Privacy Notice.
Introduction
This document refers to personal data, which is defined as information concerning any living person (a natural person who hereafter will be called the Data Subject).
The General Data Protection Regulation (GDPR) seeks to protect and enhance the rights of data subjects. These rights include safeguarding personal data, protection against the unlawful processing of personal data, and ensuring the unrestricted movement of personal data within the EU and UK. GDPR does not apply to information already available in the public domain.
Personal Data
Ideaworks collects information from you to provide quotations, manage communication, and fulfill contractual obligations during the course of contracted works.
The Ideaworks website uses cookies, which are small text files stored on a visitor’s computer and returned to the website on subsequent visits. These cookies help identify and track visitors. You can refuse cookies by adjusting your browser settings before using the Ideaworks website.
Legal Basis for Processing Personal Data
We process personal data:
To meet our contractual obligations to clients
To respond to potential client enquiries
To comply with legal obligations
Where necessary for legitimate business interests (such as maintaining client relationships), provided these do not override your rights and freedoms.
Consent
By agreeing to this Privacy Notice, you consent to Ideaworks processing your personal data for the purposes described. You can withdraw your consent at any time by emailing dataprotection@ideaworks.co.uk or writing to us. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to your withdrawal.
Disclosure
Ideaworks may occasionally pass your personal information to third-party service providers strictly to carry out work on our behalf. These providers are required to process your data under our instructions and in full compliance with GDPR.
We do not sell or broker your personal data. However, we may disclose information when required to meet legal obligations, regulations, or valid governmental requests.
Retention Policy
Ideaworks retains personal data for the duration of any active contract. After a contract ends, we keep only the data necessary to meet legal and regulatory requirements for up to five years. After this period, personal data that is no longer needed will be securely deleted.
Data Storage
All personal data is stored securely on servers located in the United Kingdom. Ideaworks does not transfer or store personal data outside the European Economic Area (EEA).
Your Rights as a Data Subject
While we hold or process your personal data, you have the following rights:
Right of Access – Request a copy of the information we hold about you.
Right of Rectification – Correct any inaccurate or incomplete data we hold.
Right to be Forgotten – Request deletion of your data in certain circumstances.
Right to Restrict Processing – Ask us to restrict processing under specific conditions.
Right of Portability – Request that your data be transferred to another organisation.
Right to Object – Object to specific types of processing, including direct marketing.
Right to Object to Automated Decisions – Refuse decisions made solely through automated processing, including profiling.
If Ideaworks refuses a request under these rights, we will explain why and inform you of your right to challenge this decision legally.
You can also request information about:
The identity and contact details of Ideaworks and any appointed Data Protection Officer
The purpose and legal basis for processing your data
Legitimate interests pursued, where applicable
The categories of personal data we collect and process
Recipients or categories of recipients of your data
The duration of data storage or the criteria for determining it
Your rights to correct, erase, restrict, or object to processing
How to withdraw consent at any time
How to lodge a complaint with the ICO
Whether providing personal data is a contractual or statutory requirement
The source of data if not collected directly from you
Identification Requirement
To protect your privacy, we require proof of identity before releasing personal data. Acceptable forms of ID include:
A copy of your driving licence or passport
A recent utility bill (no older than three months)
At least one photographic ID plus one supporting document is required. If documentation is unclear, further information may be requested.
All requests should be sent to dataprotection@ideaworks.co.uk or in writing to the address below.
Complaints
If you wish to raise a concern about how we process your personal data, you may contact us directly. We aim to respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Contact Details:
Ideaworks (London) Limited
Attention: Data Protection Officer
206 Great Portland Street
London
W1W 5QJ
Information Commissioner’s Office (ICO)