The Citation ISO Certification privacy policy (the “Privacy Policy”) is all about letting you know that we take the protection and management of your personal information very seriously. As a UK based business our handling of your information is controlled by the UK Data Protection Act 2018 and the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019. We, therefore, take great care to protect your personal information or anything which might identify you personally such as:
We collect personal data from you when:
We will also gain personal information from other sources; this includes third parties we purchase or obtain data from to help us identify and grow our business which could include a greater degree of personalisation. Additionally, we may combine these records with other publicly available information to ensure that our records are accurate and up to date.
We also obtain information from other companies within the Citation Group in order to provide a greater level of service and service offering, or to better understand clients and industries we operate in, or where synergies apply to our business and to yours.
Typically, the personal information we get from third parties includes name, phone number, email address, company name, job title, contact preferences.
When you access our website or use our SaaS products, we use tools such as cookies, beacons, and similar technologies to automatically collect information which may contain personal data from your device and usage of our site and services. The nature of what these tools collect differ between website and SaaS product but still fall into similar categories.
For further information regarding cookies and other similar technologies, please see our cookies policy here.
This website uses Mouseflow: a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar meta data. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser.
If you’d like to opt-out, you can do so at https://mouseflow.com/opt-out. If you’d like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at [email protected].
For more information, see Mouseflow’s Privacy Policy at https://mouseflow.com/privacy/
For more information on Mouseflow and GDPR, visit https://mouseflow.com/gdpr/
For more information on Mouseflow and CCPA visit https://mouseflow.com/ccpa/
Our website uses social media icons such as Facebook and Twitter logos and other social sharing widgets. By using these features, you will be connecting to and sharing information from your browsing session with these organisations. If you are logged into your social media account, it is also possible that they will connect your activity on our site to your social media account.
This is also the case if you access our social media pages on a social media platform. The respective social media company may add your interaction to any information they may already have about you or your interests.
In all cases, in that transfer of data the social media provider is a data controller in their own right and are responsible for what they do with your personal data. Further information can be found in the social media providers privacy notice.
Information we obtain from you is used to:
We collect and process personal data for the following purposes and with the following legal bases engaged:
Citation ISO Certification may be required under court order to provide personally identifiable information to government authorities. Providing such government departments/agencies have a legal right to access our records and such enquiries are correctly made, we will supply such authorities with the information they require.
We would only share personally identifiable information with third parties not already covered by this notice if:
We retain your data for as long as necessary to fulfil the purpose for its collection and processing. In some instances, this may be a short period of time, for instance, as an unsuccessful job applicant we may retain your records for only 6 months once the process has concluded. In other instances, and especially where there is a legal obligation to retain your information for a certain period of time, we will do so in order to comply with the legal requirement; this is typically 6 years.
Once your data is no longer required it shall be deleted.
We record all incoming and outgoing calls for contractual and training purposes.
You have various rights in respect of the personal information Citation ISO Certification holds about you – these are set out in more detail below. If you wish to exercise any of these rights, you can do so by contacting our Data Protection Officer at [email protected]. Please note that you will need to provide Citation ISO Certification with evidence of your identity for us to complete you request.
You have the right to: –
Request access to your personal information: You can ask us to provide you with a copy of the personal information that Citation ISO Certification holds about you.
Request correction: You can ask us to change or complete any inaccurate or incomplete personal information held about you.
Request erasure: You can ask us to delete your personal information where Citation ISO Certification has no lawful basis for keeping it.
Right to object: You can object to us processing your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Request restriction: You can ask us to restrict our use of your personal information in the following circumstances: –
Request transfer: You can ask us to provide you or a third party with some of the personal information that e hold about you in a structured, commonly used, electronic form, so it can be easily transferred.
Withdraw consent: If you have given us your consent to use personal information (for example, for marketing), you can withdraw your consent at any time.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
Citation ISO Certification tries to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex, or you have made several requests. In this case, we will notify you and keep you updated.
If you have any queries concerning this policy, please email [email protected] or call us on 0333 3443 646. We endeavour to acknowledge all requests within 1 working day.
Citation ISO Certification tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading, or inappropriate. We would also welcome any suggestions for improving our procedures.
This privacy notice was drafted with brevity and clarity in mind. It may not provide exhaustive detail of all aspects of Citation ISO Certification’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below:
Citation ISO Certification
Muspole Court
Muspole Street
Norwich
NR3 1DJ
Or you can email us at [email protected].
If you want to make a complaint about the way we have processed your personal information, you can contact the Information Commissioner’s Office in their capacity as the statutory body which oversees data protection law – www.ico.org.uk/concerns
Citation ISO Certification reserves the right to change its privacy policies at any time. This policy was last reviewed on the 25th of January 2022.