Data Protection
The Data Protection Act 1984 was replaced on the 1 March 2000 by the Data Protection Act 1998 with transitional arrangements for existing processes until the 24 October 2001.
The Data Protection Act 1988 places a number of responsibilities upon people and organisations who use personal information, and gives rights to individuals to control the use of their personal data and to obtain a copy of it. In particular the Act sets out a number of principles, described below) that govern how information is obtained, stored, and disclosed.
Data must be (the Eight Principles):
<!--[if !supportLists]-->1. <!--[endif]-->fairly and lawfully processed;
<!--[if !supportLists]-->2. <!--[endif]-->only obtained for one or more specified lawful purposes, and processed only for those purposes;
<!--[if !supportLists]-->3. <!--[endif]-->only held if it is relevant and not excessive for any particular purpose;
<!--[if !supportLists]-->4. <!--[endif]-->must be accurate and kept up to date;
<!--[if !supportLists]-->5. <!--[endif]-->not kept for longer than is necessary;
<!--[if !supportLists]-->6. <!--[endif]-->processed in accordance with rights of data subjects for personnel data;
<!--[if !supportLists]-->7. <!--[endif]-->secure and protected to prevent unlawful or unathorised processing, accidental loss, destruction or damage;
<!--[if !supportLists]-->8. <!--[endif]-->not transferred to countries outside EEA (European Economic Area) without adequate protection.
The most significant difference between the old and the new Acts is that the new Act is not restricted to information held on computer. It also covers information held in other media such as paper and microfiche.
Mybusinessadvice takes the privacy and security of its contact data seriously. This guide to data protection is to ensure that our members and other contacts recorded are fully informed about the effect of the new legislation. It sets out the ways in which we handle information about you, and your rights in respect of that information.
What information do we hold and how do we obtain it?
Generally we receive information about you when you make an enquiry to mybusinessadvice, apply for membership to mybusinessadvice, inform mybusinessadvice of any changes to your personal information eg change of address, application for a change of membership status, or make a purchase from mybusinessadvice eg subscribe to a Journal. Information held also covers employees of mybusinessadvice, and anyone involved with the Regulatory Affairs of mybusinessadvice.
For what purpose do we use your information?
We use your information for a number of purposes that are outlined below.
<!--[if !supportLists]-->1. <!--[endif]-->to administer and maintain your Membership record;
<!--[if !supportLists]-->2. <!--[endif]-->to respond to any query that you may raise about your Membership record;
<!--[if !supportLists]-->3. <!--[endif]-->as input to a Regulatory Affairs case;
<!--[if !supportLists]-->4. <!--[endif]-->to administer and maintain employees' records;
<!--[if !supportLists]-->5. <!--[endif]-->to keep you informed (by post or email) about other products or services mybusinessadvice or approved 3rd parties can offer;
<!--[if !supportLists]-->6. <!--[endif]-->use information about you for the purposes of research and statistical analysis;
<!--[if !supportLists]-->7. <!--[endif]-->disclose information about you to regulatory authorities in response to formal requests.
Caring for your dataMybusinessadvice undertakes that it will have in place a level of security appropriate to the nature of the data and the harm that might result from a breach of security. Mybusinessadvice is particularly keen to keep any information about members accurate and where necessary up to date. To help us please keep us informed if any of your details change.
Your RightsYou have certain rights under the Act in relation to the information we hold about you. These rights are set out below:
<!--[if !supportLists]-->· <!--[endif]-->access to personal data (subject access).
You may request in writing to the contact address given below, details of the information we may hold about you, and the purpose(s) for which it is held. We will provide the information, in a permanent form, as at the time of the request, subject to any routine processing continuing between that time and the time of the response.
Provision of such information will be subject to a charge (as permitted by the Act) currently £10 (cheque made payable to My Business Advice). Your request will be met within 40 days of receiving the request or, if later, of receipt of the cheque and any supplementary information needed to establish your relationship with mybusinessadvice or verify your identity.
You are entitled, by notice in writing, to require us to stop using information about you for the purpose of direct marketing. Direct marketing means the communication of any advertising or marketing material that is directed to you.
Contact Address Data Protection Compliance Officer
My Business Advice Limited
3 Keriston Avenue
Churchdown
Gloucester
GL3 2BU