This is the privacy notice of Whyy? Unboxd a sister brand of Whyy? Change Limited which is registered in England & Wales with number 09388550.
Our registered office is at Unit 1B Brookdale Court, Thorncliffe Business Park, Chapeltown, Sheffield, S35 2PT.
Introduction
This notice describes how we collect, store, transfer and use personal data. It tells you about your privacy rights and how the law protects you.
In the context of the law and this notice, ‘personal data’ is information that clearly identifies you as an individual or which could be used to identify you if combined with other information. Acting in any way on personal data is referred to as ‘processing’.
This notice applies to personal data collected through our website and through social media platforms and including LinkedIn. Except as set out below, we do not share, sell, or disclose to a third party, any information collected through our website.
Data Privacy Policy Statement
Whyy? Unboxd is dedicated to ensuring personal information is captured, held, used, disclosed and transferred in line with EU General Data Protection Regulations (GDPR) 2018 principles.
Principles of our policy
- Private: We will never sell, rent or trade information about you to other companies. Your data will not be supplied to anyone except as described in this privacy notice, unless we are obliged by law to disclose it.
- Secure: In accordance with the UK Data Protection Act and the EU General Data Protection Regulation (GDPR) we follow strict security procedures in the storage and disclosure of information that you have given us to prevent unauthorised access.
- Necessary: We won’t collect information unless it is needed for purposes we have told you about in this privacy policy, to deliver a better service or to give you useful, relevant information. Records will be kept for as long as they are needed to meet the operational needs of the business, together with statutory and regulatory obligations.
Information We May Collect From You:
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
We may collect and process the following information about you:
- Information that you provide to us, for example when you fill out a contact or web form
- Information that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data.
Unless we say otherwise below, we’ll use your personal information on the basis that it’s within our legitimate interests in operating and maintaining the site and providing you with site functionality and related services.
Cookies
When you visit our website, sign up for our newsletter or complete a Contact form, we collect information automatically using tracking technologies, like cookies and tracking pixels.
Whyy? Unboxd uses cookies or similar technologies (such as HotJar and JavaScript) to analyze trends, administer the website, monitor how visitors navigate around the websites.
We Use Your Information To Ensure:
- The site content is presented in the most effective manner for the device you’re accessing it from
- Undertake data analytics to learn more about how you and others interact with this site and with our advertising
- Detect and prevent misuse or abuse of this site or our services.
- We process your data under the ‘contract’ basis of GDPR.
Who Else We Will Share Your Information With:
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
We use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make and do not allow Google to make, any attempt to find out the identities of those visiting our website.
We do not sell your details or provide your data to external companies.
How Long We’ll Keep Your Information:
Whyy? Unboxd will retain your data for a minimum period of three years. We may collect information about your computer (or mobile device), including where available your IP address, operating system, and browser type, for system administration or for our own commercial purposes. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
How do we dispose of your information?
Whyy? Unboxd disposes of information based on sensitivity of the information:
- Non-sensitive information – can be placed in a normal rubbish bin
- Confidential information – crosscut shredded
- Highly Confidential information – crosscut shredded
Data Processing
A data controller is defined as:
the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data
A data processor is defined as:
a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
The Whyy? Unboxd data controller (Governance Officer) and any data processors will implement appropriate measures to ensure a level of security appropriate to the risk, including:
- the pseudonymisation and encryption of personal data, using password-protected files/folders and encrypted cloud storage;
- the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services, through use of proper staff training, governance reviews, secure storage of and restricted access to physical or electronic documents;
- the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident, through use of cloud storage and backup;
- a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing, through quarterly governance and policy reviews and taking a preventive approach.
Your Rights:
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
You have several rights under the law which include;
- Right to be informed – when we collect your data we have to tell you what we are going to do
- Right of access – You have the right to contact us in writing to request details of the information we hold about you.
- Right of rectification – You have the right to ask us to rectify information that we hold about you if it is inaccurate or incomplete. You can do this verbally or in writing to us. We may need to verify your identity to make the requested changes.
- Right to erasure – This is also known as the right to be forgotten and gives you the right to request your information be removed if there is no compelling reason for its continued processing. You can do this verbally or in writing to us. We may need to verify your identity to make the requested changes.
- Right to restrict processing – this is the alternative to erasure and gives you the right to tell us to stop processing your data but allowing us to keep enough information about you to ensure that your wishes are respected in the future.
- Right to data portability – this gives you the right to ask a holder of your information to transfer that information to another business.
- Right to object – You have the right to object to your personal data being used. If you wish for us to stop using your personal data, we will do so without undue delay. You have the right to object to the processing of your data for marketing
- Rights related to automated decision making including profiling – We do not carry out automated decision making. We may, however, use some of your personal data on an anonymised basis and for internal statistical reasons, only. This information is used by the company to help target relevant audiences who will more likely use our service. You can object to your data being used in this way. In such an event, we will not use your information as part of our profiling.
- Right to withdraw consent at any time where relevant – you have the right to withdraw your consent to the processing of your information at any time and we must provide you with the information you to need to do so, at the time we collect your data and each time we contact you. You can withdraw consent in the following ways;
- In writing: Data Protection, Whyy? Unboxd, Unit 1B Brookdale Court, Thorncliffe Business Park, Chapeltown, Sheffield, S35 2PT.
- By email: hello@whyyunboxd.com
- Right to lodge a complaint with a supervisory authority – If we cannot deal with your complaint to your satisfaction you also have the right to complain to a relevant supervisory authority: The Information Commissioners Office – http://www.ico.gov.uk/
Contact us about our privacy policy
Whyy? is registered on the Information Commissioner’s register of data controllers, number ZA149058
You can contact us by emailing our Data Protection Officer on hello@whyyunboxd.com
This policy will be reviewed, at a minimum, during Quarterly Governance and Risk Strategy Reviews, and at any other opportunity deemed necessary.
