Information about us

Welcome to www.fihplc.com, a website owned and operated by FIH Group plc. We are a public limited company registered in England and Wales under company number 03416346. Our main trading address is Kenburgh Court, 133-137 South Street, Bishop's Stortford, Hertfordshire CM23 3HX.

We are committed to protecting and respecting your privacy. We are a "controller" under applicable data protection legislation, which means we are responsible for protecting your personal information as we decide why and how that information is used after we collect it. If you have any queries about this policy or how we use your personal information, please contact us using the details at the end of this policy.

This policy sets out the basis on which any personal information we collect from you, or that you provide to us, in connection with our website, will be processed by us. Please read the following carefully to understand how we handle your personal information

What information do we collect?

We may process the following types of personal information about you which we have categorised as follows:

We do not collect any special categories of personal information about you (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), nor do we collect any information about criminal convictions and offences.

How do we collect information?

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity and Contact Data by corresponding with us by post, phone or email or otherwise.
• Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal information by using cookies, and other similar technologies. Please see our Cookie Policy for further details.

How do we use this information?

Data protection law requires us to have a valid reason to process your personal information for each of the different purposes for which we use that information. The law refers to each reason as a 'lawful basis'. The purposes for which we use your personal information and the lawful basis under data protection law on which we rely to do this are explained below.

Where processing is necessary for us to pursue our legitimate interests

We may use and process your personal information where it is necessary for us to pursue our legitimate interests as a business, for, in particular, the following purposes:

Processing necessary for our legitimate interests in operating the administrative and technical aspects of our business efficiently and effectively

• To administer our website and for our internal operations, including troubleshooting, testing and statistical reporting purposes;
• For the detection and prevention of fraud and other criminal activities;
• To verify the accuracy of information we hold about you;
• For network and information security purposes in order for us to take steps to protect your and our information and property against loss or damage, theft or unauthorised access;
• To comply with a request from you in connection with the exercise of your rights where required under applicable data protection law;
• For the purposes of a corporate restructure or reorganisation or sale of our business or assets;
• For efficiency, accuracy or other improvements of our databases and systems e.g. by combining systems or consolidating records we hold about you;
• To place and read cookies that are essential for our website to function properly, as described in our Cookie Policy;
• To enforce or protect our contractual or other legal rights or to bring or defend legal proceedings;
• For general administration including financial planning, control and reporting and managing your queries, complaints, or claims, to send service messages and to provide you with important information about our business.

Processing necessary for our legitimate interests in supporting our customers and prospects with sales and other enquiries

• To correspond and communicate with you when supporting you in connection with our products or services or your queries in relation to them;

Where required to comply with our legal obligations

We will use your personal information to comply with our legal obligations:

• To assist any public authority or criminal investigatory body, where we are under a legal obligation to do so;
• To verify your identity you when you contact us where we are obliged under applicable law to do so;
• To verify the accuracy of data we hold about you; and
• To respond to and resolve your complaints in relation to our services.

Do we share your information with anyone else?

Our suppliers, service providers and other recipients

We may share your information with our third party service providers, agents, subcontractors and other organisations (as listed below) for the purposes of providing services to us or directly to you on our behalf.

When we use third party service providers as our data processors, we only disclose to them any personal information that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.

When we share your personal information with third parties that are controllers of that information, they may disclose or transfer it to other organisations in accordance with their data protection policies. This does not affect any of your data subject rights as detailed below. In particular, where you ask us to rectify, erase or restrict the processing of your information, we take reasonable steps to pass this request on to any such third parties with whom we have shared your personal information.

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

Other ways we may share your personal information

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation. We may also transfer your personal information to public authorities, courts or tribunals if we are under a duty to disclose or share it in order to comply with any legal obligation, to detect or report a crime, to enforce or apply the terms of our contracts or to protect the rights, property or safety of our visitors and clients. We will always take steps with the aim of ensuring that your privacy rights continue to be protected.

How long do we keep your information for?

The length of time for which we retain your personal information is determined by a number of factors including the purpose for which we use that information and our obligations under data protection and other laws that apply to us. We do not retain personal information for longer than is necessary for our processing purposes or for longer than the law otherwise permits.

We will usually retain your personal information up to a period that relates to the maximum period during which legal or regulatory action can arise under the laws of jurisdictions that apply to us. In the UK, this period is 6 years after the date it is no longer needed by us for any of the purposes listed above in this policy.

