Introduction
 
This policy explains how David Lock Associates Ltd (DLA), as ‘data controller’ holds and processes any personal data, we collect from you, or which you provide to us.
 
DLA is committed to taking the security of personal data seriously and to act transparently at all times and to provide you with accessible information on how we use your data. DLA has a commitment to protecting the rights and freedoms of data subjects; safely and securely managing and protecting their data in accordance with all our legal obligations.
 
Our privacy and cookie policy set out the type of personal information that we may collect about you; and how it is collected and used. It describes how we seek to protect the privacy of that data.  It describes your rights in relation to that data and how to contact us regarding that data, or to make a complaint.
 
If you have any queries or questions or concerns regarding any aspect of this policy, then please contact the Data Management Officer on mail@davidlock.com. 
 
Information That We Collect
 
We may collect the following information for business purposes:
 

• name and job title;

• contact information including email address, home or work telephone number and address;

• demographic information such as postcode, preferences and interests; and

• your communication preferences.

 
This will be collected through direct contact from you by filling in any online form, or corresponding with us by post, phone, email or otherwise.
 
You may request details of personal information which we hold about you.  If you would like a copy of the information held on you, please contact us at mail@davidlock.com.  If you believe that any information we are holding on you is incorrect or incomplete, please email us or write to us at David Lock Associates Ltd., 50 North Thirteenth Street, Milton Keynes, MK9 3BP. For the attention of the Data Management Officer, as soon as possible. We will promptly correct or erase any information found to be incorrect.
 
What We Do With The Information We Gather
 
The basis upon which information is given or collected will be either for legitimate interest (develop our products/services; inform any marketing strategy we undertake; data analysis relevant to your reason for contacting us) or to perform a contract with you.
 
We may also collect this information for:
 

• internal record keeping;

• to improve our products and services;

• to notify you of any changes to our website, such as improvements or product/service changes that may affect our service;

• to notify you of information about products or services similar in nature to those that were subject to previous customer or service relationships with you; 

• to contact you, from time to time, for market research purposes;

• to customise the website according to the generic interest of our customers and service relationships.

 
We also use analytical and statistical tools that monitor details of your visits to our website and the resources that you access, including but not limited to, traffic data, location data, weblogs and other communication data (but this data will not identify you personally).
 
Our website is hosted by Wix https://www.wix.com/ and we will be using their analytic tools. We use these products to understand how the website is being used to improve the user experience.  User data is all anonymous.  The types of data collected includes: IP address, browser-generated information e.g. browser type, operating system, date and time of access, how long a person looks at a website, what they look at etc.  
 
Wix Cookies
Wix Privacy and GDPR Policy
 
Should you not wish your information to be used to receive further information then you may opt out at any time most easily by emailing the Data Management Officer on mail@davidlock.com.
 
Third Parties
 
We do not sell or rent any personally identifiable information about you to any third party.
 
In some circumstances it may be necessary to share your information with any sub-contractors who are involved in the provision of services to meet our contractual obligations to you. 
 
It may also be necessary to share your information if we are under a regulatory or legal obligation to do so. 
 
We may disclose your information outside of David Lock Associates should we sell or buy any business or assets, in which case information may be disclosed to prospective sellers of buyers of such business or assets.   However, any such transfer will be on the basis that the confidentiality of your data is protected in accordance with this privacy policy.
 
International Transfers
 
As part of the services offered to you, for example through our website, the information you provide to us may be transferred to and stored in countries outside of the European Economic Area (EEA) as we use remote website server hosts to provide the website and some aspects of our service, which may be based outside of the EEA, or use servers based outside of the EEA – this is generally the nature of data stored in “the Cloud”.  It may also be processed by staff operating outside the EEA who work for one of our suppliers, e.g. our website server host, or work for us when temporarily outside of the EEA.
 
A transfer of your personal data may happen if any of our servers are located in a country outside of the EEA or one of our service providers is located in a country outside of the EEA.  If we transfer or store your personal data outside the EEA in this way, we will take steps with the aim of ensuring that your privacy rights continue to be protected, as outlined in this Privacy Policy and in accordance with the GDPR.  If you use our service while you are outside the EEA, your personal data may be transferred outside the EEA in order to provide you with these services.
 
We do not use or disclose sensitive personal data, such as race, religion or political affiliations without your explicit consent.
 
Security
 
We are committed to ensuring that your information is secure.  To prevent unauthorised access or disclosure, we have put in place physical, electronic and managerial procedures to safeguard and secure the information we hold.  We cannot guarantee the security of your data while you are transmitting it to our site but will seek to prevent unauthorised access once we have received your data.
 
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
 
In relation to Email tracking: Some emails that we send you have no tracking in at all, e.g. service emails with invoices attached. Other emails include tracking so that we can tell how much traffic those emails send to our site, but we do not know who has clicked so the data is anonymous, e.g. information downloaded from our site. For some emails we can track, at an individual level, whether the user has opened and clicked on links in the email. We rarely use the latter information at a personal level, rather we use it to understand open and click rates on our emails to try to improve them. Sometimes we do use the personal information, e.g. to re-email people who didn’t click the first time. If you want to be sure that none of your email activity is tracked, then you should opt out of DLA emails which you can do by emailing “UNSUBSCRIBE” to mail@davidlock.com.
 
Data Retention
 
We store your data for no longer than necessary in relation to the purpose under which such data was collected. This is determined on a case by case basis and depends on things such as the nature of the data provided, why it was collected, the legal basis we rely upon to process the data, and for the purposes of satisfying any legal and financial auditing or reporting where required.