This policy (and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read the following carefully to understand how your personal data will be processed.
Gilchrist Standard acts in the capacity of the data controller and data processor and will treat all your personal information as private and confidential, in accordance with the Data Protection Act 2018 and subsequent legislation.
Our contact details for data protection purposes are:
Gilchrist Standard, 22 Mount Ephraim, Tunbridge Wells, TN4 8AS
Information we collect:
1: Website visitors
The law about cookies changed in May 2011. Websites must get your agreement before they set certain types of cookie on your computer or handheld device.
2: Email newsletter sign-ups
Gilchrist Standard invites newsletter signups in person, via email, via websites, or via our blog. Those submitting their personal details (name, job title, phone number, email address) will be added to a CRM database (provided by Capsule) and sent periodic emails (via MailChimp) regarding regulatory and relevant professional topics. Open rates and interactions with emails are recorded for analytical purposes.
Gilchrist Standard records details (name, job title, phone number, email address) of clients and those working for clients, on a central CRM database (Capsule CRM), along with details of any correspondence between the client and Gilchrist Standard.
Gilchrist Standard maintains a record of prospect organisations. Where affirmative opt-in consent has been obtained, Gilchrist Standard also maintains a record (on Capsule CRM) of individuals (name, job title, phone number, email address) working at prospect organisations, including any correspondence between the prospect organisation and Gilchrist Standard.
Why does Gilchrist Standard collect this information?
Gilchrist Standard collects the above information for the following purposes:
- To continually monitor and improve the performance of Gilchrist Standard websites
- To manage and service email newsletter lists. Gilchrist Standard will monitor email engagement and maintain a permission-based database. Data will be retained for a minimum of seven years.
- To service client accounts and fulfil client contracts, including maintaining a record of correspondence. In line with professional practices, details of correspondence will be recorded for a minimum of seven years.
- To manage the dialogue between Gilchrist Standard and prospect accounts. Gilchrist Standard will seek to continually refresh consent with prospects wherever possible.
- To manage our platforms and individual accounts, to record platform usage, and continually develop the functionality of our assessment solutions. Data will be retained for a minimum of seven years.
Gilchrist Standard practices a policy of data minimisation. We will only record essential data and will minimise and securely dispose of any data, which is no longer required.
In the interests of security and to improve our service, telephone calls may be monitored and/or recorded.
Lawful basis and consent
For data subjects who have a contract with Gilchrist Standard or are taking steps to enter into a contract, our lawful basis for processing individuals’ data is:
6(1)(b) – Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
Gilchrist Standard takes no responsibility for our client's HR policy statements. Personal data for clients’ employees supplied to Gilchrist Standard shall be processed under the above lawful basis. Gilchrist Standard will rely upon consent to process the personal information for any individual with whom we do not have a contractual obligation.
For past / lapsed clients, our lawful basis is:
6(1)(f) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Gilchrist Standard also operates permission-based marketing databases. Our lawful basis for this data is:
6(1)(a) - The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
What will Gilchrist Standard do with personal data:
Gilchrist Standard may use information held about you to (i) provide you with information about other similar products and services which we can provide and which we feel may be appropriate to you, by email, telephone, post or other means. You will be asked to provide consent to each separate communication method when submitting your personal data. (ii) Gilchrist Standard may transfer your personal data to other Gilchrist Standard Group companies and external companies directly connected to the fulfilment of Gilchrist Standard products and services, to provide you with other similar products and services; (iii) the following third parties acting on our behalf, including:
- Delivery partners
- Capsule CRM
Gilchrist Standard will not directly transfer any data that we hold about you outside of the European Economic Area member countries which apply the same level of protection to data held there as in the United Kingdom.
Where Gilchrist Standard does use third parties outside of the EU to process data relating to EU citizens, it will ensure that suitable contracts, policies, procedures and recognised data protection standards or codes of conduct are in place to protect personal data.
Your individual rights
Should you not wish us to use or process your data in this way, we may not be able to arrange or administer your contract[s] with Gilchrist Standard or process data as necessary for the performance of a contract in order to meet our contractual obligations to you.
Email is not a completely secure means of transmission of data or documents, so by providing your email address to us, you are giving your informed consent to us using this method to contact you and to send you your documents. If you would prefer us not to use this method of contact, please contact us.
Provision of personal data is obligatory for us to meet contractual obligations to you and will be held until you request it is removed.
At contract renewal, we shall assume the personal data we hold about you is correct. If this is not the case and the data has changed in any way, please let us know.
You have the following rights: request access to data relating to you, the rectification or erasure of data held about you (subject to other conditions), the right to request copies of your data held by us and the right to object to our use of your data.
If you believe that any information we are holding about you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect. You also have the right to complain to the Supervisory Authority, this is the Information Commissions Office (ICO) (www.ico.org.uk) about our data processing activities.
You may exercise your right to give notice to stop data being processed for any purpose by contacting us at any time. In the first instance, please email helpdesk@GilchristStandard.com. To unsubscribe from emails, please use the unsubscribe link at the bottom of each email.
Except as set out in this document, we will not otherwise disclose any information to any other parties without your written consent, unless we are legally obliged to do so.