Data Protection Policy
Data Protection Policy

Introduction

This is the privacy notice for https://wecanaccess.com  (the “website”).

We Can Access is an independent research company and we abide by the rules and Code of Conduct of The Market Research Society.

The website is the “controller” of personal data which is collected from you when you visit and use this Website for the purposes of the General Data Protection Regulation (GDPR).

Privacy is very important to us and we have created this privacy notice to tell you what personal data we collect from you when you visit and use this website, or when communicate with us; including how we use your data, how we share it with others and how you can manage it. If you have any questions whatsoever about this privacy notice, then we would be glad to answer them. To contact us, please use the ‘Contact Us’ section of our website (https://wecanaccess.com/contact-us/).

Please read this privacy notice before you start using our Website, as it will apply to your use of the website. By using the website, you confirm that you accept the terms of this privacy notice.

You should also read this privacy notice if you have entered into communications with us, as it applies to any personal data that we collect from you during our communications.

This privacy notice may change from time to time, so please periodically review this page to ensure that you are still content with its terms and to continue to share your personal data with us.

This version the privacy notice is live from 1st September 2019.

What is “personal data”?

Under the GDPR, “personal data” is defined as:

any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

As a result, “personal data” includes, amongst many other things, your name, address, phone number, email address and any other information that could be used to identify you, either by itself, or together with other information

What personal data of mine will We Can Access collect when I use this Website?

By using this website we may collect personal data that you provide to us by completing forms on this website or as a result of a specific request from us. I will vary depending on where you are in the site but

We may collect personal data that you provide to us when you communicate with us for any reason. Once again, it is will vary depending upon which area of the site you use or the nature of the correspondence,  but we will collect all of the information that is contained within your communication and, as this is within your control, you will be able to identify what this is.

Why does We Can Access collect and use my personal data?

There are a number of ways that we may use your personal data. These are set out below:

 

Consent

We will only use your personal data because you have consented to us doing so, and we will only contact you for occasional  market research activities, if you have requested we contact you, or if you have undertaken any activity that is breach of our terms and conditions or gives us any cause for serious concern.

Whenever you have provided consent, we will use your personal data only for the purpose that we specify to you when you provide consent. In any event, you will always have the option of withdrawing your consent at any time. In order to do so, please contact us via the ‘Contact Us’ page on our Website. Please note that our actions are guided by your consent, so if, for instance, we are using your email address in the context of your participation in market research activities, if you withdraw your consent, then you will no longer be able to participate in market research activities organised through us.

 

Legitimate Interest

We may use your personal data as set out below, where we have a legitimate interest, which will be in the context of:

  1. Responding to correspondence that you send to us from time to time and

fulfilling any requests that you make of us from time to time (including things

such as general business enquiries or enforcing your rights (as set out below));

  1. Analysing, evaluating and improving the services that we offer and services offered by various institutions, travel and leisure providers.
  2. Undertaking research and analysis on our services (for instance, by customer

surveys), so that we can better understand our business and your needs; Undertaking research and analysis on services provided by various institutions, travel and leisure providers.

  1. Engaging with you in the course of our business, for instance, as an actual or

potential client, supplier or partner, in the absence of a contractual relationship

or obligation;

  1. Contacting you with relevant marketing information after we have provided a

particular service to you;

  1. Contacting you from time to time for business development purposes if we have

obtained your contact details because you have engaged us in the past or have

registered with us;

  1. Informing you of updates to our terms and conditions and policies; and
  2. Protecting ourselves, our website and our IT systems against damage.

In any event, you always have the right to object against us using your personal data for legitimate interests. In order to do so, please contact us via the ‘Contact Us’ page on our Website. In the event that you object to the use of your personal data as above, we will consider this request and will communicate our decision with you. While in certain circumstances we may refuse to stop using your personal data, we will explain this to you and you will always have the right to complain about our decision. In any event, we will always stop using your personal data for marketing where you object against us using your personal data for this reason.

 

Contractual performance

We may use your personal data in order to perform a contract with you, for instance, to provide services to you as a client.

 

Legal obligation

We may use your personal data in order to comply legal requirements that apply to us as a company (for instance, towards HM Revenue & Customs).

 

Who do you share my personal data with?

We would never share your personal data with third parties for their own business or

, without it being required as part of a contractual obligation between us or without us being subject to a legal obligation to do so. Please note that we do not routinely share your personal data with 3rd parties, however, there may be occasions arising where certain of your personal data may be shared with our clients so that you can be considered for participation in market research activities and actually participate in such activities. We also use third party service providers in the course of our business for, amongst other things, web hosting, web security, web analytics, data storage, data back-up services and email services. Due to the nature of these service providers, which often operate in the “cloud”, your personal data may be used or stored outside of the EU. Whenever we transfer your personal data outside of the EU, it will only ever be to a country that has been deemed by the European Commission to provide an adequate level of data protection or, otherwise, using standard data protection clauses. Should you have any queries in relation to international transfers, please contact us via the ‘Contact Us’ page on our Website and we would be glad to confirm whether a transfer has been made on the basis of a European Commission decision or standard data protection clauses and, in the latter case, provide a copy of such clauses.

We take steps to ensure that any relevant third parties who handle your personal data comply with relevant data protection laws.

 

How long will you keep my personal data for?

We will not hold your personal data in an identifiable format for longer than is reasonably necessary to fulfil the purposes for which we collected it and to comply with our legal obligations. However where we collect and use your personal data based on your consent, we will keep your data until you withdraw this consent, unless we have a legal or contractual obligation to keep it for longer.

 

How can I manage my personal data?

At any point while we are in possession of or using your personal data, you have the

following rights:

  1. Right of access – you have the right to request a copy of personal data that we

hold about you;

  1. Right of rectification – you have a right to correct the personal data that we hold

about you that is inaccurate or incomplete;

  1. Right to be forgotten – in certain circumstances, you can ask for the personal

data that we hold about you to be erased from our records;

  1. Right to restriction of processing – in certain circumstances, you have a right to

restrict our use of your personal data;

  1. Right of portability – in certain circumstances, you have the right to have the

personal data we hold about you transferred to another organisation;

  1. Right to object – you have the right to object to certain ways that we use your

personal data, such as direct marketing; and

  1. Right to object to automated processing, including profiling – you have the right

not to be subject to a decision based solely on automated processing, including

profiling.

Reasonable identification will be required from you if you exercise any of your rights above.

In order to exercise any of your rights, please contact us via the ‘Contact Us’ page on our Website.

Please note that you have the right to lodge a complaint at any time about us and the

manner in which we collect and use your personal data with any supervisory authority of the EU member state in which (a) you work, (b) you live or (c) an alleged infringement has taken place. The supervisory authority in the UK is the Information Commissioner’s Office, the contact details of which are set out below:

Post: Information Commissioner’s Office, Wycliffe House, Water Lane,

Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Email: casework@ico.org.uk