Orion Heritage Limited is committed to protecting the privacy of our clients, suppliers, clients and users of our website. Orion Heritage Limited, in common with other businesses, collects and manages client and non-client data as part of the day to day running of our business. We are committed to protecting your personal data and this policy sets out how we collect and process that. Please read the following carefully to understand your rights under the General Data Protection Regulations (GDPR) to understand your rights and our practices regarding your personal data.
Orion Heritage Ltd acts as a “data controller” and will ensure that the information you submit to us via our website or through any other means is only used of the purposes set out in this privacy notice.
What data is being collected?
Examples of the “personal data” we handle for the above purposes are your name, home address, email address, telephone and other contact numbers as well as some financial/bank information to allow us to collect or make payments.
We collect this in a number of different ways. For example, you may provide this data to us directly online or over the telephone, or when corresponding with us by email or letter.
We do not process sensitive classes of information.
Cookies
When visiting our website, cookies may be used to collect information to collect standard internet log and visitor behaviour information as well as to check and improve performance and content of our website. See our Cookies Policy for more information.
Orion Heritage Limited uses certain third parties (for example, providers of customer support and IT services) to help us provide, improve, protect and promote our services. These third parties will only access your information to perform tasks on our behalf in compliance with this Privacy Policy, and we will remain responsible for their handling of your information in accordance with our instructions.
We have set out below:
- What we use the personal data for
- Our legal basis for processing the data
- Sharing of personal data with third-party organisations
We use some personal data to administer our relationship with you, provide and advise on services. The lawful basis for this is to comply with the requirements of a contract. We may share this data with our IT advisors in relation to the functionality of databases when appropriate.
We may use personal data to respond to enquiries. The lawful basis for this is to comply with the requirements of a contract or where appropriate to act/advise before entering into a contract. We may share this data with sub-contractors where appropriate (such as archaeological excavation units, specialist researchers or consultants e.g. relating to asbestos) for the purposes of undertaking the contractual works in line with preferences.
We may use personal data to administer our billing and payment processes. The lawful basis of this is to comply with the requirements of a contract and legitimate interest. We may share this data with Government VAT and tax inspectors, external auditors, internal auditors.
We may use personal data to enable business development e.g. updates, newsletters and invitations to events/networking opportunities which are relevant to your interests and preferences. We will seek consent from individuals before sending them the information and to ensure it is in line with their preferences.
We may use personal data to process and respond to complaints or to comply with a legal obligation.
We may use personal data to monitor and record information relating to the use of our services and our website. The lawful basis of this is compliance with a legitimate interest in order to improve our services generally and website content and functionality. We may share this data with web service providers and cookie providers.
We may capture photographs and videos to be used for marketing and promotional material for the firm, including our website, brochures, bids and tenders. We will seek explicit consent prior to collecting and using this information.
We may use personal data to conduct human resource administration and to fulfil contractual obligations which includes steps prior to entering into a contract. This data may be shared with our recruitment agents, lawyers, accountants and HMRC where appropriate.
Under the terms of data protection legislation, you have the following rights:
Right to Be Informed
This privacy notice.
Right to Access
You have the right to ask us for a copy of any personal data that we hold about you. You can obtain this information at no cost and we will send you a copy of the information within 30 days of your request unless there are grounds for an extension of time. To make your request, please contact us at the address below*
Right to Rectification
If any personal data we hold is inaccurate and you would like us to rectify it please contact us at the address below*
Right to Be Forgotten
You can request that we erase all personal information that we hold about you. Where it is appropriate that we comply, your request will be actioned within 30 days unless there are grounds for an extension of time. Please contact us at the address below
Right to Restrict Processing
You may wish us to restrict the use of your data because:
- You think it is inaccurate (we will restrict usage until the data is verified);
- You believe our data processing is unlawful, but you do not want your data erased and would prefer restriction;
- You want us to retain your data in order to establish, exercise or defend a legal claim.
Right to Data Portability
If you would like to move, copy or transfer the electronic personal data that we hold about you to another organisation, please contact us*.
Right to Object
You may object to us processing personal data. If this is in relation to direct marketing, we will stop. If it is in relation to other grounds we will stop processing the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or the processing is for the establishment, exercise or defence of legal claims.
Rights Related to Automated Decision-Making
Orion Heritage Limited does not undertake this
*To exercise any of these rights please contact Jane Bourn at Orion Heritage Ltd, Platf9rm, Floor 5 & 6 Tower Point, 44 North Road, Brighton, BN1 1YR or email dataprotection@orionheritage.co.uk
Period of Retention of Information
Orion Heritage will retain information for a period of up to 12 years. This is due to the requirements of our clients in relation to land transactions and to ensure we comply with insurance requirements.
If you have any queries you may contact our Practice Manager/Data Protection Manager, Jane Bourn, at Orion Heritage Limited, Head Office, Platf9rm, Floor 5 & 6 Tower Point, 44 North Road, Brighton, BN1 1YR. Alternatively, you have the right to lodge a complaint with the Information Commissioner’s Office who may be contacted at Wycliffe House, Water Lane, Wilmslow SK9 5AF or https://ico.org.uk.
Changes
If we change our Privacy Policy, we will post the changes on this page. If we decide to, we may also email you.