Under the data protection laws, you have a number of rights in respect of your information and the way we use it. Some of these rights only apply in certain situations. We explain below what rights you have, what these mean and how they apply to the way we use your information.
|
You have the right to
|
What does this mean?
|
How does this apply to the way we use your information?
|
|
Access your information
|
You can ask for:
- confirmation that we process your personal information
- a copy of your personal information that we hold and
- other information about how we process your information.
|
We will provide you with a copy of your personal information which we hold unless the data protection laws provide an exception that we decide to rely on, for example where there are ongoing court proceedings. We may also redact out the names of any other individuals to protect their privacy.
Wherever possible, we will provide you with a copy of your personal information in the same manner you make your request unless we agree otherwise with you.
This privacy notice also includes the other information you can ask for about how we process your information.
|
|
Have your information rectified
|
You can ask us to rectify your information if it is not accurate, incomplete or up to date.
|
We will update or correct your information, although sometimes we may need to ask you to provide evidence to confirm the changes.
|
|
Have your information erased
|
This is also known as the right to be forgotten.
You can ask us to delete your information where:
- we no longer need it
- we rely on your consent to use your information and you withdraw it
- you object to our processing it and we have no overriding legitimate grounds to continue processing it or
- we are legally required to delete it.
This right does not apply where:
- we are legally required to keep your information
- we have a compelling legitimate ground for using your personal information or
- we need your information to establish, exercise or defend legal claims, for example where there are ongoing court proceedings.
|
As we rely on the fact that we need your information to (a) comply with our legal obligations or (b) protect you where it is a matter of life and death for most processing of your personal information, we will only be able to delete your personal information:
- if you have the right to object to our processing your personal information and to carry out your request we have to erase your information and
- where we no longer need your information. Although our retention policy means that we will delete your information once we no longer need it. Please see the section How long do we keep your information? above for more details.
|
|
Restrict our processing of your information
|
You may ask us to restrict our processing of your personal information where:
- you believe the information we hold about you is inaccurate while we check whether it is accurate
- we no longer need your information but you need it to establish, exercise or defend a legal claim or
- you object to our processing your personal information while we reconsider our legitimate interests assessment.
|
We will not process your personal information whilst we consider your request. However, we will still be able to process your personal information for the purposes of any ongoing court or other legal proceedings.
We will inform you if we begin processing your personal information again and explain why.
|
|
Have your information transferred to you and/or a third party
|
This is also known as the right to data portability.
You can ask us to provide you with a copy of the information which you have provided to us and which we hold electronically.
|
This right only applies to the information which you have provided to us which we hold electronically.
We will provide this information to you in a commonly-used and machine readable format.
|
|
Object to our processing of your information, including profiling
|
You can object to our use of your information, including profiling unless:
- we have compelling legitimate grounds for using your information or
- we need to use your information to establish, exercise or defend a legal claim, for example where there are ongoing court proceedings.
You can also object to us using your information for marketing purposes.
|
We don’t carry out any profiling of people who are unauthorised third parties.
This right only applies to the information that we process on the basis that it is in our legitimate interests.
We don’t use your information for direct marketing
|
|
Not to be subject to an automated decision
|
You can ask us to review any automated decision which has a legal or significant effect for you. You can provide us with your point of view and any additional information that you think we need and ask for a human to reconsider our decision.
|
You can ask us to reconsider any automated decision we have made about you.
|
We will always do our best to respond to your request within one month of receiving it and any additional information we need to confirm your identity and understand your request.
However, sometimes we may need some more time to deal with your request, particularly if it is complicated. Where this happens, we will write to you within one month and let you know why we need some more time and when we will provide you with our response.
If we are unable to carry out your request, we will send you a response explaining why.
If you would like to exercise any of your rights, please contact our Data Protection Officer by:
- by email at dpo@lowellgroup.co.uk or
- letter at Data Protection Officer, Lowell Financial Ltd, PO Box 13079, Harlow, CM20 9TE.
Our Data Protection Officer deals with data protection for all our UK companies, so whichever Lowell company your question, query or request relates to, please contact our Data Protection Officer using these contact details.