Becontree Heath Privacy Policy
This Privacy Policy explains how Becontree Heath collects, uses, stores and protects personal data relating to customers in the Becontree Heath area. It also explains your rights under the United Kingdom General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Becontree Heath customers in the local area, regardless of how you interact with us, including in person, by post, or through any digital service we may operate.
Who this Privacy Policy applies to
This Privacy Policy applies to individual customers, prospective customers and individuals acting on behalf of business customers within the Becontree Heath area. By engaging with Becontree Heath services or providing personal data, you acknowledge that you have read and understood this Privacy Policy.
Types of personal data we collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and which services you use:
Identity data, such as your name, title, and any identification numbers you provide in the course of receiving services.
Contact data, such as your postal address, billing address, and any other contact details you choose to share with us.
Customer account data, such as records of services requested, purchase history, service preferences, and communication preferences.
Financial and transaction data, such as payment amounts, payment status, and related billing information. Payment card details are handled in a secure manner and only where necessary for processing payments.
Technical and usage data, where relevant to the services you use, such as details about how you interact with any online services we may operate, including device information, log information and usage statistics.
Correspondence data, including records of enquiries, complaints, feedback and any other communications between you and Becontree Heath.
We collect personal data directly from you when you provide it to us, as well as automatically through our systems, for example through records of service delivery or online usage.
Lawful basis for processing personal data
Becontree Heath processes personal data only where there is a lawful basis under the UK GDPR. Depending on the context, we may rely on one or more of the following lawful bases:
Contract: We process your personal data where it is necessary to enter into or perform a contract with you, for example to create and manage your customer account, provide services, process payments and handle related customer service.
Legal obligation: We process certain information where we are required to do so to comply with legal and regulatory obligations, including record keeping obligations, tax and accounting requirements, or to respond to lawful requests from public authorities.
Legitimate interests: We may process your personal data where this is necessary for our legitimate interests or those of a third party, provided that your interests and fundamental rights do not override those interests. This includes managing our relationship with you, improving services, preventing fraud, and ensuring the security of our systems and premises.
Consent: In some situations we rely on your consent to process your personal data, for example for certain types of direct marketing or optional services. Where we rely on consent, you have the right to withdraw that consent at any time.
How we use your personal data
We use personal data for the following purposes:
To provide and manage services for Becontree Heath customers in the area, including setting up accounts, scheduling, delivery and ongoing service management.
To process payments, issue invoices, manage refunds and handle other financial transactions related to the services you use.
To respond to enquiries, complaints and service requests and to provide general customer support.
To manage our relationship with you, including notifying you about changes to our terms, services or this Privacy Policy.
To improve and develop our services, systems and processes, for example by analysing how services are used and implementing service enhancements.
To protect our rights, property and safety, and that of our staff, customers and the wider public, including through the prevention, detection and investigation of fraud or other unlawful activity.
To comply with legal and regulatory obligations, including responding to lawful requests from authorities and maintaining appropriate business records.
Data processors and third party sharing
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to support the delivery and administration of our services and are required to process personal data only in accordance with our instructions and with appropriate security measures in place. Examples of such processors include:
Payment processing providers that securely process card and other payments.
IT service providers that host, maintain or support our systems and data storage solutions.
Customer service and administration providers who help us manage communications and service delivery.
Professional advisers such as accountants, auditors or legal advisers where necessary for legitimate business and legal purposes.
We may also share personal data with other third parties where required by law, where necessary to protect our rights or the rights of others, or in the context of a business restructuring, provided that appropriate safeguards are in place.
We do not sell your personal data. Any third party with whom we share personal data is required to respect the security and confidentiality of your data and to comply with applicable data protection laws.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. When determining the appropriate retention period, we consider the type of personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data and whether we can achieve those purposes through other means, as well as legal and regulatory requirements.
In general, customer and transaction records are retained for a period consistent with applicable limitation periods and statutory record keeping requirements. After the relevant retention period expires, personal data will be securely deleted, anonymised so that it can no longer be associated with an identifiable individual, or otherwise removed from our active systems.
Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures include access controls, secure storage, and procedures designed to limit access to personal data to those who have a business need to know. While we take reasonable steps to ensure the security of your data, no system can be guaranteed to be completely secure.
Your data protection rights
As a data subject under the UK GDPR, you have a number of rights in relation to the personal data that Becontree Heath holds about you. Subject to certain conditions and exemptions, these include:
Right of access: You have the right to request confirmation as to whether we process your personal data and, if so, to receive a copy of that data and certain additional information.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or completed.
Right to erasure: You have the right to request that we delete your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as while we are verifying the accuracy of the data or assessing an objection you have raised.
Right to data portability: You may have the right to receive personal data that you have provided to us in a structured, commonly used and machine readable format and to transmit that data to another controller where technically feasible.
Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Rights in relation to consent: Where we rely on your consent for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.
Exercising your rights and complaints
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle your personal data, you can contact us using your preferred communication method as made available through our usual customer service channels. We will respond to requests and enquiries in accordance with applicable data protection laws.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we have the opportunity to address your concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make changes, we will update the effective date and take reasonable steps to inform customers where appropriate. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data as a Becontree Heath customer.
