Patrick Cantellow

Privacy Hub

Introduction

I am committed to safeguarding the privacy of my website visitors, clients and prospects.

This privacy notice tells you what to expect me to do with your personal information when you make contact with me or use one of my services.

Controller’s Contact Details

I, Patrick Cantellow, act as the data controller for information acquired via my website, or information you may have shared directly, or indirectly, with me.

If you need to contact me regarding your privacy, please contact me here.

How do I get personal information?

Most of the personal information I process is provided to me directly by you for one of the following reasons:

  • You made an enquiry
  • You shared your business card with me at an event
  • I am representing your organisation
  • I am acting for your organisation
  • I am delivering on a contractual obligation to you

In some circumstances, I may have received your personal information via a third-party because they referred me to you. If this is the case, I have asked the third party to confirm that they have been given permission by you to pass on your personal details.

What personal information do I hold and process and for how long?

The personal information I hold and process may include:

  • Full name;
  • Business name;
  • Email address;
  • Telephone number;
  • Postal address;
  • Bank details; and
  • Data obtained via the website (see cookie policy below).

If I have notified you that your personal information will be shared with third-parties, please see the “Third-party” section below.

I only hold your personal information all the time it has been collected for its original purpose. Other data, such as client information (invoices, contracted work, etc) is held for 6 years, this data may include your personal information.

Your data protection rights

Under data protection law, you have rights that I need to make you aware of. 

Your right to access

You have the right to ask me for the copies of your personal information I hold.

I can tell you:

  • what personal information I hold about you;
  • how I am using it;
  • who I am sharing it with; and
  • where I got your data from.

This right does not extend to commercial information.

Your right to rectification

You have the right to ask me to rectify your personal information you think is inaccurate. You can also ask me to complete information you think is incomplete. 

Your right to erasure

You have the right to ask me to erase your personal information in certain circumstances:

  • the personal information I hold about you is no longer needed for the original reason I collected or used it for;
  • you initially consented me to using your personal information, but you have now withdrawn your consent;
  • you have objected to me using your personal information, and your interests outweigh those of mine;
  • you have objected to the use of your personal information for direct marketing purposes;
  • you believe I haven’t collected or used your data unlawfully (see ‘Making a complaint’ section); and
  • I have a legal obligation to erase your personal information.

Your right to restriction of processing

You have the right to ask me to restrict the processing of your personal information in certain circumstances.

You can ask me to temporarily limit the use of your personal information when;

  • you have challenged the accuracy of your personal information;
  • an objection you have made to the use of your personal information;
  • you believe I have processed your personal information unlawfully but do not want it deleted (see ‘Making a complaint’ section); or
  • you believe I no longer need your personal information but you want me to keep it in order to create, exercise or defend legal claims.

Your right to object to processing

You have the right to object the processing of your personal information.

Your right to data portability

This only applies to information you have given me (see ‘Personal information I may collect’ section). You have the right to ask me to transfer your personal information you gave me from myself to another organisation, or give it to you. 

Sharing your information

In some circumstances I may need to share your personal information with third-parties to deliver on my contractual obligation to you.

I will always notify you before this takes place, and I will have ensured the relevant protections are in place.

Third-Party Privacy Notice

Please read this information carefully if I have told you have your personal information will be shared with a third-party in order to proceed with my services to you.

Xero

In order to deliver billing and invoice operations your personal information will be shared with Xero. 

This personal information may include:

  • full name;
  • business name;
  • postal address;
  • telephone;
  • email address; and
  • bank account details.

I remain responsible for the up-keep of this information.

It is important that you know Xero does not store data in the EU, but that they do have the appropriate safeguards in place when exporting your personal data out of the EU. You can find out more on their website.

Xero may use subprocessors to deliver their services to me. You can view these here.

It is in my legitimate interest to share your personal information with Xero. If you object, I cannot deliver my services to you.

Cookie Policy