Privacy Notice
Premium Plan Limited is a limited company registered in England and Wales under company number 05977118, with its registered office at Totemic House, Springfield Business Park, Caunt Road, Grantham, Lincolnshire, NG31 7FZ.
In this privacy notice, we refer to ourselves as “we”, “us” or “our”.
How to contact us
You can contact us in any of the following ways:
Email: info@premiumplan.co.uk
Post: Premium Plan Limited, Totemic House, Springfield Business Park, Caunt Road, Grantham, Lincolnshire, NG31 7FZ
We take the privacy and security of the personal information we hold about you seriously. This privacy notice explains how we collect, use, store and protect your personal information.
You should read this privacy notice carefully so that you understand why and how we use the personal information we collect and hold about you.
We have appointed Dale Stringer as our Data Protection Officer (DPO). You can contact the DPO using the following details:
Address: Data Protection Officer, Totemic House, Springfield Business Park, Caunt Road, Grantham, Lincolnshire, NG31 7FZ
Email: DPO@totemic.co.uk
We may provide you with other privacy notices from time to time, including when we collect personal information from you. This privacy notice supplements those notices and does not override them.
We may update this privacy notice from time to time.
Key Definitions
The key terms used throughout this privacy notice are defined below:
Data Controller: Under UK data protection law, this is the organisation or person responsible for deciding how and why personal information is collected, stored and used.
Data Processor: A Data Controller may appoint another organisation or person to process personal information on its behalf and in accordance with its documented instructions.
Personal Information: In this privacy notice, we refer to personal data as “personal information”. Personal information means any information relating to an identified or identifiable living individual. It does not include information that has been anonymised so that an individual can no longer be identified.
Special Category Information: Certain particularly sensitive personal information receives additional protection under data protection law. This includes information relating to health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sex life and sexual orientation, as well as genetic and biometric information used for identification purposes.
Personal information we collect through this website
The categories of personal information we may collect, use and hold about you through this website include:
Identity Information: Information relating to your identity, such as your name, including previous names and titles where relevant, business purpose, and contact information. Where collected through this website, we will generally retain this information for up to 12 months or more.
Contact Information: Information relating to your contact details, such as your email address, postal address and telephone number. Where collected through this website, we will generally retain this information for up to 12 months or more.
The types of personal information we collect may differ depending on who you are and the nature of your relationship with us. Where appropriate, we will provide additional privacy information relevant to that relationship.
We do not intend to collect special category information through our general website enquiry forms.
Personal information collected directly through this website is stored securely and retained only for as long as necessary for the purposes for which it was collected.
Where we use third-party systems or service providers to process business contact information, those providers may process information outside the UK. Where this occurs, we will ensure appropriate safeguards are in place in accordance with applicable data protection law.
How and why we use your personal information
We may only use your personal information where we have a lawful basis for doing so under applicable data protection law.
Depending on the circumstances, we may rely on the following lawful bases:
Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: Where processing is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your fundamental rights and freedoms.
Legal Obligation: Where processing is necessary for us to comply with a legal obligation.
Consent: Where you have given us your consent to use your personal information for a specific purpose.
Where you ask us to provide information about our services, we may require certain personal information in order to respond to your enquiry. If you do not provide the information we require, we may not be able to provide the requested information or contact you about your enquiry.
It is important that the personal information we hold about you is accurate and up to date. Please contact us if your personal information changes.
Where we rely on consent as our lawful basis for processing your personal information, you have the right to withdraw that consent at any time. If you withdraw your consent, we will stop processing your personal information for that purpose unless another lawful basis allows or requires us to continue processing it.
Where we rely on legitimate interests, we will consider and balance our interests against your rights and freedoms. You can contact us if you would like further information about the specific lawful basis on which we rely for particular processing activities.
We may anonymise personal information so that you can no longer be identified from it. We may use anonymised or aggregated information for statistical, analytical, reporting and business purposes where applicable data protection law permits us to do so.
We will only use personal information for the purposes for which it was collected unless we reasonably consider that we need to use it for another compatible purpose or are otherwise permitted or required to do so by law.
How we collect personal information
We usually collect Identity Information and Contact Information directly from you when you complete a form on our website, contact us or otherwise provide information to us.
We may also automatically collect certain website, device and technical information through cookies and similar technologies used on our website. Further information about this can be found in our Cookie Policy.
Who we may share personal information with
We may need to share your personal information with other organisations or individuals where necessary and lawful. These may include:
other companies within our group that provide administrative, operational, management or reporting services;
technology, hosting, communications and email service providers acting on our behalf;
professional advisers and other service providers where necessary;
regulators, authorities or other organisations where disclosure is required or permitted by law; and
organisations proposing to purchase, invest in or acquire all or part of our business or assets.
Depending on the circumstances, organisations with whom we share personal information may act as Data Processors, independent Data Controllers or, where applicable, joint Data Controllers.
Where an organisation processes personal information on our behalf, we will put appropriate contractual arrangements in place governing its processing and the security of the personal information.
We do not sell or trade personal information provided to us.
International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable data protection law and that appropriate safeguards are in place where required.
How long we keep your personal information
We will only retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements.
The appropriate retention period will depend on the nature of the information, why it was collected and any legal or regulatory obligations applying to us.
Where specific retention periods apply to information collected through this website, these are described above.
Your rights
Under data protection law, you may have the following rights in relation to your personal information:
Right of access: You may request a copy of the personal information we hold about you and certain information about how we use it.
Right to rectification: You may request that inaccurate personal information is corrected and incomplete information is completed.
Right to erasure: In certain circumstances, you may request that we delete your personal information.
Right to restrict processing: In certain circumstances, you may request that we restrict the way we process your personal information.
Right to data portability: In certain circumstances, you may request that personal information you have provided to us is transferred to you or another organisation in a structured, commonly used and machine-readable format.
Right to object: You have the right to object to the processing of your personal information for direct marketing purposes. You may also have the right to object where we rely on legitimate interests as our lawful basis for processing.
Where we rely on consent, you also have the right to withdraw your consent at any time.
If you wish to exercise any of these rights, please contact us using the details at the beginning of this notice.
We may need to request information from you to verify your identity before responding to your request. We do not normally charge a fee for exercising your rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
Marketing
You may receive marketing communications from us about our services where you have consented to receive them or where we have another lawful basis for contacting you.
We will give you the opportunity to control how we market to you. Marketing emails will provide an option to unsubscribe, opt out or otherwise manage your marketing preferences.
You can also ask us to stop using your personal information for marketing purposes by contacting us using the details at the beginning of this notice.
If you ask us to stop sending marketing communications, this will not prevent us from sending non-marketing communications where necessary, for example in connection with services we provide to you or other communications we are legally required to send.
We do not provide your personal information to third parties for their own marketing purposes.
Complaints
If you are unhappy with the way we have handled or used your personal information, please contact us in the first instance so that we have an opportunity to investigate and resolve your concerns.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority responsible for data protection.
Third-party websites
Our website may contain links to third-party websites. If you follow those links, you will leave our website and the third party may collect personal information about you.
We are not responsible for the privacy practices of third-party websites. You should review the relevant third party’s privacy notice to understand how it collects and uses your personal information.