Privacy Policy Notice

The policy: This privacy policy notice is served by Lorna Evans T/A Time and Tide Virtual Personal Assistant, 38 Blackmore Avenue, Bideford, Devon EX39 3TG under the website; https://www.timeandtidepa.co.uk. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information through the business and while you browse or use this website. If you do not agree to the following policy you may wish to cease viewing / using this website, and or refrain from submitting your personal data to us.

Policy key definitions:

• "I", "our", "us", or "we" refer to the business, [Business name & other trading names].


• "you", "the user" refer to the person(s) using this website.


• GDPR means General Data Protection Act.


• PECR means Privacy & Electronic Communications Regulation.


• ICO means Information Commissioner's Office.


• Cookies mean small files stored on a users computer or device.

Key principles of GDPR:

Our privacy policy embodies the following key principles; (a) Lawfulness, fairness and transparency, (b) Purpose limitation, (c) Data minimisation, (d) Accuracy, (e) Storage limitation, (f) Integrity and confidence, (g) Accountability.

Processing of your personal data

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

Legal purpose of the processing of personal data

INFORMATION WE COLLECT

The VA Handbook Ltd collects “Non-Personal Information” and “Personal Information” in the categories described below.

Usage data

Time and Tide PA will process information about your use of our website and services (“usage data”). The usage data may include
(1) The browser types and versions used
(2) The operating system used by the accessing system
(3) The website from which an accessing system reaches our website (so-called referrers)
(4) The sub-websites
(5) The date and time (so-called timestamp) of access to the Internet site
(6) An Internet protocol address (IP address)
(7) The internet service provider (ISP) of the accessing system
(8) The geographical location of the user
(9) The page views and site navigation path
(10) The pattern of the users use of the service with regards to timing and frequency
(11) Any other similar data and information that may be used in the event of attacks on our information technology systems.

The source of the usage data is Google Analytics. We use Google Analytics software to collect information about how you use our site. We do this to help make sure the site is meeting the needs of its users and to help us make improvements, for example improving site search. The usage data collected is needed to:

(1) deliver the content of our website correctly
(2) optimise the content of our website as well as any advertisement
(3) ensure the long-term viability of our information technology systems and website technology
(4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

Google Analytics stores information about:

• The pages you visit


• How long you spend on each page


• How you got to the site


• What you click on while you’re visiting the site

We don’t collect or store your personal information (for example your name or address) so this information can’t be used to identify who you are and we don’t allow Google to use or share our analytics data.

You can opt out of Google Analytics cookies.

In order to process this information, we have obtained the user’s consent in the interest of monitoring and improving our website and services.

Notification data

Time and Tide PA may process information that you provide for the purpose of subscribing to our email notifications and/or newsletters (“notification data”). Our newsletter may only be received by the user if:

(1) the user has a valid email address and
(2) the user registers for the newsletter shipping.

A confirmation email will be sent to the email address registered by a user for the first time for newsletter shipping, for legal reasons, in a double opt-in procedure. The confirmation email is used to prove whether the owner of the email address as the user is authorised to receive the newsletter.

When the user registers for the newsletter, we also store the IP address of the computer system assigned by the internet service provider (ISP) and used by the user at the time of the registration, as well as the date and time of the registration. The purpose of the collection of this data is to legally protect Time and Tide PA by ensuring understanding of the possible misuse of the email address of a user at a later date. The personal information collected as part of a registration for the newsletter will only be used to send our newsletter.

The subscription to the newsletter may be terminated by the user at any time. The consent to the storage of personal data, which the user has given prior to the shipping of the newsletter, may be revoked at any time. For the purpose of revoking consent, a corresponding link for unsubscribing is found in each newsletter.

Enquiry data, correspondence data, and customer relationship data

Time and Tide PA may process information contained in any enquiry you submit to us regarding our services and products (“enquiry data”). If a user contacts us via email or via a contact form, the personal information transmitted by the user is automatically stored.

