This privacy notice tells you what to expect us to do with your personal information.
- Contact details
- Website Cookies Policy
- What information we collect, use, and why
- Lawful bases and data protection rights
- Where we get personal information from
- How long we keep information
- Who we share information with
- Sharing information outside the UK
- How to complain
Contact details
Full name of legal entity: Intrepid Design Associates Ltd
FAO: Peter Leitch (Data Privacy Manager)
Email address: peter@intrepiddesign.co.uk
Postal address: 54 Meadow Road, Earley, Reading RG6 7EX
Telephone number: 01189 109971
Website Cookies Policy
What are cookies?
Like most websites, Intrepid’s websites use cookies to collect information. Cookies are small data files which are placed on your computer or other devices (such as smart ‘phones or ‘tablets’) as you browse this website. They are used to ‘remember’ when your computer or device accesses our websites. Cookies are essential for the effective operation of our websites and to help with your user experience.
Information collected
Google Analytics
When someone visits www.intrepiddesign.co.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
How are cookies managed?
The cookies stored on your computer or other device when you access our websites are designed:
– By third parties, and are necessary for your browsing experience on our website;
What are cookies used for?
The main purposes for which cookies are used are: –
1. For technical purposes essential to effective operation of our websites, particularly in relation to site navigation.
2. To enable Intrepid to collect information about browsing patterns.
3. To allow visitors to share our content on Social Media.
How do I disable cookies?
If you want to disable cookies you need to change your website browser settings to reject cookies. How you can do this will depend on the browser you use. Further details on how to disable cookies for the most popular browsers are set out below: –
For Microsoft Internet Explorer:
1. Choose the menu “tools” then “Internet Options”
2. Click on the “privacy” tab
3. Select the setting the appropriate setting
For Google Chrome:
1. Choose Settings> Advanced
2. Under “Privacy and security,” click “Content settings”.
3. Click “Cookies”
For Safari:
1. Choose Preferences > Privacy
2. Click on “Remove all Website Data”
For Mozilla firefox:
1. Choose the menu “tools” then “Options”
2. Click on the icon “privacy”
3. Find the menu “cookie” and select the relevant options
For Opera 6.0 and further:
1. Choose the menu “Files”> “Preferences”
2. Privacy
What happens if I disable cookies?
This depends on which cookies you disable, but in general the website may not operate properly if cookies are switched off.
Third Party Links
This website includes links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of the website you visit.
What information we collect, use, and why
We collect or use the following information to provide services and goods, including delivery:
- Names and contact details
- Addresses
- Purchase or account history
- Payment details (bank information for transfers and direct debits)
- Website user information (including user journeys and cookie tracking)
- Photographs or video recordings
- Information relating to compliments or complaints
- Information relating to sponsorship
We collect or use the following information for service updates or marketing purposes:
- Names and contact details
- Addresses
- Location data
- Information relating to sponsorship
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
- Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
- Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide services and goods are:
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
- Intrepid Design Associates Ltd has several lawful bases for collecting and using personal information to provide services and goods. Primarily, the company relies on the performance of a contract as a basis, which means that personal data is processed to fulfill obligations related to client projects, such as delivering design services or products. Additionally, the company may use personal data based on legitimate interests, where processing is necessary for the pursuit of Intrepid Design Associates Ltd’s business activities, including communications about relevant services, updates, or new offerings that can benefit the client or stakeholder. In some cases, consent may also serve as a lawful basis, particularly when the individual has expressly agreed to receive marketing communications or be included in newsletters. Furthermore, Intrepid Design Associates Ltd may process data to comply with legal obligations, ensuring adherence to regulatory requirements, such as tax reporting or data protection laws.
Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
- Intrepid Design Associates Ltd has a legitimate interest in contacting business contacts, as it enables the company to build and maintain meaningful professional relationships, promote innovative design solutions, and support the growth of their partners’ and clients’ businesses. By reaching out to relevant stakeholders, Intrepid Design Associates Ltd can offer insights into bespoke design and branding services, inform them of new developments or industry trends, and provide opportunities for collaboration that are aligned with the unique needs of each business. This proactive communication is mutually beneficial, as it allows business contacts to access cutting-edge design expertise and leverage creative solutions that can enhance their brand presence, increase their market competitiveness, and ultimately drive their business success. Additionally, engaging in these communications ensures that companies stay informed of emerging design trends and innovations that could be advantageous to their strategic goals.
