Last Updated: [10/11/2023]
Thank you for choosing The Contact Company Mobile App and for taking the time to read this Privacy Policy. The purpose of this application is to enhance internal communication with informative articles and streamline shift management for employees. We recognise the trust that you place in us whenever you share your personal information with us, and we are committed to operating with openness, honesty, and transparency.
As the application is specifically for employees of the Contact Company, the majority of information is already held by The Contact Company, and the application does not necessarily need to collect additional information other than what is necessary to operate and improve the application.
This information will be collected automatically or generated whenever you use the application. This information is used to help our developers better understand how to make improvements to the application.
Wherever we refer to ‘personal information’ in this notice, it may include any or all the personal data collected from you or generated about you.
The information highlighted will be collected directly from you, via web forms that allow you to submit the information, or automatically when you connect to the service.
The application is not required for employment within The Contact Company and is an optional download. The lawful basis for processing is therefore Consent. Consent is implied when you download and use the application. To withdraw consent, you may uninstall the application at any time and cease its use.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and to enable us to continue to tell our story (which will include reference to archive material). To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. At the end of an agreed retention period your information will either be securely and confidentially destroyed or anonymised. Anonymisation is the process of altering personal information within data sets such that it is not possible to identify individuals from the data any longer. If you would like any more specific information, ask your line manager to log an ARC Helpdesk ticket and we will endeavour to answer your questions.
Under certain circumstances, you have rights under data protection laws in relation to your personal information:
In order to exercise any of these rights you will need to make a request using the ARC Helpdesk accessible via The Contact Company Intranet (or ask your line manager to do so if you do not have access), or by emailing GDPR@tcc.co.uk. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. Upon making your request we will respond to you within one calendar month. If one calendar month ends on a Saturday, Sunday, or Bank Holiday, then the end of the calendar month will be considered close of business of the next available working day.
Your information will not be disclosed to any third parties nor transferred or stored outside of the UK.
You have the right to make a complaint or raise any concerns that you have relating to our approach to your personal information to the Information Commissioner’s Office (the regulatory authority for data protection issues in the UK (www.ico.org.uk)). We would appreciate it if you could let us know if you contact the ICO. If you feel able to contact us before making contact with the ICO, we will take your concerns seriously and we promise to work with you to resolve any issues that you have (noting that we will tell you if you should refer the issue to the ICO and that we may also need to tell the ICO).