Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

● Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions which means you may not receive all the information you ask for.

● Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete.

● Your right to erasure - You have the right to ask me to delete your personal information.

● Your right to restriction of processing - You have the right to ask me to limit how I can use your personal information.

● Your right to object to processing - You have the right to object to the processing of your personal data.

● Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you.

● Your right to withdraw consent -When I use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, I must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.

My lawful bases for the collection and use of your data

My lawful bases for collecting or using personal information to provide and improve products and services for clients are:

● Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

● Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

● Legitimate interests – I'm collecting or using your information because it benefits you, my company or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

My legitimate interests are:

• I collect and use personal information to provide and improve my products and services in a way that benefits both my clients and my business. My legitimate interest lies in ensuring efficient service delivery, personalised support, and a seamless client experience. For example, I may collect contact details and service history to communicate effectively, tailor My services to individual client needs, and maintain accurate records for ongoing tasks. This approach benefits my clients by allowing me to respond promptly, ensure quality service, and continuously improve based on their feedback and needs. The collection and use of this information pose minimal risk because I only collect what is necessary, handle data securely, and respect client preferences, including their right to opt-out or control how their information is used. My legitimate interest does not unfairly prioritise my needs over our clients’ privacy. I carefully consider the balance between my business interests and the privacy of the people whose information I collect, and I ensure that I do not use personal data in a way that could cause undue harm or inconvenience.

My lawful bases for collecting or using personal information for the operation of client or customer accounts are:

● Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

● Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

My lawful bases for collecting or using personal information for information updates or marketing purposes are:

● Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

● Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

● Legitimate interests – I'm collecting or using your information because it benefits you, my organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

My legitimate interests are:

• I collect and use personal information for information updates and marketing purposes to keep my clients informed about relevant services, industry updates, and opportunities that may benefit them. my legitimate interest is to maintain engagement with clients and provide them with valuable insights and offers that improve their experience and allow them to make informed decisions. This benefits my clients by ensuring they stay updated on the services we offer, new developments, and relevant industry trends, which can enhance their experience and success. I strive to send only useful and targeted information, reducing the likelihood of unwanted or irrelevant communication. The potential risks or impact on individuals are minimal because I ensure that clients have the ability to control their marketing preferences, and I respect their right to opt-out of receiving further updates at any time. I collect only the necessary information to provide personalised and meaningful content, balancing my business need for engagement with my clients' right to privacy and control over their data.

My lawful bases for collecting or using personal information for research or archiving purposes:

● Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

● Legitimate interests – I'm collecting or using your information because it benefits you, my organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

My legitimate interests are:

• I collect and use personal information for research and archiving purposes to enhance the quality of my services, improve client satisfaction, and guide future business decisions. My legitimate interest is to analyse past interactions, client preferences, and service performance to better understand my clients' needs and refine the services I offer. This benefits both my business and my clients by helping me identify trends, anticipate client needs, and make informed improvements. By archiving relevant data, I can maintain continuity in my client relationships, streamline future projects, and ensure I have accurate records to support the efficient operation of my business. The risk or impact on individuals is minimal because I ensure that all archived information is securely stored and used solely for legitimate business purposes. I do not collect excessive information, and I respect the privacy of my clients by handling their data in a way that minimises any potential harm or inconvenience.

My lawful bases for collecting or using personal information to comply with legal requirements:

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

My lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

● Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

● Legitimate interests – I'm collecting or using your information because it benefits you, my organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

My legitimate interests are:

• I collect and use personal information to handle queries, complaints, and claims in order to provide efficient, responsive, and satisfactory customer service. My legitimate interest is to ensure that issues raised by my clients are addressed promptly and accurately, which helps maintain trust, improve the quality of my services, and protect my business reputation. This benefits my clients by ensuring their concerns are addressed in a fair and efficient manner, leading to better outcomes and higher satisfaction. For example, collecting service history and Communication records help me investigate and resolve complaints quickly and accurately. It also allows me to identify and correct any issues in our processes, leading to continuous service improvement. The potential risks or impact on individuals are minimal because I handle personal information securely, limit data collection to what is necessary for resolving the issue, and respect client confidentiality. I balance my business needs with the privacy of the individuals involved, ensuring that their data is used only for the purpose of resolving their query, complaint, or claim, and not for any unrelated purpose.

My lawful bases for collecting or using personal information to To tailor services according to client preferences are:

● Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

● Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

● Legal obligation – I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.