Where we get personal information from
- Directly from you
- Publicly available sources such as LinkedIn
How long we keep information
Retention Schedule for Intrepid Design Associates Ltd
- Client Contact Information (Name, Email, Phone Number)
- Purpose: To communicate and provide design services, maintain client relationships, and manage contracts.
- Retention Period: 6 years after the completion of the last project or contract, in line with legal obligations for business records.
- Reason: To fulfill contractual obligations, maintain service records, and comply with legal requirements.
- Prospective Client Information (Collected from LinkedIn or Other Networking Sources)
- Purpose: To market and promote services to individuals who may be interested, based on legitimate interest.
- Retention Period: 2 year from the date of the last meaningful interaction or connection, unless the individual engages or opts in for further communication.
- Reason: To ensure communications remain relevant and compliant with data protection regulations, and to prevent keeping data unnecessarily.
- Supplier and Partner Contact Information
- Purpose: To manage business relationships, project coordination, and contractual obligations.
- Retention Period: 6 years after the end of the business relationship or contract.
- Reason: To comply with legal and financial record-keeping requirements.
- Marketing and Newsletter Subscribers
- Purpose: To send updates, industry insights, and marketing materials (with consent or based on legitimate interest).
- Retention Period: Until the individual unsubscribes or withdraws consent, or 2 years from the date of the last engagement with the content.
- Reason: To maintain an active and engaged marketing list and comply with data protection laws.
Who we share information with
Data processors
MailChimp / Data processor
This data processor does the following activities for us: As a data processor for Intrepid Design Associates Ltd, Mailchimp provides essential tools and services for managing and executing email marketing campaigns. Mailchimp processes personal data, such as email addresses and names, solely on behalf of Intrepid, following the company’s instructions. Specifically, Mailchimp stores and organises contact lists, facilitates the creation and distribution of newsletters and marketing emails, and tracks engagement metrics like open rates and click-throughs to analyse the effectiveness of campaigns. As a data processor, Mailchimp ensures the security and privacy of this data, using measures to protect it from unauthorised access while helping Intrepid comply with relevant data protection laws. Additionally, Mailchimp supports Intrepid by offering options for managing data subject requests, such as unsubscribing or updating contact information.
Others we share personal information with
- Professional or legal advisors
- Relevant regulatory authorities
- External auditors or inspectors
- Professional consultants
- Organisations we’re legally obliged to share personal information with
- Suppliers and service providers
Sharing information outside the UK
Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.
For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.
Organisation name: The Rocket Science Group LLC d/b/a (doing business as) Mailchimp
Category of recipient: Online marketing platform
Country the personal information is sent to: USA
How the transfer complies with UK data protection law:
The transfer of personal data from the UK to Mailchimp, based in the United States, is conducted in compliance with UK data protection law through several key measures:
1. Standard Contractual Clauses (SCCs): We use Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO) to safeguard the international transfer of data. These legally binding clauses ensure that Mailchimp upholds data protection standards equivalent to those required under UK GDPR.
2. Data Processing Agreement (DPA): We have entered into a Data Processing Agreement (DPA) with Mailchimp, which outlines the responsibilities of Mailchimp as our data processor. The DPA specifies that Mailchimp will only process personal data according to our instructions, implement appropriate security measures, and support the rights of data subjects.
3. Adequacy and Risk Assessment: Before transferring data, we carry out an assessment to ensure that Mailchimp can provide adequate protection for personal data. This involves reviewing Mailchimp’s security measures, such as encryption, regular audits, and access controls, to ensure that data remains secure and protected.
4. Additional Safeguards: Mailchimp employs technical and organisational measures, including data encryption in transit and at rest, to enhance data security. These measures are designed to ensure that personal data is protected from unauthorised access and breaches, even when transferred outside the UK.
5. Transparency and Data Subject Rights: We are committed to transparency about our data transfers and inform individuals that their data may be transferred to the United States. We ensure that individuals’ rights are respected, including the right to access, correct, or object to the processing of their data. Mailchimp assists us in fulfilling these obligations under UK GDPR.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated
19 November 2024