The exceptions to the above are where:

• You exercise your right to require us to retain your personal information for a period longer than our stated retention period;
• You exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;
• We bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible; or
• In limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

If you have any questions about how long we keep your information, please contact us using the details at the end of this policy.

Transfer of your personal information outside Europe

Information you provide to us may be transferred to countries or regions outside of the United Kingdom (UK) and European Economic Area (EEA). By way of example, this may happen where our servers or those of our third party service providers are from time to time located in a country outside the UK and EEA. These countries may not similar data protection laws and so may not protect the use of your personal information to the same standard.

If we transfer your information outside of the UK and EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. These steps include:

• Relying on adequacy decisions issued by the European Commission or relevant UK Secretary of State (as applicable) where we send personal data to Andorra, Argentina, Brazil, commercial organisations in Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, Japan, South Korea, the UK, Gibraltar or the EEA;
• Where the above does not apply, all transfers of personal data between our group companies rely on standard contractual clauses issued by the European Commission and (where applicable) the UK International Data Transfer Agreement or Addendum;
• For transfers to US entities, relying on the EU-US Data Privacy Framework and the UK-US Data Bridge that extends that framework to the UK, where such entities are registered with the EU-US Data Privacy Framework, and, in a limited number of circumstances, on binding corporate rules; and
• Ensuring that the recipients are subscribed to 'international frameworks' that aim to ensure adequate protection, such as the EU-US Data Privacy Framework and the UK-US Data Bridge that extends that framework to the UK.

Please contact us using the contact details at the end of this policy for more information about the protections that we put in place and to obtain a copy of the relevant documents.

If you use our website whilst you are outside the UK and EEA, your personal information may be transferred outside of those jurisdictions in order for you to access the website.

How do we protect personal information?

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any security breaches relating to your personal information and will notify you and any applicable regulator of a breach where we are legally required to do so.

Once we have received your information, we will use strict procedures and security features such as encryption to try to prevent unauthorised access.

Your data protection rights

You have a right to ask us to confirm whether we are processing information about you, and to request access to this information ('right of access'). You also have the right to be informed of the safeguards we have in place relating to any transfers of your information to another country or to an international organisation.

You may ask us, or we may ask you, to rectify information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate or complete information which is incomplete ('right to rectification'). If you inform us that your personal information is inaccurate, we will inform relevant third parties with whom we have shared your data so they may update their own records.

We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided us with changes, for example if you change your email address or name, please let us know using the contact details at the end of this policy.

You have a right to obtain your personal information from us and reuse it for your own purposes, perhaps for another service, without hindering the usability of the data ('right of portability').

You have a right to seek the erasure of your data (often referred to as the 'right to be forgotten'). You may wish to exercise this right for any reason, for example where it is no longer necessary for us to continue holding or processing your personal information of where you have withdrawn your consent. This right is not absolute, as we may need to continue processing this information, for example, to comply with our legal obligations, or for reasons of public interest.

You have a right to ask us to restrict our processing of your information ('right to restriction') if:

• You contest its accuracy and we need to verify whether it is accurate
• The processing is unlawful and you ask us to restrict use of it instead of erasing it
• We no longer need the information for the purpose of processing, but you need it to establish or defend legal claims
• You have objected to processing of your information being necessary for the performance of a task carried out in the public interest, or for the purposes of our legitimate interests. The restriction would apply while we carry out a balancing act between your rights and our legitimate interests.
• You exercise your right to restrict processing, we would still need to process your information for the purpose of exercising or defending legal claims, protecting the rights of another person or for public interest reasons.

You have a right to object to us processing your data for the purposes of marketing.

You have the right not to be subjected to certain solely automated decisions. We do not envisage that any decisions that have a legal or significant effect on you will be taken about you using purely automated means, however we will update this policy and inform you if this position changes.

You have a right to complaint to the data protection regulator, which in the UK is the Information Commissioner's Office. You may do so by calling their helpline at 0303 123 1113 or visiting their website at https://ico.org.uk.

If you would like to exercise any of your rights above, please let us know using the contact details at the end of this policy.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our website. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

Changes to this policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

This policy was last updated on the date stated at the beginning of the policy.

Contact us

Please direct any queries about this policy or about the way we process your personal information to our Data Protection Team using our contact details below.

If you wish to write to us, please write to Data Protection, at 133-137 South Street, Bishops Stortford, CM23 3HX.

Our email address for data protection queries is admin@fihplc.com.