What personal data does Gray Creative collect?
The information on clients, that we routinely collect, includes clients names, addresses, email addresses and telephone numbers (includes phone calls, text messaging, Instagram Profiles linked to our Gray Creative Instagram Page and ‘Whatsapp’ messaging). We collect this contact data directly from our clients when they engage with us, and it is updated as and when clients inform us of any changes. On occasion, we may also take your photograph at a club event for use on our website or social media pages.
What is this Contact Data used for?
We use this data for the administration of your project, the communication of information, the organisation of events and publicity post event (e.g. pictures on our website or Instagram page)
Who is your data shared with?
None of your data will be sold to any other organization or shared with other 3rd parties.
How is your contact data stored?
This data is stored in an Excel spreadsheet that is password protected under the responsibility of Andy Gray. Any information that is stored remotely is stored in compliance with the General Data Protection Regulation (GDPR).
Who is responsible for ensuring compliance with the relevant laws and regulations?
Under the GDPR we do not have a statutory requirement to have a Data Protection Officer. The person who is responsible for ensuring that Gray Creative discharges its obligations under the GDPR is Andy Gray.
Who has access to your data?
Employees of Gray Creative have access to clients’ data in order for them to carry out their legitimate tasks for the company.
What is the legal basis for collecting this data?
Gray Creative collects personal data that is necessary for the purposes of its legitimate interests as a company.
How you can check what data we have about you?
If you want to see the basic client data we hold about you, you should contact the Andy Gray.
You can contact us with a “Subject Access Request” if you want to ask us to provide you with any other information we hold about you. If you are interested in any particular aspects, specifying them will help us to provide you with what you need quickly and efficiently. We are required to provide this to you within 20 business days (i.e. 1 calendar month).
Does Gray Creative collect any “special” data?
The GDPR refers to sensitive personal data as “special categories of personal data”. We do not record any such special data.
How can you ask for data to be removed, limited or corrected?
There are various ways in which you can limit how your data is used.
• You may choose to maintain your relationship with Gray Creative with your correct name but with limited contact details. However, we do need to have at least one method of contacting you.
• You may choose not to receive information emails from Gray Creative (we do not send any out on behalf of other organisations).
Any of these options can be implemented for you by contacting Andy Gray.
How long do we keep your data, and why?
We keep this information for as long as you remain a client and for a period of 1 year after our initial contact unless you instruct us otherwise. We will keep your data for 1 year to contact you regarding provide a design or project management service for you.
Other data, such as that relating to accounting or personnel matters, is kept for the legally required period.