HOC Digital GDPR

HOC Digital cares about your privacy. For this reason, we collect and use personal data only as it might be needed for us to deliver to you our products and services (collectively, our “Services”). Your personal data includes information such as:

Our Privacy Policy is intended to describe to you how and what data we collect, and how and why we use your personal data. It also describes options we provide for you to access, update or otherwise take control of your personal data that we process.

If at any time you have questions about our practices or any of your rights described below, please contact Nick Ifield (nick@hocdigital.co.uk).

We collect personal data so that we can provide the best possible experience when you utilise our Services. Much of what you likely consider personal data is collected directly from you when you: 1. Use any of our Services (for example: billing information, including name, address, payment details); 2. request assistance from our service support team (for example: phone number, case notes); 3. complete a contact form, or 4. apply for a job, or otherwise participate in activities we promote that might require information about you.

However, we also collect additional personal data when delivering our Services to you to ensure necessary and optimal performance. These methods of collection may not be as obvious to you, so we wanted to highlight and explain below a bit more about what these might be (as they vary from time to time) and how they work:

Our website does not use cookies and similar technologies. We do not track your browsing behaviour, links clicked, etc.

Supplemented Data may be received about you from other sources, including publicly available databases or third parties from whom we have purchased data, in which case we may combine this data with information we already have about you so that we can update, expand and analyse the accuracy of our records, identify new customers, and provide products and services that may be of interest to you. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.

We strongly believe in both minimising the personal data we collect and limiting its use and purpose to only that (1) for which we have been given permission, (2) as necessary to deliver the Services you purchase or interact with, or (3) as we might be required or permitted for legal compliance or other lawful purposes. These uses include:

Delivering, improving, updating and enhancing the Services we provide to you. We collect various data relating to your use of our Services. We utilise this data to:

Improve and optimise the operation and performance of our

Diagnose problems with and identify any security and compliance risks, errors, or needed enhancements to our Services

Detect and prevent fraud and abuse of our Services and systems

Collect aggregate statistics about use of the Services

Often, much of the data collected is aggregated or statistical data about how individuals use our Services, and is not linked to any personal data.

We may share your personal data with affiliated companies within our corporate family, with third parties with which we have partnered to allow you to integrate their services into our own Services, and with trusted third party service providers as necessary for them to perform services on our behalf, such as:

These third parties (and any subcontractors they may be permitted to use) have agreed not to share, use or retain your personal data for any purpose other than as necessary for the provision of Services. For further information on our sub-processors please refer to our list of Third-Party Data Processors.

We will also disclose your personal data to third parties:

in the event that we sell or buy any business or assets (whether a result of liquidation, bankruptcy or otherwise), in which case we will disclose your personal data to the prospective seller or buyer of such business or assets; or

if we sell, buy, merge, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, your personal data may be among the transferred assets.

Communicating with you. We may contact you directly or through a third-party service provider regarding products or services you have signed up to or purchased from us, such as necessary to deliver transactional or service related communications. We may also contact you with offers for additional services we think you’ll find valuable if you give us consent, or where allowed based upon legitimate interests. You don’t need to provide consent as a condition to purchase our goods or services. These contacts may include:

If you utilise our Services from a country other than the country where our offices are located, your communications with us may result in transferring your personal data across international borders, which will only be done when necessary for the performance of our contract with you, when we have your consent to do so, or when the Standard Contractual Clauses approved by the European Commission, a copy of which can be found here, are in place. Also, when you call us or initiate a chat, we may provide you with support from one of our global locations outside your country of origin.

Compliance with legal, regulatory and law enforcement requests. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any personal data about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (such as subpoena requests), to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical.

To the extent we are legally permitted to do so, we will take reasonable steps to notify you in the event that we are legally required to provide your personal data to third parties.

Please contact debbie@hocdigital.co.uk

If you make a request to delete your personal data and that personal data is necessary for the products or services you have purchased, the request will be honoured only to the extent it is no longer necessary for any Services purchased or required for our legitimate business purposes or legal or contractual record keeping requirements.

We follow generally accepted standards to store and protect the personal data we collect, both during transmission and once received and stored, including utilisation of encryption where appropriate.

We retain personal data only for as long as necessary to provide the Services you have requested and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

mandated by law, contract or similar obligations applicable to our business operations;

for preserving, resolving, defending or enforcing our legal/contractual rights; or

needed to maintain adequate and accurate business and financial records.

If you have any questions about the security or retention of your personal data, you can contact us at nick@hocdigital.co.uk.

We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on our home page, at least thirty (30) days prior to the implementation of the changes.

If you have any questions, concerns or complaints about our Privacy Policy or how we handle your personal data, you may contact our Office of the Data Protection Officer by email at nick@hocdigital.co.uk. In the alternative, you may contact us by either of the following means:

We will respond to all requests, inquiries or concerns within 30 days.

If you are not satisfied with our response, you may direct privacy complaints to the Information Commissioner’s Office.

To find out more please contact Nick Ifield:

Email	nick@hocdigital.co.uk
Telephone	020 7553 7880