • I am representing your organisation.

In some circumstances, I may have received your personal information via a third-party because they referred me to you. If this is the case, I have asked the third party to confirm that they have been given permission by you to pass on your personal details.

See the ‘How do I get personal information’ section to see how I get your personal information.

The personal information I hold and process may include:

  • full name;
  • business name;
  • email address;
  • telephone number;
  • postal address;
  • bank details; and
  • data obtained via the website (see cookie policy below).

If I have notified you that your personal information will be shared with third-parties, please see the “Third-party” section below.

I only hold your personal information all the time it has been collected for its original purpose. Other data, such as client information (invoices, work etc.) is held for 6 years, this data may include your personal information. 

Under data protection law, you have rights that I need to make you aware of. 

Your right to access

You have the right to ask me for the copies of your personal information I hold.

I can tell you:

  • what personal information I hold about you;
  • how I am using it;
  • who I am sharing it with; and
  • where I got your data from.

This right does not extend to commercial information.

Your right to rectification

You have the right to ask me to rectify your personal information you think is inaccurate. You can also ask me to complete information you think is incomplete. 

Your right to erasure

You have the right to ask me to erase your personal information in certain circumstances:

  • the personal information I hold about you is no longer needed for the original reason I collected or used it for;
  • you initially consented me to using your personal information, but you have now withdrawn your consent;
  • you have objected to me using your personal information, and your interests outweigh those of mine;
  • you have objected to the use of your personal information for direct marketing purposes;
  • you believe I haven’t collected or used your data unlawfully (see ‘Making a complaint’ section); and
  • I have a legal obligation to erase your personal information.

Your right to restriction of processing

You have the right to ask me to restrict the processing of your personal information in certain circumstances.

You can ask me to temporarily limit the use of your personal information when;

  • you have challenged the accuracy of your personal information;
  • an objection you have made to the use of your personal information;
  • you believe I have processed your personal information unlawfully but do not want it deleted (see ‘Making a complaint’ section); or
  • you believe I no longer need your personal information but you want me to keep it in order to create, exercise or defend legal claims.

Your right to object to processing

You have the right to object the processing of your personal information.

Your right to data portability

This only applies to information you have given me (see ‘Personal information I may collect’ section). You have the right to ask me to transfer your personal information you gave me from myself to another organisation, or give it to you. 

 

In some circumstances I may need to share your personal information with third-parties to deliver on my services or under legitimate interest. 

I will always notify you before this takes place. 

Please see the third-party privacy notices below if I have told you this will take place.

You have the right to complain about how I have handled your personal information. If you have queries or concerns, please contact me using the details in the ‘Controller’s contact details’ section.

If you remain dissatisfied, you can make a complaint about the way I have processed your personal information to the Information Commissioner’s Office (ICO) as the UK supervisory authority. You can do that here.

Updates to this privacy notice are found below. 

May 2020

Privacy notice first published.

Third-Party Privacy Notice

Please read this information carefully if I have told you that your personal information will be shared with a third-party in order to proceed with my services to you.

 

In order to deliver billing and invoice operations your personal information will be shared with Xero. 

This personal information may include:

  • full name;
  • business name;
  • postal address;
  • telephone;
  • email address; and
  • bank account details.

I remain responsible for the up-keep of this information.

It is important that you know Xero does not store data in the EU, but that they do have the appropriate safeguards in place when exporting your personal data out of the EU. You can find out more on their website.

Xero may use subprocessors to deliver their services to me. You can view these here.

It is in my legitimate interest to share your personal information with Xero. If you object, I cannot deliver my services to you.

In order to deliver email marketing, that you have given consented to, your personal information will be sent to Mailchimp.

This personal information may include:

  • full name;
  • business name; and
  • email address.

I remain responsible for the up-keep of this information.

It is important that you know Mailchimp does not store data in the EU, but that they do have the appropriate safeguards in place when exporting your personal data out of the EU. You can find out more on their website.

Mailchimp may use subprocessors to deliver their services to me. You can view these here.

Cookie Policy