The personal information may include:

(1) the user’s contact information
(2) the user’s name
(3) the name of the user’s employer
(4) the user’s job title or role
(5) the metadata associated with the communication
(6) and information contained in communications between the user and Time and Tide PA

Such personal data transmitted on a voluntary basis by a user to Time and Tide PA are stored for the purpose of processing or contacting the user, managing our relationships with customers, keeping records of communication with the user, and promoting our products and services to customers.

Publication data

Time and Tide PA may process information that the users post for publication on our website or through our services (“publication data”). On our website the users can post information in the following ways:

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Personal Information

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the servers for our email communications who are provided access to user’s email address for purposes of sending emails from us. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy.

In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers.

Non-Personal Information

In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyse use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

Time and Tide PA may process any of your personal information identified in this privacy policy where necessary for the establishment, exercise or defence of legal claims, both in court proceedings and in an administrative or out-of-court procedure. The legal basis for this processing is the protection and assertion of our legal rights, your legal rights and the legal rights of others.

Time and Tide PA may also process any of your personal information identified in this privacy policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, fulfilment of tax obligations, or obtaining professional advice. The legal basis for this processing is the proper protection of our business against risks.

• We are exempt from registration in the ICO Data Protection Register because we are only processing personal data for the core business purposes.

We shall stop processing your personal information if the lawful basis used is no longer relevant.

Your individual rights

Under the GDPR your rights are as follows. You can read more about your rights in details here;

• the right to be informed;


• the right of access;


• the right to rectification;


• the right to erasure;


• the right to restrict processing;


• the right to data portability;


• the right to object; and


• the right not to be subject to automated decision-making including profiling.

You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data.

We handle subject access requests in accordance with the GDPR.

Data security and protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.

Fair & Transparent Privacy Explained

We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.

Sponsored links, affiliate tracking & commissions

Our website may contain adverts, sponsored and affiliate links on some pages. These are typically served through our advertising partners; Google Adsense, or are self served through our own means. We only use trusted advertising partners who each have high standards of user privacy and security. However we do not control the actual adverts seen / displayed by our advertising partners. Our ad partners may collect data and use cookies for ad personalisation and measurement. Where ad preferences are requested as 'non-personalised' cookies may still be used for frequency capping, aggregated ad reporting and to combat fraud and abuse.

Clickable sponsored or affiliate links may be displayed as a website URL like this; www.societyofvirtualassistants.co.uk or as a titled text link like this: The Society of Virtual Assistants.

Clicking on any adverts, sponsored or affiliate links may track your actions by using a cookie saved to your device. You can read more about cookies on this website above. Your actions are usually recorded as a referral from our website by this cookie. In most cases we earn a very small commission from the advertiser or advertising partner, at no cost to you, whether you make a purchase on their website or not.

We use advertising partners in these ways to help generate an income from the website, which allows us to continue our work and provide you with the best overall experience and valued information.

If you have any concerns about this we suggest you do not click on any adverts, sponsored or affiliate links found throughout the website.

Email marketing messages & subscription

Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the "Processing of your personal data" above. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.

Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.

Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences, you can also unsubscribe from all MailChimp lists, by following this link, otherwise contact the EMS provider.

Our EMS provider is; [name of provider here]. We hold the following information about you within our EMS system;

• Email address


• I.P address


• Subscription time & date


• [list other data that is stored]

Resources & further information

• Overview of the GDPR - General Data Protection Regulation


• Data Protection Act 2018


• Privacy and Electronic Communications Regulations 2003


• The Guide to the PECR 2003


• Twitter Privacy Policy


• Facebook Privacy Policy


• Google Privacy Policy


• Linkedin Privacy Policy


• Mailchimp Privacy Policy


• Small business GDPR policy template

Privacy Notice Policy Base: v.4.1 Dec 2018 - Made available without liability by Jamie King, Website management services.

---

[End of Privacy Policy Notice Template]