PRIVACY POLICY
1. Introduction
At Leicester & Leicestershire (leicesterandleicestershire.com), we are committed to upholding the highest standards of data protection and user privacy. We recognize the fundamental importance of safeguarding personal data and are fully aligned with the principles enshrined within the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable data protection laws. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal information when you interact with our website and services.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all users who access or interact with the website leicesterandleicestershire.com, and any associated digital services, whether as visitors, registered users, or subscribers. For the purposes of data protection law, Leicester & Leicestershire is the Data Controller with respect to the personal data we process. Questions or concerns may be addressed to us via email at [email protected].
3. Categories of Data We Process
We may collect and process the following categories of personal data:
– Usage Data: Information about your device and interactions with our website, such as your IP address, browser type, referring/exit pages, operating system, date/time stamps, and session duration.
– Account Data: Personal details you provide upon registration or account creation, including your full name, address, email address, and phone number.
– Profile Data: Details regarding your preferences, interests, browsing behavior, and past interactions with our services or products.
– Communication Data: Records of your interactions with us, such as customer support queries, feedback submissions, and other correspondence.
– Technical Data: Device information, system configuration, operating environment, and application diagnostics.
– Transaction Data: Information related to services or products you purchase through leicesterandleicestershire.com, including billing details, order history, and delivery information.
– Preference Data: Information on your consent to marketing communications, communication preferences, and areas of expressed interest within our offerings.
4. Legal Bases for Processing
We process personal data lawfully, fairly, and in a transparent manner based on one or more of the following legal grounds:
– Legitimate Interests: For purposes such as analytics, performance tracking, product improvement, service delivery, and fraud prevention—provided such interests are not overridden by your data protection rights.
– Contractual Necessity: To fulfill our obligations under any contract entered into with you, including the provision of services or responding to enquiries.
– Consent: Where you explicitly grant us permission, particularly for purposes such as email marketing or the processing of non-essential cookies.
– Legal Obligations: Where we are required to process or retain data to comply with applicable laws and regulatory mandates.
5. Your Rights
As a data subject under GDPR and CCPA, you have the following rights regarding your personal data:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right of Rectification: You may request corrections to inaccurate or incomplete data.
– Right to Erasure: You can ask us to delete your personal data where there is no longer a legal ground for processing.
– Right to Restrict Processing: You may request us to limit the processing of your data under certain conditions.
– Right to Data Portability: Where applicable, you may request that your data be transferred to another controller in a structured, commonly used, and machine-readable format.
– Right to Object: You may object to our processing of your data where processing is based on legitimate interests or marketing purposes.
– Non-Discrimination: Under the CCPA, you have a right not to receive discriminatory treatment for exercising your privacy rights.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement and maintain appropriate technical and organizational security measures, including but not limited to:
– Data encryption (in transit and at rest)
– Access controls and user authentication
– Secure servers and redundant backups
– Monitoring of systems and firewall protection
– Staff training on data protection policies
These precautions are designed to ensure that your data is securely maintained and protected from unauthorised access, loss, misuse, or alteration.
7. International Transfers
When personal data is transferred outside your country of residence, including to countries that may not provide for the same level of data protection as your own, we ensure such transfers are made in compliance with applicable laws. We use approved safeguards such as Standard Contractual Clauses (SCCs), and where appropriate, supplementary measures to ensure continued data protection.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes set out in this Privacy Policy or to comply with legal, regulatory, tax, or accounting requirements. Specific retention periods include:
– Usage Data: up to 18 months
– Account and Transaction Data: retained while the account is active and for 6 years thereafter
– Technical and Communication Data: 2 years from last interaction
– Preference and Marketing Data: until consent is withdrawn or 24 months after last engagement
9. Cookie Policy
We use cookies and similar tracking technologies for a variety of purposes on leicesterandleicestershire.com, categorized as follows:
– Essential Cookies: Required for the functioning of our website, such as login maintenance and navigation.
– Functional Cookies: Enhance usability by remembering user preferences and customization.
– Analytics Cookies: Allow us to measure website performance and usage statistics to improve services (e.g., Google Analytics).
– Performance Cookies: Help us understand how users interact with the site to enhance performance and content delivery.
10. Cookie Management & Compliance
In compliance with GDPR and CCPA requirements, users are presented with a cookie consent banner on their first visit, allowing them to manage and customize their preferences. Consent can be withdrawn at any time by accessing the cookie settings on our site. Additionally, users can configure cookie handling directly through their browser settings. Non-essential cookies are only activated after affirmative user consent.
11. Protection of Children
Leicester & Leicestershire does not knowingly collect or process personal data of children under the age of 13. If we become aware that such data has been inadvertently collected without verified parental consent, we shall delete it promptly. Parents or legal guardians who believe their child’s personal data was collected without consent should contact us at [email protected].
12. Changes to This Policy
We reserve the right to update this Privacy Policy as we modify our services, develop new technologies, or adjust to updated laws. Where material changes occur affecting the way personal data is handled, we shall notify users prominently through appropriate means.
13. Contact Us
For questions, complaints, or to exercise your rights as outlined above, you may contact us directly via:
Email: [email protected]
Website: leicesterandleicestershire.com
We are committed to upholding your privacy rights and ensuring full compliance with GDPR, CCPA, and other relevant privacy frameworks. Please do not hesitate to reach out should you have any privacy concerns or require further clarification regarding our data handling practices.