Privacy Policy

Geek Tech Essex Limited (Geek Tech) is committed to the privacy of your data. We want you to know that we value your privacy and Personal Data just as much as you do. We apply the highest standards to ensure your Personal Data is secure, and we comply with the General Data Protection Regulations (“the GDPR”).During your engagements with us, we will have a contractual and legal obligation to collect, process, and disclose certain Personal Data. Geek Tech is a Data Controller registered with the Information Commissioner’s Office, Registration No. 13814100.

In this Privacy Policy (the “Policy”), we not only want to advise you of your rights, but also explain how we respect them. Any Personal Data you provide to us is subject to the terms of this Policy. This Policy and our collection, processing, use or disclosure of Personal Data shall be governed by and construed in accordance with English law.

Personal Data is any information relating to you from which:

Some of personal data may include sensitive information about you, which we call “special category data”. Such data is given the highest level of protection by us. It is impossible to foresee precisely what types of Personal Data might be obtained about each individual and are not generally obliged to keep records of such Personal Data, save as required by law or regulations.

Categories of data we use, what they can include, and the period for which we retain that data (from the date of the last relevant activity):

Basis
When you become a client, you enter into a contract with us to provide certain services to you. This contract includes our right to conduct background checks and to maintain records. It is necessary for us to process certain Personal Data about you in order to provide those services to you, including to maintain our accounts and records, to support and manage our staff, our customer services, and for the purposes of administration.

Type of Data
Due Diligence and background checks and ongoing monitoring. We process the data that you provide to us and data that we may find from time to time in open source in order to satisfy ourselves of Anti-Money Laundering, Modern Slavery and Bribery Act compliance.

When Data is Processed
We may collect and process this data during the tender process, at the contract stage of negotiations and routinely throughout the duration of the contract. We may also process data when we verify your identity, personal and company details, when you contact us, request services, report a problem, or wish to make a complaint.

Your Rights
You have the right to ask us to erase such Personal Data collected pursuant to our contract with you, and we will delete any such Data (other than data we are required to retain in accordance with law enforcement or regulatory requirements. In relation to this Data, you also have the right to data access and data portability.

Basis
When we contract with you, we may ask your express permission to contact you in relation to some of our additional services, events, general updates about the services or other marketing materials (“Marketing Communications”). You do not have to give your consent, and we will not contact you with Marketing Communications unless you do so.

Type of Data
Marketing

When Data is Processed
We may collect and process this data if you give us your express permission to do so or you ask us to update your marketing preferences.

Your Rights
You are entitled to qualify, vary or withdraw your consent in relation to Marketing whenever you want to. You also have the right to ask us to erase such Personal Data collected with your consent. In relation to Data obtained in this way, you also have the right to data access and data portability.

Basis
We process specific data in order to protect the legitimate interests of Geek Tech and our employees. Our legitimate interests include securing our offices, counter-fraud measures and investigations, conducting and managing our business, the maintenance of records, such as financial details obtained throughout the duration of the contract period.

Screening for criminality; Finance & Due Diligence.

When Data is Processed
This Data is used to ensure compliance throughout the contract period.

Your Rights
You are entitled to object to some of this processing, but your image and voice data may be processed when and if you meet with us at our offices. Any Personal Data will be deleted after the expiry of the retention period, provided it is not being actively used in any ongoing investigations.

We normally store your data within the UK, but some of the Data we collect about you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”), but only where this is necessary. Where this occurs, we have processes in place to ensure compliance with both, this Policy and the GDPR, whilst ensuring that there are adequate contractual agreements in place with those third parties to ensure that the appropriate safeguards are in place to protect your personal data.

Where you exercise your rights to Data Access under the GDPR to request a copy of your Personal Data held by us, we will supply you with all the Personal Data to which you are entitled, promptly and normally no later than one month after the receipt of your Data Subject Access Request. In rare cases, where the requests are complex or contain multiple requests, the period of compliance may be extended by a further two months, but we will write to you and explain why any extension is required within one month of your request. Any access request is normally free, although in some cases we may charge a reasonable fee based purely on our administrative costs when a request is clearly unfounded, is made excessively, or is made repetitively.

You may also have the right to Data Portability which allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. If you wish to exercise this right, we will transmit such data to you in a machine-readable code where it is technically feasible to do so.

From time to time, we will need to update, change or supplement this Policy, including by altering the types of Personal Data that may be collected, processed or shared. If this happens, we will update this Policy on our website, in our literature, and we will contact you (normally by email) to inform you of any updates before such changes come into effect. In the event that Geek Tech, or substantially all of its assets are acquired by a third party, Personal Data held by us may be one of the transferred assets.

If you wish to exercise any of your GDPR rights, if you have any questions, complaints, or comments regarding this Policy, please contact us:by email to: The Data Protection Officer (DPO) at Support@geektech.Co.uk.

To further query your rights regarding your Personal Data, to lodge a complaint, raise a concern about how your complaint has been handled and / or appeal against any decision made following your complaint, in accordance with your rights, you may contact the Information Commissioner’s Office (ICO): https://ico.org.uk/