This privacy notice is provided to demonstrate our transparency by informing you about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.
Who we are.
We are Spacetitle Ltd., trading as Xpress Group and we are the Data Controller. We are a company registered in England under number 02521856. Our address is Studio 30-32 The Bell Centre, Newton Road, Crawley, West Sussex, RH10 9FZ. We can also be contacted at enquiries@xpressgroup.uk or on 01293 616848.
The purpose for processing your data and our basis for doing so
We will process your personal data for the purpose of managing our commercial relationship with you, including invoicing and to identify potential new customers. We also undertake marketing activity on a business to business basis. The data we process comprises your full name, business email address, contact numbers, job title, business name and business address. Our lawful basis for processing your personal data for these purposes is Article 6.1.f UK GDPR – legitimate Interest. Our legitimate interest is to provide high quality services to our customers and engage new customers through our marketing activity.
We will also process personal data through our website analytics and contact form and our basis for this is Article 6.1.a UK GDPR – consent. You are able to withdraw your consent at any time by contacting us directly.
If you fail to provide the information required, we will be unable to provide our services to you.
Recipients of your data
We may disclose your data to third parties:
- It is possible, that we would be obliged to disclose personal information in response to a court order or other lawful obligation.
- Our external accountants will have some limited access to your personal data through the preparation of our accounts.
- If you do not pay your bills, we may choose to engage a third party to recover any money you owe us.
- We may also share your personal data as part of any acquisition or merger activity.
We use third parties to process personal data on our behalf. These are email and document storage platforms, marketing applications and customer relationship management platforms. We also use IT managed service providers, telephony, video conferencing and webhosting.
Transferring your data outside of the UK
Your personal data is stored in the UK and in the EU. The transfer to the EU is in accordance with the EU – UK Adequacy requirements. Data is also transferred to the US and this relies on the UK extension to the EU-US Data Privacy Framework.
Retention periods
The data we collect directly from you is the minimum we require to facilitate the lawful processing described above. Personal data placed on our system will be deleted in accordance with legal obligations, such as HMRC rules (7 years for financial information) or legal contractual rules. For data used for marketing purposes, we will retain your data unless you unsubscribe from our marketing emails. In this case, some of your data will be retained on our suppression list.
Your rights
The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:
You have the right to get access to and copies of your personal data.
- You can ask us to rectify any inaccurate information we may be holding.
- You can request we restrict our processing of your data.
- You have the right to request erasure of your data which has been processed by consent or legitimate interest.
- You have the right to object to processing we undertake under a legitimate interest basis.
If you want to exercise any of these rights, please contact us using the above contact details.
You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.
The Information Commissioner’s Office
Wycliffe House, Water Lane,
Wilmslow,
Cheshire SK9 5AF.
Helpline number: 0303 123 1113