Unthinkable Data Policy
This notice explains how and why we collect and manage personal data, what your data protection rights are and how you can exercise them. One of our responsibilities is to ensure that the personal data we hold about you is accurate and current. Please keep us informed at hello@unthinkabledigital.co.uk if your personal data changes during your relationship with us.
Owner and Data Controller
'Unthinkable' refers to Unthinkable Consulting of:
Devonshire House
582 Honeypot Lane
Stanmore
Middlesex
HA7 1JS
Owner contact email: hello@unthinkabledigital.co.uk
Types of Data we collect
We collect and process a range of personal data, that is, information about an identifiable individual. We only collect data that is necessary to provide you with services requested, to keep you informed and to carry out our business. There are occasions where you can limit the information you provide to us, but please bear in mind this may limit the service or level of personalisation we can offer. Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Cookies; Usage Data; email address.
Information we collect directly from you
We collect certain information directly from you. This may be via our website (for example data that you provide by filling in a contact form on our website, subscribing to our newsletter, including data provided at the time of requesting information) or when you make a request or query, whether by email, via our websites or on the telephone. You may also provide personal data to us when engaging with us as a client or through surveys, interviews or research conducted on behalf of a client.
Examples of the types of personal data we may collect from you during a specific project are as follows:
Contact details (for example, name, telephone number, email)
Demographic information (for example, date of birth or nationality)
Information relating to other members of your organisation or work, including your clients or customers
Your preferences, interests and previous activities related to a specific project or subject matter
Your views, opinions, questions and comments
Records of your correspondence with us
Data entered on survey form such as a Google Form
Information we collect from third parties about you
Some of the information we hold about you may be provided to us via third-party sources, for example reviews or comments on social media such as Twitter.
We recommend that you check the privacy policy/notice and statements of any third parties that you provide information to, as we are not responsible for the way in which they use, share or make available your personal data.
Information collected by us automatically about you
As you interact with our website, we may automatically collect analytics data about your equipment, browsing actions and patterns, to provide you with the best experience and help you to make use of certain functionality. We collect this data by using cookies, server logs and other similar technologies. Please see our cookie policy https://unthinkabledigital.co.uk/cookie-policy. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our websites may become inaccessible or not function properly.
Why we use your personal data
The law requires us to ensure we have a lawful basis for processing your personal data. We only use your personal data when we believe it is lawful to do so.
Sometimes, we may ask you to consent to our collection and use of your personal data for certain purposes. Where this is the case, you can change your mind and withdraw your consent at any time by emailing us at hello@unthinkabledigital.co.uk
Otherwise we process your personal data usually because it is necessary for one of the following lawful reasons:
The performance of a contract that you enter in to with us
Our legitimate interests or those of a third party
Compliance with a legal obligation
For your vital interests
How we use your personal data
We use your personal data for:
Providing and delivering our services, goods or information you have requested from us
Conducting research for our clients
Gathering feedback
Developing recommendations and managing projects
Fulfilling and responding to requests from you, or made on your behalf
Managing the security of Unthinkable’s website
Analysing, tailoring, developing or improving our offer
Communications with you including newsletters, marketing and promotional messages or surveys providing information
For our internal operational and management purposes including record keeping, recruitment and management
Ensuring that content from our websites is presented to you in the most effective manner for you and for your computer
Research and audit purposes
Do you have to provide personal data?
If we need to collect personal data by law, or under the terms of a contract we have with you, and you choose not to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to return a message). In this case, we may be unable to process this communication – but we will notify you if this is the case at the time.
Online recording
From time to time we may record user sessions or interviews to gather information about a project or conduct research for a project you may have asked us to do. You will be notified before if this information will be recorded. By joining a recorded session you are giving your consent to be recorded.
Data security and retention
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those agents, contractors and other third parties who have a business need to know.
They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We regularly review and update our procedures to deal with any suspected personal data breaches. In the event of any suspected personal data breach we will notify the individuals affected and the applicable data protection regulators, where legally required to do so.
International data transfers
Personal data may be transferred outside of the UK to other third-party service providers incidentally in the course of our activities. We will take steps to ensure that adequate protection is provided for information transferred overseas as required under data protection legislation.
Retention time
We aim to keep personal data only for as long as is necessary to fulfil the purposes for which the data was collected.
By law we have to keep certain basic information about our clients and their transactions with us for specified periods of time. If you would like further information on this please email hello@unthinkabledigital.co.uk.
Opting out of communications
You can ask us to stop sending you newsletters and messages at any time by:
- Following the opt out (unsubscribe) link on any newsletter sent to you
- Contacting us at any time at hello@unthinkabledigital.co.uk
We will implement your request as promptly as possible, but it can take up to 28 days to remove you from our mailing list, so you may still receive communications during this time.
Your data protection rights
You have a number of legal rights in relation to your personal data. You have the right to:
- Request access to your personal data (commonly known as a 'data subject access request'). This enables you to receive a copy of the personal data we hold about you and to check that we are processing it lawfully.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which, if applicable, will be shared with you at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation that makes you want to object to processing on this ground, as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information that you initially provided consent for us to use, or where we used the information to perform a contract with you.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time of your request.
These don't apply in all circumstances, as there are also legal exemptions which may apply, depending on why we have collected the data, and the legal basis on which we are holding the data. We will be happy to explain if you have questions about this.
You can contact us at hello@unthinkabledigital.co.uk if you wish to:
- Make a formal request for information we hold about you
- Make changes to the data we hold about you
- Opt out of being contacted for marketing purposes (you can also opt out of our marketing messages by using the unsubscribe link that appears on each of them)
- Request us to erase the data we hold about you
- Ask questions or raise concerns about this privacy notice
Details about the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification.
How to exercise these rights
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.
Contact
Data Protection requests and enquiries:
Please email hello@unthinkabledigital.co.uk with any data protection requests or enquiries, including requests to exercise your data protection rights (such as access, erasure or objection to processing).
Complaints:
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK Data Protection Authority (www.ico.org.uk). We would appreciate the chance to deal with your concerns before you approach the ICO so please contact hello@unthinkabledigital.co.uk first.
Changes to this privacy policy
This privacy notice was last updated on 25 September 2023.
The Owner reserves the right to make changes to this privacy notice at any time by notifying its Users on this page and possibly within this Website and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Please check this page occasionally to ensure that you’re happy with any changes, referring to the date of the last modification.
Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.