5 Highgate Business Centre
If you have any queries or wish to make an appointment please contact us:
Tel: 0121 772 6745
This Privacy Statement describes how and why Mayfield (“we” or “us”) collects and uses personal data (i.e. data relating to an identified or identifiable individual) in the course of its business. It applies to personal data provided directly to us by the individuals concerned and to personal data provided to us by companies and other organisations.
We are committed to the protection of personal data and to fair and transparent processing. If you have any questions about this Privacy Statement, you can contact our Data Protection Officer via email at firstname.lastname@example.org.
To find out more about how and why we process personal data, please refer to the relevant section of this Privacy Statement.
Mayfield (a limited company registered in England with number with a registered address of Unit 5 Highgate Business Centre, Highgate Road, Birmingham, B12 8EA) is registered as a data controller under registration number ZA046482.
Security of personal data
We have policies, procedures and training in place in respect of
data protection, confidentiality and information security. We regularly review such measures with the objective of ensuring their continuing effectiveness. The Privacy Statement was last updated
on 20 November 2018.
International transfers of personal data
In the course of running our business and providing services to
clients we may transfer personal data to third parties located in other countries, including countries outside the EEA. Where we transfer personal data to a country not determined by the
European Commission to provide an adequate level of protection for personal data, we will only do so under a form of agreement approved by the European Commission, such as the Standard Contractual
Provision of personal data to third parties
We will only share personal data with third parties where we are legally permitted to do so. We do not provide information to third parties for their own marketing purposes and we do not undertake mailings for third parties. Where we transfer personal data to third parties, we will put in place appropriate contractual arrangements and seek to ensure that there are appropriate technical and organisational measures in place to protect personal data.
We may provide personal data to:
You have rights in relation to any of your personal data held by us as a data controller. Should you wish to exercise your rights right, please contact our Data Protection Officer via email at email@example.com. We will endeavour to respond to any request promptly and within any legally required time limit.
You also have a right to update your personal data that we hold. To do so, please either update the personal data via the web page or applications open to you, contact your usual Mayfield contact or otherwise contact our Data Protection Officer via email at firstname.lastname@example.org.
Where we process your personal data based on your consent, you have a right to withdraw consent at any time. Should you wish to do so, please contact our Data Protection Officer via email at email@example.com.
Finally, in addition to the rights above, you may also have other
rights in relation to personal data, including a right to erasure/deletion, the right to data portability and the right to restrict and/or object to our processing of personal data. Such rights may
only be available to you from 25 May 2018, when the General Data Protection Regulation came into effect.
Should you wish to complain about our use of your personal data, please contact our Data Protection Officer via email at firstname.lastname@example.org. We will investigate all complaints received and will endeavour to respond to complaints promptly.
You may also complain about our use of personal data to the
Information Commissioner’s Office. For further information on your rights and the complaints process, please visit the Information Commissioner’s Office website: https://ico.org.uk/
We will only keep personal data for as long as necessary for the purposes for which it was collected, or as required by applicable law or regulation.
Unless there are any overriding legal, regulatory or contractual requirements, we will retain records of services provided (which may include personal data) in accordance with our document retention policy.