This Privacy Notice serves to elucidate the nature of personal data that may be collected during your interactions with us, as well as the procedures for its storage, processing, and security.
If you find that this notice doesn't address your specific inquiries, please don't hesitate to contact us at customerservices@blizzardpay.co.uk.
## Definition of Personal Data
According to Section 3(2) of the Data Protection Act 2018, personal data pertains to "any information relating to an identified or identifiable living individual ('data subject')." An identifiable individual can be determined directly or indirectly through various identifiers, such as a name, identification number, location data, online identifier, or other factors related to their physical, physiological, genetic, mental, economic, cultural, or social identity.
## Legal Grounds for Data Collection
Data protection regulations outline several lawful bases for the collection and processing of your personal data:
**1. Consent:** In certain scenarios, we may collect and process your data with your explicit consent. For instance, we might request your Case ID Number or your Code under the EU Settlement Scheme, and your consent to conduct a check with the Home Office to verify your eligibility to work.
**2. Legitimate Interest:** We collect and process your personal data to fulfill our contractual obligations to you, particularly with regard to payments. The essential data required depends on the service you enrol in and includes information such as names, addresses, date of birth, bank details, NI Number, UTR Number (if CIS), nationality, telephone number, email address, and eligibility to work. Your data may also be shared with your recruitment agency or end client to meet our legitimate and contractual obligations to you.
**3. Legal Compliance:** When mandated by the law, we may need to collect and process your data. For example, we may share information about individuals involved in fraud or criminal activity with law enforcement agencies. Additionally, we may need to share your data with government organizations, such as HMRC or UK Border Control, to process payments or determine your eligibility to work. Your details may also be shared with the entity that operates our Workplace Pension Scheme.
## Collection of Personal Data
We collect your personal data in various situations, including but not limited to:
- When you visit our website and complete an online form.
- When you request information about our products or services.
- When you sign up for our services via email or contact our team.
- When you engage with us on social media.
- When you contact us with queries or complaints.
- When you participate in prize draws or competitions.
- When you complete surveys we send you.
- When a third party, such as your recruitment agency, shares information with us with your consent.
- We may obtain data from publicly available sources with your consent or where required by law.
## Use of Your Personal Data
We process your data in compliance with data protection legislation and will strive to maintain its accuracy and relevance. The purposes for which we use your data include:
- To facilitate communication and respond to your queries and complaints.
- To send you important information such as payslips and updates to our Privacy Notice.
- To comply with legal obligations, such as HMRC, UK Border Control, and Workplace Pension legislation.
- To seek your preferences regarding additional information, such as newsletters.
- We prioritize the appropriateness of the data collected for the services provided and respect your privacy.
## Protection of Your Personal Data
We understand the significance of data security and are committed to handling your data with the utmost care. We have implemented necessary measures, policies, procedures, and training in accordance with guidance from the ICO to safeguard your data.
## Data Retention
We will process your personal data for the duration of your contract with us and store it for the legally mandated time period. This is necessary to comply with legal requirements, including income tax and audit purposes.
## Sharing of Your Personal Data
Your personal data will not be disclosed to third parties without your consent. Trusted third parties may receive your data for specific purposes in line with our processing activities and with legitimate consent. Examples of such third parties include government agencies (e.g., HMRC, UK Border Control), your recruitment agency, and IT companies that support our systems. They are bound to use your data as detailed in our contractual agreements, respecting your privacy.
## Your Rights
Under the UK GDPR, you have various rights as an individual (data subject), including the right of access, rectification, erasure, restriction of processing, portability, objection, and the right to object to automated processing or profiling. In case we decline your data request, we will provide a clear explanation for our decision. To exercise these rights, please contact us at info@blizzardpay.co.uk. To amend your personal information, reach out to our customer services team.
## Use of IP Addresses and Cookies
Our website, www.blizzardpay.co.uk, may collect information about your computer, including your IP address, operating system, and browser type, for system administration and analysis of user behaviour. We may use cookies to enhance your online experience, estimate audience size, customize our site, and recognize you on return visits. You can configure your browser settings to refuse cookies if desired.
## Contacting the Regulator
If you wish to make a complaint about the processing of your personal data or how your complaint has been handled, you can lodge a complaint with the supervisory authority (ICO). Contact the Information Commissioner's Office (ICO) at 0303 123 1113 or visit their website at www.ico.org.uk.
## Complaints
Should you wish to file a complaint about the processing of your personal data or our handling of your complaint, please reach out to us at customerservices@blizzardpay.co.uk.