Dales Pay

DalesPay Ltd takes data privacy seriously. This Privacy Policy explains who we are, how we collect, share and use Personal Information, and how you can exercise your privacy rights.

We are DalesPay Ltd with the company number 13440806 and registered address at 17 Olav Road, Richmond, DL10 4PU.

DalesPay Ltd respects your privacy and are committed to protecting your personal data. This Privacy Policy will inform you as to how we use your personal data. This Privacy Policy aims to give you information on how DalesPay Ltd collects and processes your personal data, including any data you may provide through this website when you register with us online through this website or when you request or download and complete a registration form.

We recommend that you read this Privacy Policy in full to ensure you are fully informed.

Controller

DalesPay Ltd is the controller and responsible for your personal data (referred to as “we”, “us” or “our” in this Privacy Policy).

The Information We Collect

You may provide certain Personal Information to us when you sign up to DalesPay Ltd and use our services, consult with our customer service team, send us an email, integrate the service with another website or service or communicate with us in any other way.

“Personal data” is defined as information that relates to an identifiable person who can be directly or indirectly identified from that information, for example, a person’s name, identification number, location, online identifier. It can also include pseudonymised data.

We may collect and process the following data about you:

• Technical data: includes IP address, browser type and version, time zone setting and location, operating system and platform and other technology on the devices you use to access this website.
• Professional data: includes job title, institution company.
• Usage data: include details of your visits to our website, web server statistics, traffic data, location data and details of the web pages and resources that you access. Marketing and communications data: includes your preferences in receiving marketing from us and our third parties and your communication preference.
• Identity data: includes first name, last name, username.
• Contact data: includes email address and telephone numbers.
• Any information you choose to provide to us when completing any ‘free text’ boxes in our forms.

We collect, use and share Aggregated Data for any purpose. This is statistical data about our users’ browsing actions and patterns and does not directly or indirectly identify any individual and as such is not considered personal data in law.

How do we collect your personal data?

There are a number of different ways that we use in order to collect data from and about you. The main forms include direct interaction, which you may provide us with your identity and contact data by filling in forms through this website or by corresponding with us via post, email or telephone. This will include personal data you provide when you:

• Request more information about our services
• Request marketing to be sent to you
• Give us feedback
• Sign up for our services

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

How we use your personal information?

“Data processing” is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

We can only use your personal information to send you marketing messages if we have either your consent (which we will ask for via an opt-in or soft opt-in) or a legitimate interest. A legitimate interest is when we have a business or commercial reason to use your information taking into consideration your interests. A soft opt-in is a specific type of consent that applies when we have previously provided services to you and we are marketing other related services.

We may use your personal information to tell you about relevant products and services that we think may be of interest to you. We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

We will get your express opt-in consent before we share your personal data with any company or individual for marketing purposes.

You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not apply to communications between us necessary to carry out any services required by you or any other important notice in relation to our service offering and changes to your existing services.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

Who We Share Your Personal Data With?

There may be occasions when we may share your personal data with the third parties, for the reasons set out below:

• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

How Long Will You Use My Personal Data For?

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Retention of Data

We retain Personal Information where we have an ongoing legitimate business or legal need to do so. Our retention periods will vary depending on the type of data involved, but, generally, we'll refer to these criteria in order to determine retention period:

• Whether we have a legal or contractual need to retain the data.
• Whether the data is necessary to provide our Service.
• Whether our Members would reasonably expect that we would retain the data until they remove it.

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or de-identify it or, if this is not possible, then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

Your Data Protection Rights

Depending on the country in which you reside, you may have the following data protection rights:
- To access, correct, update, port, delete, restrict or object to our processing of your Personal Information.
- You have the right to complain to a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may ask you to verify your identity in order to help us respond efficiently to your request.

Your Legal Rights

As an individual, you automatically have rights under data protection laws in relation to your personal information. Some of these rights include:

Access to your personal information

You are entitled to make a data subject access request to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of personal information

This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal information

This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. However, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data

Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing your personal data

This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request transfer of your personal data

We will provide to you, or a third party you have chosen, your personal data in a commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Right to withdraw consent

As an individual you have the right to withdraw our consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent. You have a right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

Please note that you will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances

Third Party Links

We may use the Personal Information we collect or receive through the service, as a processor and as otherwise stated in this Privacy policy, to enable your use of the integrations and plugins you choose to connect to.

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, you should read the Privacy Policy of every website you visit.

Cookies and Tracking Technologies

We and our third-party partners may use various technologies to collect and store Service Usage Data when you use our service, and this may include using cookies and similar tracking technologies.

Our Security

We take appropriate and reasonable technical and organisational measures designed to protect Personal Information from loss, misuse, unauthorised access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the Personal Information involved.

How to contact us

If you have any questions about our Privacy Policy or the information we hold about you, please contact us at info@dalespay.co.uk or write to Customer Care at DalesPay Ltd, 17 Olav Road, Richmond, DL10 4PU.