Privacy Policy
(July 22, 2022 – John W Grant & Son Group Limited)
John W Grant & Son Group Limited collects data from visitors throughout the website experience. This is principally to provide interactive functionality that would otherwise be impossible without collecting the minimum amount of data. Some data is also used to analyse your experience anonymously to improve the website experience.
John W Grant & Son Group Limited respects your privacy so we will not sell your data to third parties, allow any access to the data that isn’t necessary to honour any other contracts we have in place, or store excessive amounts of data we no longer need.
John W Grant & Son Group Limited will comply with the General Data Protection Regulation (GDPR) (EU May 25th, 2018).
Definitions
Data Subject – any living person.
Third-Party – another company that John W Grant & Son Group Limited works to provide services to the Data Subject.
Personally Identifiable Information – data belonging to the Data Subject that can be used to uniquely identify them.
Data Controller – any organisation that stores Personally Identifiable Information, E.g., John W Grant & Son Group Limited.
Data Processor – any organisation that works on (processes) Personally Identifiable Information.
How we obtain your data
John W Grant & Son Group Limited collects data from the Data Subject during the usage of this website. Some of that data may be Personally Identifiable Information. This may be entered into web forms or provided to the website by the browser (such as IP address).
John W Grant & Son Group Limited may also obtain Personally Identifiable Information about the Data Subject from a Third Party as part of a contract to work with that data.
How we use your data
John W Grant & Son Group Limited primarily uses data from the Data Subject either to serve a contract between John W Grant & Son Group Limited and the Data Subject or to provide necessary functionality on this website.
John W Grant & Son Group Limited may also collect additional data to satisfy other legal requirements, such as is required for e-commerce. Data submitted by users via our open day ad campaigns will be collated and added to our email marketing list.
Third Parties which have access to the data collected
John W Grant & Son Group Limited works with several Third Parties to provide the service the Data Subject receives.
In all cases, there is either an explicit contract in place between John W Grant & Son Group Limited and the Third Party, Terms and Conditions, or another legally binding relationship.
The data will likely be shared with:
‘In order to process your application, we will supply your personal information to credit reference agencies (CRAs) and they will give us information about you, such as your financial history. We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace, and recover debts, and prevent criminal activity. We will also continue to exchange information about you with CRAs on an ongoing basis, including your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organisations. The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at Credit Reference Agency Information Notice (CRAIN) | Experian “
CRAIN (Credit Reference Agency Information Notice) is a document produced by the three Credit Reference Agencies- Experian, Equifax, and TransUnion (formerly Callcredit)- that explains the use of personal data they receive from third parties about individuals and/or their businesses in relation to credit activity. CRAIN has been produced in conjunction with the Information Commissioner’s Office (ICO).
The data will likely be shared with:
Alphabet Inc (Google) – a suite of Google Tools is used by John W Grant & Son Group Limited.
******** – website host/provider.
The data may be shared with:
******* – accounting tool used for tracking and invoicing customers.
The data is also rarely shared with the following:
N/A.
Marketing
John W Grant & Son Group Limited does not share your data with any Third Parties for marketing purposes unless the Data Subject has explicitly opted in.
Third-Party Cookies
John W Grant & Son Group Limited can largely operate without the use of third-party cookies. John W Grant & Son Group Limited will not add social sharing buttons to the page unless the Data Subject has explicitly opted into social cookies.
John W Grant & Son Group Limited will not include any tracking systems unless the Data Subject has explicitly opted into tracking cookies.
John W Grant & Son Group Limited will allow Google Analytics to operate on this website to provide necessary anonymous analytical data. This may result in a small amount of Personally Identifiable Information being collected but this is only used as statistics and not for identification purposes.
Data Security and Storage
John W Grant & Son Group Limited will store data only if necessary to fulfill the purpose for which it was obtained. Some data may be held for longer if it is either held on other systems that have not been updated, in backup data that has not expired, or because of another lawful basis.
John W Grant & Son Group Limited takes security seriously and makes use of technology where feasible to secure data and protect against breaches.
Personal data protection principles
We adhere to the principles relating to the processing of Personal Data set out in the GDPR (as follows) which require Personal Data to be:
(a) processed lawfully, fairly, and in a transparent manner (Lawfulness, Fairness, and Transparency)
(b) collected only for specified, explicit, and legitimate purposes (Purpose Limitation)
(c) adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed (Data Minimisation)
(d) accurate and where necessary kept up to date (Accuracy)
(e) not kept in a form that permits identification of Data Subjects for longer than is necessary for the purposes for which the data is processed (Storage Limitation)
(f) processed in a manner that ensures its security using appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction, or damage (Security, Integrity, and Confidentiality)
(g) not transferred to another country without appropriate safeguards being in place (Transfer Limitation)
(h) made available to Data Subjects and Data Subjects allowed to exercise certain rights in relation to their Personal Data (Data Subject's Rights and Requests).
Data Subject's rights and requests
Data Subjects have rights when it comes to how John W Grant & Son Group Limited handles their Personal Data. These include rights to:
- withdraw consent to the processing at any time
- receive certain information about the Data Controller's Processing activities
- request access to their personal data that we hold
- prevent our use of their personal data for direct marketing purposes
- ask us to erase personal data if it is no longer necessary in relation to the purposes for which it was collected or processed or to rectify inaccurate data or to complete incomplete data
- restrict processing in specific circumstances
- challenge processing which has been justified based on our legitimate interests or in the public interest
- object to decisions based solely on automated processing, including profiling (ADM)
- prevent processing that is likely to cause damage or distress to the Data Subject or anyone else
- be notified of a personal data breach which is likely to result in a high risk to their rights and freedoms
- make a complaint to the supervisory authority
- receive or ask for their personal data to be transferred to a third party in a structured, commonly used, and machine-readable format.
Updates to our Privacy Notice
This Privacy Notice will be reviewed regularly, and this page will be updated with changes.
Contacting the Data Protection Officer (DPO)
If you have any concerns about how Personally Identifiable Information is used by John W Grant & Son Group Limited, please contact the Data Protection Officer:
Seanna McLellan
John W Grant & Son Group Limited Ltd, Head Office, 66 Love Street, Paisley, PA3 2EH seanna@jwgrant.co.uk
Update Your Marketing Preferences
How this information is used
- Your data will not be shared with third parties
- You will only be contacted via the channels you have opted in to
- Your data will only be stored for these purposes
