Privacy Policy

At gemm, we are committed to maintaining the trust and confidence of visitors to our website and enquirers via the website. Here you’ll find information on how we treat data that we collect from visitors to our website.

Please read our Privacy Notice carefully to get a clear understanding of how we collect, use, protect or otherwise handle your personal data.

We may change this Privacy Notice from time to time by updating this page. Please check this page regularly to ensure that you agree with any changes.

Visitors to our Website

When someone visits gemm.org.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. You can find more information on how cookies are used on this website in the Cookies Policy below.

Cookies Policy

Our website, like many other websites, uses cookies. ‘Cookies’ are small pieces of information sent to your computer and stored on your hard drive to allow our website to recognise you when you visit. The cookies collect statistical data about your browsing actions and patterns but do not identify you as an individual. We use this information to improve our website experience. It is possible to switch off cookies by changing your browser preferences.

Enquiries and contact forms

As part of the enquiries process for our services, we collect personal information from our website contact form, and from referrals from existing clients. We use this information to respond to enquiries only. We do not rent or trade email lists with other organisations or businesses.

The personal information that we collect includes some or all of the following:

  • Name
  • Company
  • Job role
  • Email address
  • Phone number
  • Contact address

Your personal data is used to ensure that the services we deliver are suitable and appropriate, and any data collected is only used to administer and deliver those services. We use the data to:

  • Respond to your enquiries.
  • Propose, quote, design, deliver, invoice and get feedback on our services.
  • Send you communications required by law or which are necessary to inform you about our changes to the services we provide to you (e.g. updates to this Privacy Notice).
  • Comply with our contractual or legal obligations to share data with law enforcement.

We store your data securely by:

  • Keeping digital records on a laptop with an encrypted hard drive.
  • Keeping paper records of personal contact information and confidential hardcopy notes from client meetings in a locked cabinet in our office.
  • Using a secure email server.

We keep your data:

  • Only for as long as is operationally valuable or as required by law or regulation, e.g. HMRC.
  • At the end of that period, your data will either be deleted completely or anonymised, e.g. by aggregating it with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.

Your Rights

When using our website and submitting personal data to us, you may have certain rights under the General Data Protection Regulation (GDPR) and other laws.

You are entitled to access the personal information that we hold. Please email your request to our data protection officer Gillian McCready.

Depending on the legal basis for processing your personal data, you may have some or all of the following rights:

The right to be informed

You have the right to be informed about the personal data we collect from you, and how we process it.

The right of access

You have the right to get confirmation that your personal data is being processed and to have the ability to access your personal data.

The right to rectification

You have the right to have your personal data corrected if it is inaccurate or incomplete.

The right to erasure (right to be forgotten)

You have the right to request the removal or deletion of your personal data if there is no compelling reason for us to continue processing it.

The right to restrict processing

You have a right to ‘block’ or restrict the processing of your personal data. When your personal data is restricted, we are permitted to store your data, but not to process it further.

The right to data portability

You have the right to request and get the personal data that you provided to us and to use it for your own purposes. We will provide your data to you within 30 days of your request. To request your personal data, please email your request to our data protection officer Gillian McCready.

The right to object

You have the right to object to our processing your personal data for the following reasons:

  • Direct marketing.
  • The lawful processing of your data based on legitimate interests or the performance of a task in the public interest/exercise of official authority.
  • Research and statistical purposes.

Filing a Complaint with Authorities

You have the right to file a complaint with supervisory authorities if you feel that your data has not been processed in compliance with the General Data Protection Regulation or you are unhappy with our response to any requests you have made to us regarding the use of your personal data.

You can contact the Information Commissioner’s Office by calling 0303 123 1113, or going online to www.ico.org.uk/concerns/

If the supervisory authorities fail to address your complaint properly, you may have the right to a judicial remedy.

If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.