Sunset Cocktails Ltd wants everyone who supports us, uses our services or enters into contracts with us to feel confident in how personal information will be looked after or used.
This statement sets out how we collect, use and store personal data.
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller's possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the 'GDPR').
Sunset Cocktails Ltd is the data controller (contact details below) for the purposes of the EU General Data Protection Regulation 2016/679 ("Data Protection Law"). This means that we are responsible for, and control the processing of, your personal information. We are committed to protecting your personal data and will ensure that is is processed in a fair, open and transparent manner.
HOW DO WE PROCESS YOUR PERSONAL DATA?
Sunset Cocktails Ltd wants to make sure you receive the communications that are most relevant to you, be it through visiting our website or receiving emails, post or phone calls.
Sunset Cocktails Ltd complies with its obligations under the "GDPR" by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We collect personal data for the following purposes:
to administer staff records
to maintain our financial accounts and records
to provide news and information about events, activities and the services and products we provide
to promote the interests of Sunset Cocktails Ltd
to manage relevant individuals
to enable Sunset Cocktails Ltd to provide the services and products we offer
for any other reasonable reason in connection with Sunset Cocktails Ltd
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
As a limited company we process personal data that has a legal basis, for example:
to fulfil a contract with you
to meet a legal obligation
with consent of the data subject
to protect any person's 'vital interests'
meet government or judicial functions
in order to carry out our obligations under employment, social security or social protection law, or
with explicit consent of the data subject
to a third party with explicit consent
We will only contact you about our work by phone, email or text if you have agreed for us to contact you in this manner.
You can update your choices or stop us sending these communications by clicking unsubscribe at the bottom of the relevant communication.
SHARING PERSONAL DATA
Your personal date will be treated as strictly confidential and will only be shared with staff and suppliers when relevant to do so. We will only share your data with third parties with your consent or if required to do so by law.
HOW LONG DO WE KEEP DATA?
We only keep data as long as is reasonable and necessary for the relevant activity, which may be to fulfil statutory obligations, see below for examples:
Insurance Records - Indefinitely
Safeguarding Records - Indefinitely or until advised otherwise by our Local Safeguarding Authority
Accident Books - 3 years from the date of the last entry (or, if the accident involves a child/young adult, then until that person reaches the age of 21)
Complaints - 3 years after resolution of complaint (unless further action is anticipated)
Financial Records - 7 years or as required by law
Employee Personnel Records - 3 years after the date of termination of employment
Client & Supplier Electronic Communication - 3 years after cessation of contract
Website and Social Media Data - 3 years after cessation of contact where practical to do so
YOUR RIGHTS AND YOUR PERSONAL DATA
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of the personal data which Sunset Cocktails Ltd holds about you (a Subject Access Request or 'SAR')
The right to request that Sunset Cocktails Ltd corrects any personal data if it is found to be inaccurate or out of date
The right to request your personal data is erased where it is no longer necessary to retain such data
The right to withdraw your consent to the processing at any time
The right to request that the data controller provide you with your personal data and where possible, to transmit that data directly to another data controller.
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing
The right to object to the processing of personal data
The right to lodge a complaint with the Information Commissioners Office
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
To exercise all relevant rights, queries or complaints, please in the first instance contact us via the form on the contact us page on our website.
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.