Chlikk Consultancy Privacy Policy

Changes to this Privacy Notice

This Privacy Notice is 1.0 and is valid from 00:01hrs on 05.08.2024. It replaces and supersedes all other Privacy Notices associated with Chlikk Consultancy Ltd. We take your privacy very seriously. This Privacy Policy details what personal data we collect and how we shall use it.

We continually review our Privacy Notice and update it where necessary. We advise that you regularly check our Privacy Notice for updates. We do not wish to bother you with lots of minor amendments, but where we make significant changes to our policy, we shall contact you to inform you.

Our Name & Contact Details

The Data Controller of your personal data is Chlikk Consultancy, trading style of Chlikk Limited. This means that Chlikk Consultancy decides how your personal data is processed and for what purposes.

Contact Details

Should you regarding a data protection matter you can do so at:
E: enquiries@chlikkconsultancy.co.uk
A: Chlikk Consultancy, trading style of Chlikk Limited
3rd Floor
86-90 Paul Street
London
EC2A 4NE

Personal data categories we collect

We may collect, use, store and transfer different kinds of personal data about you which we have categorised as follows:

Identity Data: This includes first name, last name, Company Name, type.
Contact Data: This includes email address and telephone numbers.
Financial Data: This includes bank account information and payment details.
Technical Data: This includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Usage Data: This includes information about how you use our website, products and services.
Marketing and Communications Data: This includes your preferences in receiving marketing from us and your communication preferences.
Aggregated Data: This includes statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
Special Categories of Personal Data: This includes health and vulnerability related data that you may voluntarily share with us during the fulfilment of our services to you. We will always ask for your explicit consent to record and share Special Category Data.

Purposes for processing personal data, and the lawful Basis’ associated with the same

Chlikk Consultancy processes your Personal Data for the following purposes:

Contract Basis

Supply, perform, manage and fulfil our products and services to you
Manage fees, charges & refunds
Communicate with clients to fulfil, administer or enforce contractual obligations via email, telephone, SMS text, postal mail
Communicate with customers where we have your consent to do so via email, telephone, SMS text, postal mail and push notifications

Legal Obligation

Communicate with clients on matters where we have a legal obligation to do so via email, telephone, SMS text, postal mail
Verify the identity of individuals where necessary including for Subject Access Requests (SAR)
Update clients about changes to how we process their personal data and/or new processing activities via email, telephone, SMS text, postal mail
Prevent, detect and investigate fraud, crime, and to otherwise comply with the law
Maintain our own accounts and records

Legitimate Interest

Communicate with clients on matters where we have a legitimate interest to do so (see legitimate interest section below), via email, telephone, SMS text, postal mail and push notifications
Offer/ market our own similar or aligned products and services to our existing customers
Gather feedback for service and product improvement via email, telephone, SMS text, postal mail
Resolve complaints and/or disputes
Collect payments or arrears should we have the need to do so
Protect our organisation, staff, associates, suppliers, partners and clients
For reporting, analytics and product/service improvement (including training)
Improve and maintain data accuracy or completeness
Track your email engagement
Personalise your online experience
Conduct market research

Consent

Introduce/market 3rd Party products and services which are aligned to our existing customers
Share testimonials, case studies and feedback on our website and future marketing
Request continuation of Consent prior to consent expiry

What are our legitimate interests for processing your data?

Where we have used legitimate interest as the lawful basis for processing your personal data, we may:

Direct market products and services to you via post, emails, telephone and SMS text where they are similar/aligned to our current products and services, a soft opt-in exists, and it conforms with the Privacy and E-Communication Regulation;
Request specific consent to share customer personal data with specific fulfilment partners so that we may introduce/market their aligned products and services to our existing customers where we believe it may benefit the customer;
For reporting, analytics and product/service improvement (including training);
Improve and maintain data accuracy or completeness;
Track your email engagement;
Conduct market research. Including research on the demographics, interests and behaviour of our customers in order to help us gain a better understanding of different audiences and enable us to improve our service. This research may be carried out internally by our employees or we may ask another company to do this work for us. Data will be anonymised to protect your data rights for research purposes.
Resolve complaints and/or disputes.

