The personal data we collect from you includes:
- questions, queries or feedback you leave, including your email address if you contact PEPAL.CO.UK.
- information on how you use the site, using cookies and page tagging techniques
We use Google Analytics software to collect information about how you use PEPAL.CO.UK. This includes IP addresses. The data is anonymised before being used for analytics processing.
Google Analytics processes anonymised information about:
- the pages you visit on PEPAL.CO.UK
- how long you spend on each PEPAL.CO.UK page
- how you got to the site
- what you click on while you’re visiting the site
We do not store your personal information through Google Analytics (for example your name or address).
We will not identify you through analytics information, and we will not combine analytics information with other data sets in a way that would identify who you are.
We continuously test and monitor our data protection controls to make sure they’re effective and to detect any weaknesses.
We collect information through Google Analytics to see how you use the site. We do this to help:
- make sure the site is meeting the needs of its users
- make improvements, for example improving site layout
We also collect data in order to:
- gather feedback to improve our services, for example our email alerts
- respond to any feedback you send us, if you’ve asked us to
- send email alerts to users who request them
- provide you with information about PE Pal
- monitor use of the site to identify security threats
The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of PEPAL.CO.UK.
The legal basis for processing anonymised data for Google Analytics is your consent.
The legal basis for processing all other personal data is that it’s necessary:
- in the exercise of our functions as a UK company
The data we collect will not be shared with anyone else.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
- use your data in analytics
We will share your data if we are required to do so by law - for example, by court order, or to prevent fraud or other crime.
We will only retain your personal data for as long as:
- it is needed for the purposes set out in this document
- the law requires us to
We will keep your email data until you unsubscribe. We will keep your feedback data for 2 years. We will delete access log data after 120 days.
Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.
We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.
All personal data is stored in the European Economic Area (EEA). Data collected by Google Analytics data may be transferred outside the EEA for processing.
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.
We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data
- that anything inaccurate in your personal data is corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If you have any of these requests, get in contact with our Privacy Team.
PEPAL.CO.Uk may contain links to other websites.
This privacy notice only applies to PEPAL.CO.UK, and does not cover the linked websites.
Contact the Privacy Team if you:
- have a question about anything in this privacy notice
- think that your personal data has been misused or mishandled
Privacy Team
dpo@pepal.co.uk
You can also make a complaint to the Information Commissioner, who is an independent regulator.
casework@ico.org.uk
Telephone: 0303 123 1113
Textphone: 01625 545860
Monday to Friday, 9am to 4:30pm
Find out about call charges
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.
If these changes affect how your personal data is processed, PEPAL.CO.UK will take reasonable steps to let you know.