Privacy Notice

This privacy policy sets out how we collect, process and use the personal data of our users, contributors, customers, and website visitors in connection with our products and services. Treating personal data with respect, keeping it secure and processing it in accordance with the law is of the utmost importance to Gentian.

Our websites, products and services are not intended for children, and we do not knowingly collect data relating to children.

Controller

Gentian Limited is the controller and responsible for your personal data, collectively referred to as “Gentian”, “we", "us" or "our" in this privacy policy.

We might need to change this privacy policy from time to time. We will publish any updated privacy policy on our website and if possible, we will update you directly if we think the changes are likely to affect you.

The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data includes [first name, last name, any previous names, username or similar identifier, marital status, title, date of birth and gender].
Contact Data includes [billing address, delivery address, email address and telephone numbers].
Financial Data includes [bank account and payment card details].
Transaction Data includes [details about payments to and from you and other details of products and services you have purchased from us].
Technical Data includes [internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website].
Profile Data includes [your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses].
Usage Data includes [information about how you interact with and use our website, products and services].
Marketing and Communications Data includes [your preferences in receiving marketing from us and our third parties and your communication preferences].

We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

How is your personal data collected?

We use different methods to collect data from and about you including through:

Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by post, email or otherwise. This includes personal data you provide when you:

apply for our products or services.
create an account on our website.
subscribe to our service or publications.
request marketing to be sent to you.
give us feedback or contact us.

Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies[, server logs] and other similar technologies.[We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy [LINK] for further details.

Website Visitors.

What personal data do we process

Cookie preferences, marketing and communications preferences, IP addresses, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices used to access websites or services or products,

You can control the use of cookies using the cookie management tool banner presented when you first visit our site and at the browser level by setting your web browser controls to accept or refuse cookies. If you choose to block all cookies, you may not be able to access all or parts of our website. In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information on this, please visit the websites: http://www.aboutads.info/choices/ or http://www.youronlinechoices.com or http://globalprivacycontrol.org.

Potential customers

What personal data do we process

Name, job title, email address, telephone number, firm name, business address, social media account details, networking activities, identification as firm director, shareholder, stakeholder and professional adviser, and other information from profiles, reports, articles and blogs, marketing and communications preferences, work history, qualifications, gender.

Processing applicable to all categories of data subject

Marketing.

Direct marketing

During the registration process on our website when your personal data is collected, you will be asked to indicate your preferences for receiving direct marketing communications from Gentian via Email, SMS, Post, Telephone OR You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving the marketing.

We may also analyse your Identity, Contact, Technical, Usage and Profile Data to form a view which products, services and offers may be of interest to you so that we can then send you relevant marketing communications.

Third-party marketing

We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.

Opting out of marketing

You can ask to stop sending you marketing communications at any time logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences OR by following the opt-out links within any marketing communication sent to you or by contacting us at info@gentian.team.

If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes for example relating to order confirmations for a product, updates to our Terms and Conditions, checking that your contact details are correct.

We do not transfer your personal data outside of the UK, however this may change in the near future. In this case, Gentian will update the privacy policy, to which the consumer is liable to check for any changes.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Data retention.

Save to the extent expressly provided in the foregoing provisions of this privacy policy, we will only retain your personal data for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we believe there is a reasonable prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

By law we must keep basic information about our customers (including contact, identity, financial and transaction data) for six years after they cease being customers for tax purposes.

In some circumstances you can ask us to delete your data: see ‘Your rights’ below for further information.

In some circumstances we will anonymise your personal data (so that it can no longer be used to identify you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Your rights.

If we hold data about you, you have certain rights under applicable data protection laws.

In the UK and the EU, this includes the:

a) Right to be informed:you have a right to ask us what personal data we collect and what we use it for.
b) Right of access:you have a right to request a copy of any personal data that we hold about you. We will respond to your request within 60 days. Though we may need to verify the accuracy of the new data you provide to us.
c) Right of rectification:you have a right to require us to correct any personal data held about you which is inaccurate or incomplete. We will rectify any errors you highlight to us within 60 days. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
d) Right to restrict processing:you have a right to request us to restrict the processing carried out in respect of personal data relating to you. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
e) Right of data portability:you have a right in certain circumstances to request that the personal data held by us about you transferred to another organisation.
f) Right to object:you have a right to object where processing is carried out in certain circumstances, including where we rely upon legitimate interests for such processing. You may always object to us processing your personal data for direct marketing purposes; and
g) Right to object to automated decision making and profiling:you have a right not to be subject to a decision based solely on automated processing which produces legal or similar significant effects on you.

Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time, which you can do by contacting us at info@gentian.team.

In certain situations, we may be able to rely on one of the exemptions under the applicable data protection laws. These exemptions may mean we have a right to refuse requests for disclosure of information, erasure requests and rectification requests, as well as exempt us from some notification obligations.

We will confirm to you in writing to acknowledge receipt of any request we receive relating to your rights as a data subject, and we will let you know if we have complied with your request within the applicable timeframe. If having, carried out an assessment, we believe that we are indeed able to rely on one of the exemptions, we will let you know why we have reached that conclusion.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Privacy signals.

Some internet browsers incorporate a “Do Not Track” feature or other similar features that signal to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, our website does not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.

Accessibility.

We are committed to ensuring this privacy policy is accessible to individuals with disabilities. If you wish to access this privacy policy in an alternate format or would like to report an issue you are experiencing on our website, please email us at admin@gentian.team.

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.