Sharing your personal data

Chlikk Consultancy Ltd may choose to share your personal data internally and/or externally to the business. Where we share your information, we shall do so for the following reasons:

Where we have your “Consent” to do so.
Where we process your data under the consent lawful basis you have the right to withdraw consent. Please refer to “Your Right to Withdraw Consent” section below;
Where necessary to fulfil the services and/or products we are “Contracted” to provide to you;
Where we have a “Legal Obligation” and are required by law and to law enforcement agencies, judicial bodies, government entities, tax authorities or regulating bodies around the world, this includes communicating with you to update you about our privacy notice and changes to how we process your personal data;
Where we have “Legitimate Interest” to do so
Where we believe it is necessary to protect or defend our rights, property or the personal safety of our people or visitors to our premises or websites;
HM Revenue & Customs: We’re required to disclose certain data with the HMRC.
The Information Commissioner’s Office (ICO) if requested to do so.
There may be other organisations such as Solicitors, Accountants, Police with whom, we are legally obliged to share data with, if they request it.
Where we outsource support functions of our organisation to trusted partners. The categories of these recipients include:

Where we choose to and/or have your permission to share your personal data with 3rd
Parties we will, where appropriate, ensure that they have signed a contract that requires them to:

Abide by the requirements of all relevant data protection and privacy legislation;
Treat your information as carefully as we would;
Only use the information for the purposes it was supplied (and not for their own purposes
or the purposes of any other organisation); and
Allow us to carry out checks to ensure they are doing all these things.

Right to Withdraw Consent

If we are processing your data based on you having given us consent to do so, you have the right to withdraw this consent at any time and we will stop processing your data for that particular activity. To withdraw your consent, please email us at enquiries@chlikkconsultancy.co.uk

Geographical Locations of processing

Chlikk Consultancy do not process data outside of the EEA. All data processed by Chlikk Consultancy is processed inside the EEA and is, therefore, directly covered by either the General Data Protection Regulation 2016 or UK Data Protection Act 2018.

Personal Data Retention

Chlikk Consultancy maintains a retention schedule which defines for how long we will store your
personal data. We will only store personal data for as long as we have a legitimate need to retain it, either for statutory/legal reasons or because we need the data to be able to provide you with services or for other legitimate business needs. When we no longer need this information, we will anonymise your data and/or dispose of it securely. A copy of our retention schedule is available by request to enquiries@chlikkconsultancy.co.uk.

Data Subjects’ Rights

The rights available to individuals in respect of the processing, unless subject to an exemption under
legislation, are as follows:

Your right of access. You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You can read more about your Right to Access here. In most cases Chlikk Consultancy will not charge for this service however we do have the right to charge an administrative cost should we feel the request is excessive (excessive means that you submit a subject access request multiple times for the same or similar information). Fees will not exceed £50. Information will be provided within 28 calendar days from the day you request it. We will take all reasonable steps to verify your identity before providing you with details of any personal information we may hold about you.
Your right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. You can read more about your Right to Rectification here.
Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances. You can read more about your Right to Erasure here.
Your right to the restriction of processing. You have the right to ask us to restrict the processing of your information in certain circumstances. You can read more about your Right to the Restriction of Processing here.
Your right to object to processing. You have the right to object to processing if we are able to process your information because the process forms part of our public task, or is in our legitimate interests. You can read more about your Right to Object to Processing here.
Your right to data portability. This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about your Right to Data Portability
here.

Rights related to automated processing.

Due to the bespoke nature of our work, Chlikk Consultancy do not use automated processing. If this changes in the future for any aspect of our work, we will update our privacy policy and advise you of the same. In the meantime you can read more about your rights relating to automated processing here.

If you wish to exercise any of your individual rights, you can do so by e-mailing us at enquiries@chlikkconsultancy.co.uk

Your Right to Lodge a Complaint with the ICO

You have the right to lodge a complaint with the UK’s Supervising Authority: The Information Commissioners Office. Prior to lodging a complaint, Chlikk Consultancy would like the opportunity to address any complaint you may have. Should you have a complaint please in the first instance contact us directly by any of the following methods:

E-mail: enquiries@chlikkconsultancy.co.uk
In writing: Chlikk Consultancy, trading style of Chlikk Limited
Data Protection Complaints
3rd Floor
86-90 Paul Street
London
EC2A 4NE

If your complaint has not been resolved, you can lodge a complaint with the Information Commissioners Office by the following methods:

Tel: 0303 123 1113
E-mail: https://ico.org.uk/global/contact-us/email/
In writing: Information Commissioner’s Office
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire.
SK9 5AF.