WPC GDPR and Data Protection Information

1. Introduction

• 1.1 We are committed to safeguarding the privacy of our website visitors, service users, individual customers, and customer personnel. This notice explains how we handle your personal data in compliance with GDPR.
• 1.2 This notice applies where we act as a "data controller" with respect to personal data, meaning we determine the purposes and means of processing that data.
• 1.3 In this notice, "we," "us," and "our" refer to WorkPermitCloud Limited. For more information, see Section 12.

2. The Personal Data We Collect

2.1 We process the following categories of personal data:

• Contact Data: Includes your name, email address, telephone number, postal address, and social media identifiers.
• Communication Data: Includes the content of communications you send to us, as well as metadata associated with those communications.
• Customer Relationship Data: Includes information about your business or employer, job title, and communication records between us and your employer.
• Service Data: Includes personal data you provide during the use of our services (e.g., HRMS or visa and immigration services).
• Transaction Data: Includes data related to purchases, such as your name, contact details, payment card details, and transaction history.
• Usage Data: Includes data such as your IP address, geographical location, browser type, and usage patterns on our website.

2.2 Please do not supply us with another person's personal data unless we specifically request it.

3. Purposes of Processing and Legal Bases

3.1 We process personal data for the following purposes, based on the lawful bases described:

• Operations: Processing personal data for the proper administration of our website, services, and business. The legal basis is our legitimate interest in ensuring efficient operations.
• Relationships and Communications: Managing relationships with customers and communicating with you. The legal basis is our legitimate interest in maintaining customer relationships and providing services.
• Direct Marketing: Sending marketing communications where you have given consent.
• Research and Analysis: Conducting research and analysis to improve our services. The legal basis is consent.
• Security and Fraud Prevention: Protecting our business and preventing fraud. The legal basis is our legitimate interest in ensuring security.
• Legal Compliance: Processing personal data to comply with legal obligations or to protect vital interests.

4. Providing Your Personal Data to Others

4.1 We may share your personal data with:

• Our group companies.
• Insurers or professional advisers.
• Service providers, such as hosting and payment services.
• Research and Analysis: Conducting research and analysis to improve our services. The legal basis is consent.
• Third-party suppliers where required to enable their services.

4.2 We may also share your data if required by law or to protect vital interests.

5. International Transfers of Your Personal Data

5.1 Your data may be transferred to and processed in countries outside the UK or EEA. We ensure appropriate safeguards, such as adequacy decisions or contractual clauses, are in place to protect your data during such transfers.

6. Retaining and Deleting Personal Data

6.1 We retain personal data only as long as necessary for the purposes outlined in this notice.

6.2 We may retain data for longer if required for legal compliance or to protect vital interests.

7. Security of Personal Data

7.1 We take appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access.

7.2 Sensitive data, such as contact information and payment details, is stored in encrypted form.

7.3 We cannot guarantee the security of data transmitted over the internet, but we take reasonable precautions to protect your information.

8. Your Rights

8.1 Under data protection law, you have the following rights:

• Right of access: You can request copies of your personal data.
• Right to rectification: You can request corrections to inaccurate data.
• Right to erasure: You can request deletion of your data.
• Right to restrict processing: You can request restrictions on how your data is processed.
• Right to object to processing: You can object to data processing in certain circumstances.
• Right to data portability: You can request a copy of your data in a structured format for transfer to another service provider.
• