PRIVACY NOTICE
PRIVACY NOTICE
Third Generation Business Services Limited is an accountancy, management and advisory company working with all businesses including not for profit organisations.
Third Generation Business Services Limited is a company registered in England and Wales with Registered Number 07746681. Our Registered Office is at The Old Rectory, 8 Main Street, Leicester, United Kingdom LE3 8DG
Third Generation Business Services website is managed by GoDaddy.
This Privacy Notice provides information about how Third Generation Business Services Limited (‘we’, ‘us’, ‘our’) process your personal data and it provides information about your privacy rights.
What types of information do we collect from you?
Personal data In this Privacy Notice, the term “personal data”, means information relating to you that allows us to identify you either directly, or in combination with other information we hold. For instance, when you contact us by email, telephone or via our website, we will collect your personal data including your name, postal address, telephone number and date of birth (where relevant).
Special categories of personal data
The UK GDPR defines special categories of personal data as information about a person's race and ethnicity, religious or philosophical beliefs, trade union memberships, political opinions, genetic data, biometric and health data, and information concerning a natural person's sex life or sexual orientation. Third Generation Business Services Limited does not collect special categories of personal data.
How do we collect information from you?
Third Generation Business Services Limited collects information about you when you visit our website and engage in any of the following activities:
(1) search and browse for content;
(2) subscribe to publications and reports;
(3) register for online services;
(4) join a mailing list;
(5) participate in bulletin boards, discussion or message forums;
(6) submit data for a survey or quiz;
(7) register for events and seminars;
(8) submit resumes or work history information;
(9) contact us for further information;
(10) visit our website while logged into a social media platform; or Some pages on this website may permit you to send emails or other messages to us.
Emails and messages sent to us will contain your name and email address, as well as any information you may wish to include in the message. So that you are fully aware of how and why we are using your data, it is important that you read this Privacy Notice and any other privacy notices that we may provide on specific occasions when we are collecting or processing your personal data. For instance, when you provide us with your business card or other contact information.
How we use your personal data?
We may use the information you provide to us for any of the purposes described in this Privacy Notice or as stated at the point of collection (or as obvious from the context of collection), including:
(a) to administer and manage this website, including to confirm and authenticate your identity and prevent unauthorised access;
(b) to personalise and enrich your browsing experience by displaying content that is more likely to be relevant and of interest to you;
(c) to sort and analyse user data (such as determining how many users from the same organisation have subscribed to or are using this website or Third Generation Business Services Limited services);
(d) to determine the company, organisation, institution, or agency that you work for or with which you are otherwise associated;
(e) to develop our business and services;
(f) to conduct benchmarking and data analysis including, for example, regarding usage of this website and demographics analyses of their users;
(g) to conduct quality and risk management reviews;
(h) to understand how people use the features and functions of this website in order to improve the user experience;
(i) to monitor and enforce compliance with our business terms, including acceptable use policies, and legal and other regulatory obligations to which Third Generation Business Services Limited is subject; and/or any other purposes for which you provided the information to Third Generation Business Services Limited, including any of the purposes given in the ‘Purpose of this privacy notice’ section above.
We do not share or sell your personal information to third parties for marketing purposes. The only time we may disclose your personal data to a third-party is when we are legally required to do so, or we are required to do so by our regulators.
What lawful bases do we use to process your information?
The lawful bases for processing personal data are set out in Article 6 of the UK GDPR. At least one of these must apply whenever personal data is to be processed:
(a) Consent: you have given your consent for Third Generation Business Services Limited to process your personal data for a specific purpose.
(b) Performance of a contract: the processing is necessary for the performance of a contract that you have with Third Generation Business Services Limited.
(c) Compliance with legal obligation: the processing by Third Generation Business Services Limited is necessary to comply with the law (e.g. the tax/social security obligation/employment law) (not including contractual obligations).
(d) Vital interests: the processing is in yours, or someone else’s vital interests.
(e) Public interest: the processing is necessary to enable Third Generation Business Services Limited to perform a task in the public interest or an official function, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary in your legitimate interests or the legitimate interests of Third Generation Business Services Limited, or those of a third-party, unless the need to protect your personal data overrides those legitimate interests.
With whom do we share your personal data?
Third Generation Business Services Limited may disclose your information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply any agreements, or to protect the rights, property, or safety of the organisation, or other individuals. Such disclosures include, but are not limited to, exchanging information with other companies and organisations for the purposes of safeguarding or other statutory regulations that Third Generation Business Services Limited has to comply with as well as those organisations with whom you and Third Generation Business Services Limited has reciprocal agreements for providing services i.e. education, professional development etc.
How long will we hold your personal data?
Third Generation Business Services Limited will retain your personal data in a live environment for as long as necessary to fulfil the purpose(s) for which it was collected (including as required by applicable law or regulation, typically 7+ years).
We may keep your data for longer to establish, exercise, or defend our legal rights and yours. Where such a need exists, your personal data will be securely archived with restricted access and appropriate safeguards applied to ensure the security and confidentiality of your information.
Third Generation Business Services Limited is required to keep details of financial transactions for seven years to meet accountancy and HMRC requirements. We will anonymise or delete personal data if, after a period of seven years, we have not had any contact or communication from you (this will be measured on a rolling seven-year period).
We maintain a data retention criterion to help implement our record retention and disposal (RR&D) requirements. Our RR&D Schedule takes account of our legal and accounting obligations, balancing this with what would be consider to reasonable. We may anonymise your personal data (so that you can no longer be identified) for historical research and analysis without further notice to you.
Security of your personal data
Third Generation Business Services Limited respects the privacy of individuals and is committed to protecting your personal data. Accordingly, in accordance with the Data Protection Act 2018 and UK GDPR, we have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include having clear internal policies and procedures and maintaining the physical security to our premises.
Your personal data will not be sold or disclosed (other than as specified under this Privacy Notice) to another company or organisation. Additionally, we put in place appropriate IT security technologies and procedures to prevent the unauthorised access, damage, and loss of your data and our access controls ensure the confidentiality of the data we process.
Please note that the transmission of information via the Internet is not completely secure, and while we do our best to protect your personal data, we cannot guarantee the security of any data sent to our site; such transmissions are at your own risk.
Locations of Processing
The data we collect from you is processed on our servers located in the UK. We will ensure that your personal data is provided with adequate protection if it becomes necessary to transfer your personal data to a country that has not been granted a finding of adequacy by the European Commission (EC). Transfers of personal data outside of the European Economic Area (EEA), to a country that has not been granted a finding of adequacy by the EC, will be carried out using ‘appropriate safeguards’ i.e. Binding Corporate Rules (BCR), Standard Contract Clauses (SCC) (also known as Model Contract Clauses) or in accordance with approved Codes of Conduct. Alternatively, we will seek your consent, on a case-by -case basis, where appropriate to do so.
Links to other websites
Should our website contain links to other websites, the processing of personal data through those websites is not covered by this Privacy Notice, and we encourage you to review the privacy notices / privacy policies on the third-party website to discover more about how they process your information.
What are my data subject rights?
We support your data subject rights under the Data Protection Act 2018 and the UK GDPR, in relation to our processing of your information, including your:
(1) right to be informed (chiefly via this Privacy Notice)
(2) right of access
(3) right to rectification
(4) right to erasure
(5) right to restrict processing
(6) right to data portability
(7) right to object
(8) rights related to automated decision-making including profiling.
You can exercise these rights at any time, including your right to request a copy of the information we hold about you (otherwise referred to as a Subject Access Request (SAR), or by contacting us using any of the methods shown below in the ‘How do I contact you?’ section.
We will respond to your request as quickly as possible: usually, this will be within one month of receiving your request.
Updating my information
You may choose to correct, update, or delete your personal data by contacting us using any of the methods shown below in the ‘Make an enquiry/Contact us’ section. If you have opted-in to receiving communications form us, your preferences will remain in effect until you tell us that you want to opt-out of receiving any further communications. You can change your mind at any time by clicking the link on the communications we send you or by contacting using any of the methods shown below in the ‘Make an enquiry/Contact us’ section. If you choose to unsubscribe from any or all mailings, we may retain information sufficient to identify you so that we can honour your request.
Withdrawing my consent
Where we process your information based on your consent, you may withdraw your consent at any time. You can do this by contacting us using any of the methods shown below in the ‘Make an enquiry/Contact us’ section.
Making a complaint to us
We hope you’ll never have need to do so, but if you do want to complain about our use of your information or our facilitation of your data subject rights, you can contact us using any of the methods shown below in the ‘Make an enquiry/Contact us’ section. Our Data Protection Officer will investigate your complaint and provide you with an appropriate response as quickly as possible.
Making a complaint to the Information Commissioner
You can, of course, lodge a complaint with the Information Commissioner at any time. For instance, if you are unhappy with the way in which we are processing your information, or we have failed to facilitate your data subject rights.
The Information Commissioner can be contacted as follows:
By Post: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
By phone: 0844 496 4636 (local rate)
How do I contact you?
You may contact us using any of the following methods:
By Post: Data Protection Officer
Third Generation Business Services Limited
The Old Rectory
8 Main Street
Leicester
LE3 8DG By email: Tgbs@thirdgenerationbusinessservices.uk
Changes to this Privacy Notice
We continuously review the content of our Privacy Notice to ensure that its content accurately reflects what we are doing with your information.
This Privacy Notice was last updated in April 2022.
Coming events
From 1 June 2022- September 2022, we are offering businesses and not for profit (charities) health check-up appointments. Call us on 0800 468 1237 or email us to book an appointment.