Privacy Policy

CITRINE ADVISORY LTD's Privacy Policy 

Introduction 

CITRINE ADVISORY LTD ("we", “us”) takes your privacy seriously.  This policy sets out how we use and protect your personal data when you visit our website.  As the data controller, we are responsible for your personal data.  

What is personal data?

Personal data is any information about a person which identifies them.  

What type of personal data do we collect?

We collect:  

• Identity information e.g. name, address and date of birth. 
• Contact information e.g. email address and telephone number. 
• Financial data e.g. your payment details.  
• Preference information e.g. marketing and advertising preferences. 

We do not collect sensitive data or data relating to children.  

How do we collect your personal data? 

We collect this data when you interact with us through or using our website and when you send us correspondence.  

How and why do we use your personal data? 

In accordance with data protection law, we can only use your personal data if we have a legal basis for doing so.  We use personal data for the following reasons: 

• So that we can interact with you and provide services and marketing to you. Our legal basis for doing so is our legitimate interests or those of a third party, and for the performance of any contract we have with you, or to take steps before entering into a contract with you.  
• To help us ensure that the website is operating effectively. Our legal basis for doing so is our legitimate interests or those of a third party. 
• To enable us to make and receive payments. Our legal basis for doing so is for the performance of any contract we have with you or to take steps before entering into a contract with you.  

Marketing  

We will send you promotional communications if you have: 

• requested information; or  
• purchased something from us.  

But we will not do this if you have opted out of receiving marketing.  You can opt out by following the opt out links within any promotional material sent to you.  If you opt out of receiving promotional communications, you will still receive essential communications relating to goods or services we are providing you.  

Do we share personal data? 

We only share personal data with third party service providers where necessary. We will get your express consent before we share your data with any third party. Where we share your personal data, we only do this where we are satisfied that the third party will take appropriate steps to protect your data and its use is limited to acting on our instructions.  We may need to share your personal data with legal and regulatory bodies if this is necessary for us to comply with the law or any applicable regulations.  

International transfers 

We do not transfer your personal data outside of the UK. 

Do we use third party links on our website?  

Yes, the website may include links to third party websites or content. We have no control over these, so you should read the privacy policy of any third party site you visit.  

Is the personal data secure?  

We take the security of your data seriously and have put in place appropriate measures to protect it.  We limit access to your personal data to only those employees, agents, contractors and other third parties who need to know for business purposes, and they are subject to robust confidentiality obligations.  

How long is the personal data kept for?  

We only keep your personal data for as long as reasonably necessary to fulfil the purposes for which it was collected.  We will keep the majority of your personal data for so long as you use any of our goods. services or the website, or until you withdraw your consent (where this is our legal basis for processing).  We will only keep information about orders and payments for longer than this. We will keep this data for a period of 6 years after our relationship with you has ended. 

Your legal rights 

You have the following rights:  

• The right to be provided with a copy of your personal data that we hold. 
• The right to ask us to correct any personal data we hold about you. 
• The right to ask us to delete your personal data in certain circumstances. 
• The right to request that we restrict the processing of your personal data in certain circumstances. 
• The right to request that we transfer your personal data to yourself or a third party in certain circumstances. 
• The right to withdraw your consent to processing where this is the legal basis relied upon by us.  
• The right to object to the processing of your personal data for direct marketing purposes.  
• The right to object to the processing of your personal data in certain circumstances where we are relying on a legitimate interest. 

For more information on these rights, you can visit the Information Commissioner's Office website  - www.ico.org.uk 

How can you exercise your rights?  

If you wish to exercise any of these rights, please contact us. You will not have to pay a fee to exercise your rights, but we may need to request additional information from you before we can act.  

Usually, we will respond to legitimate requests to exercise these rights within one month; however, this can take longer if the request is complex. If we think it will take longer, we will let you know. 

Keeping us up to date 

You must let us know if any personal data we hold about you is incorrect or out of date.  

Changes to this policy 

This policy gets reviewed and updated regularly. Please make sure you check this page each time you visit the website.  

Contact us 

Should you have any questions about this policy or wish to exercise any of your data rights, please contact us at erin@citrineadvisory.co.uk. 

Complaints  

We would appreciate you contacting us to allow us to attempt to resolve any complaints. However, you have the right to make a complaint to the Information Commissioner's Office at any time by visiting the complaints page - www.ico.org.uk/make-a-complaint