Privacy policy 2024
SOS-HR Limited are committed to safeguarding the privacy of our website visitors; this policy sets out how we will treat and take care of your personal information.
1.What information do we collect?
We may collect, store and use the following kinds of personal data:
information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services
information that you provide to us for the purpose of registering with us (including name, company name, address, contact numbers, email address and website)
information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters (including name, company name, address, contact numbers, email address and website)
any other information that you choose to send to us
2. Using your personal data
Personal data submitted on this website will be used for the purposes specified in this privacy policy or in relevant parts of the website. We may use your personal information to:
administer the website
improve your browsing experience by personalising the website
enable your use of the services available on the website
send to you goods purchased via the website, and supply to you services purchased via the website
send statements and invoices to you, and collect payments from you
send you general (non-marketing) commercial communications which you have specifically agreed to receiving
send you email notifications which you have specifically requested
send to you our newsletter and other marketing communications relating to our business which you have specifically agreed to receiving, by email or similar technology (you can inform us at any time if you no longer require marketing communications)
deal with enquiries and complaints made by or about you relating to the website
3. Disclosures
With your express consent, we may be required to disclose information about you to any of our employees, officers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes as set out in this privacy policy.
In addition, we may disclose information about you:
to the extent that we are required to do so by law
in connection with any legal proceedings or prospective legal proceedings
in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
Except as provided in this privacy policy, we will not provide your information to third parties.
4. Security of your personal data
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We take a number of administrative and technical steps to ensure the security of the information you provide to us. We are Cyber Essentials certified and our cloud storage providers are ISO 27001, ISO 27017, ISO 27018, ISO 22301, SOC1, SOC2, SOC3, CSA STAR 2, certified.
Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
You are responsible for keeping your password and user details confidential. We will not ask you for your password.
5. Policy amendments
We may update this privacy policy from time-to-time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes.
We may also notify you of changes to our privacy policy by email.
6. Your rights under General Data Protection Regulation (GDPR)
You may instruct us to provide you with any personal information we hold about you via a Subject Access Request and this will be provided free of charge, without undue delay, or within 1 month at the latest, when your proof of identity has been confirmed. However, we reserve the right to apply a reasonable administration fee if the request is manifestly unfounded or excessive. If any of our information is incorrect, you have the right to request correction of these inaccuracies.
You may instruct us not to process your personal data for marketing purposes by email at any time and we will only process your personal data if you have expressly agreed in advance the use of your data for marketing purposes.
You will be provided with the opportunity to opt-out of the use of your personal data for marketing purposes at any time.
7. Data retention
We retain a record of your personal information in order to provide our services. This information is held in accordance with the General Data Protection Regulation (GDPR) and only for the necessary period. Unless required by law your data will be stored for a period of two years after our last contact with you, at which point it will be deleted.
8. Third party websites
The website contains links to other websites. We are not responsible for the privacy policies or practices of third-party websites.
9. Updating information
Please let us know if the personal information which we hold about you needs to be corrected or updated.
10. How to contact us
If you have any questions about this privacy policy or our treatment of your personal data, please write to us by:
Email to: info@sos-hr.co.uk
Post to: SOS-HR, Epsilon House, West Road,
Ransomes Europark, Ipswich, Suffolk, IP3
9FJ.
11. Data controller
The data controller responsible for our website is Shirley de Mouilpied, Director, SOS-HR Limited. Our data protection registration number with the Information Commissioners Office (ICO) is Z9799720
The ICO regulates data protection and privacy in the United Kingdom and you can contact them via https://ico.org.uk
12. Cyber Essentials Accreditation
SOS-HR complies with the requirements of the Cyber Essentials Scheme and the IASME Governance Standard. Certification ID: 0fd21c6c-08cb-4992-b647-a291135d01ea and 6c4020f1-d951-4dc7-b552-2b73b874177f
