Obtained Data Privacy Notice
Schappit Article 14 Privacy Notice
Our contact details
ICO – Registration Number ZA074234
Name: Schappit Ltd
Address: Schappit Ltd, Unit 26 Oak Business Centre, 79-93 Ratcliffe Rd, Sileby, Leicester, LE12 7PU
Phone Number: 01793 710500
E-mail: compliance@siliconpractice.co.uk
For all enquiries regarding data protection please address your correspondence to our Data Protection Officer (compliance@siliconpractice.co.uk).
Introduction
This Privacy Notice explains how Schappit Ltd (“we”, “us” or “our”) collects and processes personal data that has not been obtained directly from you, in accordance with the Data Protection Act 2018 and Article 14 of the UK General Data Protection Regulation (UK GDPR).
We are committed to protecting your privacy and ensuring that your personal data is processed fairly, lawfully and transparently.
The provision of privacy information is primarily the responsibility of data controllers. Patients of our customers should refer to the privacy notice on their Practice’s website. They may also find the information within our Data Protection Agreement which details how we comply with data protection requirements when delivering our services to Practices.
What types of information do we collect and process?
We collect and process professional business contact information, including:
- Organisation name
- Title
- First name
- Last name
- Job title
- Professional profile link (such as LinkedIn)
- Business email address
- Business telephone number
- Business address
We do not intentionally collect:
- Special category personal data
- Criminal offence data
- Personal financial information
- Personal health information
Where We Obtain Your Personal Data
We may obtain business contact information from reputable third-party and publicly available sources, including:
- Commercial business contact databases
- Publicly available professional sources such as LinkedIn
- NHS websites and publicly available NHS staff directories
- Public organisational websites
- Other publicly available professional sources
We only collect information that is relevant to your professional role and your organisation.
Why We Process Your Personal Data
We process your information for our legitimate business interests, including:
- Identifying appropriate professional contacts within organisations
- Informing organisations about products and services that may be relevant to them
- Developing business relationships
- Responding to business enquiries
- Maintaining accurate customer and prospect records
- Managing communications with organisations
- Complying with legal and regulatory obligations where applicable
We do not process your information for personal consumer marketing.
Our Lawful Basis
Our lawful basis for processing your personal data is:
Article 6 UK GDPR – Legitimate Interests
Our legitimate interests include:
- Promoting products and services relevant to organisations within the healthcare sector;
- Identifying appropriate decision-makers and professional contacts;
- Developing and maintaining commercial relationships;
- Supporting business development activities.
- Before relying on this lawful basis, we consider the impact on your rights and freedoms and ensure our processing is proportionate and limited to professional business information.
Who We Share Your Information With
We may share your personal data where necessary with:
- Employees authorised to carry out sales, marketing and customer relationship activities
- IT service providers
- Cloud hosting providers
- CRM providers
- Email communication providers
- Professional advisers, including legal and accountancy advisers
- Regulatory authorities where required by law
We require all service providers to keep your personal information secure and only process it in accordance with our instructions.
International Transfers
We do not transfer your personal data outside the United Kingdom or European Economic Area (EEA).
How Long We Keep Your Information
We retain business contact information only for as long as necessary to fulfil the purposes for which it was collected.
Business contact information is periodically reviewed and deleted where it is no longer accurate, required or where an individual has successfully exercised their right to object to processing.
Your Rights
Under data protection law, you have rights including:
Your right of access- You have the right to ask for copies of your personal information
Your right to rectification- You have the right to ask to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete
Your right to erasure- You have the right to ask us to erase your personal information in certain circumstances
Your right to restriction of processing- You have the right to ask us to restrict the processing of your information in certain circumstances
Your right to object to processing- You have the right to object to the processing of your personal data in certain circumstances
Your right to data portability- You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances. This covers data that is processed by automated means (paper documents are not included)
Your right to complain- Please see section below for details regarding how to raise concerns.
You are not required to pay any charge for exercising your rights. However, we can charge you a “reasonable fee” for the administrative costs of complying with your request if:
- it is manifestly unfounded or excessive; or
- you request further copies of your data following an initial request.
If you make a request, we have within one month to respond to you. If the request is complex or you have submitted a number of requests, we may inform you that we have extended this time period up to a maximum of a further two months.
If you wish to make a request, please contact us at:
Data Protection Officer
Address: Schappit Ltd, Unit 26, Oak Business Centre, 79-93 Ratcliffe Rd, Sileby, Leicester, LE12 7PU
Phone Number: 01793 710500
E-mail: compliance@siliconpractice.co.uk
Your Right to Object
As we process your personal data on the basis of legitimate interests, you have the right to object to this processing at any time.
If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
You may also object at any time to receiving direct marketing communications from us.
Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
How Soon Will You Receive This Notice?
As your personal data has not been obtained directly from you, we will provide this Privacy Notice:
- within one month of obtaining your personal data;
- at the time of our first communication with you; or
- before your information is disclosed to another recipient,
whichever occurs first, in accordance with Article 14 UK GDPR.
Keeping Your Information Secure
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to personal information is restricted to individuals who require it for legitimate business purposes.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in legal requirements or the way we process personal data.
The latest version will always be available on our website.
How to complain
If you have any concerns about how we have collected, used or handled your personal data, or about the way we have dealt with a request relating to your personal data, we encourage you to raise those concerns with us in the first instance by contacting compliance@siliconpractice.co.uk
We will investigate your concerns promptly, fairly and confidentially. Information relating to your complaint will only be shared with those who need it to investigate, respond to or resolve the matter, or where disclosure is required by law. While absolute confidentiality cannot be guaranteed, we will take reasonable steps to protect the privacy of everyone involved.
If you remain dissatisfied after we have responded, you have the right to complain to the Information Commissioner’s Office (ICO). Further information about making a complaint is available on the ICO’s website at www.ico.org.uk.
Review and monitoring
We regularly review and, where necessary, update this notice. As a minimum this notice is reviewed annually.
If we plan to use personal data for a new purpose, we will update our privacy information, communicate the changes to affected individuals and where necessary identify a new legal basis for processing before the new purpose is pursued.
v1.0