Perision Ltd handles personal data in line with the UK GDPR and the Data Protection Act 2018. This statement explains how we meet those rules. It sits alongside our Privacy Policy, which gives the detail of what we collect and why.

The principles we follow

We use personal data lawfully, fairly and openly. We collect it for clear purposes and do not use it in ways that do not fit those purposes. We keep it accurate, hold only what we need, keep it no longer than necessary, and keep it secure.

The lawful bases we rely on

We rely on legitimate interest for business outreach and for running our service, on contract where we work with clients, on consent where we ask for it, and on legal obligation where the law requires.

Our role when we work for clients

When we run outreach for a client, responsibility under data protection law is shared. Depending on the arrangement, we act as a processor following the client’s instructions, or as joint controllers with the client. Each client agreement sets this out, along with the security terms we follow.

Your rights

You can ask to see, correct, delete, restrict, move or object to the use of your personal data, and withdraw consent where we rely on it. We handle requests within one month. The detail is in our Privacy Policy.

How we protect data

We use suitable technical and organisational measures, including access controls, secure storage, and care in choosing the providers we work with. We review these measures and improve them over time.

If something goes wrong

If a personal data breach happens that puts people’s rights at risk, we record it, act to limit harm, and report it to the Information Commissioner’s Office within 72 hours where the law requires. We tell affected people when the law requires it.

Providers and transfers

We use a small number of providers to run our service, such as hosting, email, customer records and analytics. We choose providers that meet data protection standards and bind them with suitable terms. Where a provider processes data outside the United Kingdom, we put approved safeguards in place, such as the UK International Data Transfer Agreement.

Contact

For any data protection matter, write to hello@perision.co.uk. You can also contact the Information Commissioner’s Office at ico.org.uk. [If applicable: Perision is registered with the ICO under reference [number].]