This version is dated: 4th March 2021
At Latte, we (“we” or “us”) promise to safely process and store any personal data you share with us or that we receive indirectly as described below.
‘Personal data’ means information relating to you from which you can be identified such as name and contact details, biographical or professional information, areas of interest or anything revealing something about you personally that we may hold on file or on computer.
We strive to ensure that we are clear about how we will use the personal data we collect. We collect and process your personal data in accordance with applicable laws that regulate data protection and privacy.
1. Information we may collect from you
We may directly collect personal data from you through one or more of the following:
By you registering for one of our jobs
By you emailing or calling us with an enquiry
By you entering your details through our website
When your business card has been given to or exchanged with one of our staff
We may indirectly collect personal data about you in one or more of the following ways:
Data is given to us by our partners, but only with your knowledge and, if legally required, where you have consented to this.
If you provide your data to media subscription services.
If you are one of our followers on our social media channels, e.g., LinkedIn, Twitter or Instagram
2. What personal data do we collect?
The type and quantity of information we collect and how we use it depends on why you are providing it.
We will mainly collect:
3. How will we use your data?
We may use your data:
4. How we keep your data safe and who has access to your information
We ensure that there are appropriate technical controls in place to protect your personal details from being accessed or used on an unauthorised basis or to protect them from accidental loss, destruction or damage. For example, our online forms are encrypted, and our network is protected and routinely monitored.
We undertake regular reviews of who has access to information that we hold to ensure that your information is only accessible by appropriately trained staff.
We also ask that any clients apply the same controls.
5. Disclosure of information
We may disclose your personal information to third parties in the following situations:
We will only ever share your personal data with third parties to use for their own purposes in other circumstances with your prior knowledge and, if in connection with marketing, where we have your specific, informed, freely given and unambiguous consent. Any third-party data controllers external to us with whom we deal, as described above, will handle your personal data in accordance with their own chosen procedures and you should check the relevant privacy policies of these companies or organisations to understand how they may use your personal data. Since these controller organisations are acting outside of our control, we have no responsibility for their data processing practices.
6. Keeping your information up to date
If we get in touch with you for any of the reasons above, we will give you the opportunity to correct and update your information. You can also contact us by emailing [email protected] at any time to let us know when your information needs correcting, updating or removing.
Where a public source makes it clear that personal information that we hold about you are out of date (e.g., a public announcement, press release or LinkedIn notification tells us that you have moved job), then we may use this information to update our records.
7. How long do we keep your information for?
The period for which we keep your personal data usually depends on the purpose(s) for which your information was collected.
We will not keep your personal data for longer than necessary for that/those purpose(s) or unless we need to keep data for a longer period to comply with any legal or regulatory requirements.
Personal data that we no longer need to hold is securely disposed of and/or anonymised so you can no longer be identified from it.
8. Lawful basis for processing
We process your personal data for the above purposes relying on one or more of the following lawful grounds:
If we process sensitive personal data (or “special category data”) about you such as data relating to health, ethnic origin, religious/philosophical or political beliefs, trade union membership or sex life, we will only do this with your explicit consent; or, to protect your vital interests or those of someone else; and/or, where you have clearly publicised such data; and/or, where we need to use such data in connection with a legal claim.
9. Your data rights
Under data protection law, you have a legal right to request information about the personal data that we hold about you, what we use that personal data for and who it may be disclosed to, as well as certain other information (called a “subject access request “). Usually, we will have one month to respond to such a subject access request, although in the case of complex requests, we may require a further two months to respond. We may also charge for administrative time in dealing with any manifestly unreasonable or excessive requests for access. We may also ask for further information to locate the specific information you seek before we can respond in full and may apply certain legal exemptions to some of the information we disclose when responding to a subject access request.
You also have the following rights, which are exercisable by making a request to us in writing:
10. Contact or Complaints
If you would like to exercise any of the above rights or if you have any concerns about how we use your personal data, please contact us via telephone on 07542 801 873 or by e-mail at [email protected].
When you make any request, you may be required to provide us with appropriate evidence so that we can verify your identity before we can respond.
If you make a request and are not satisfied with our response or believe that we are illegally processing your personal data, you have the right to complain to the UK Information Commissioner’s Office (ICO) – see: https://ico.org.uk/concerns/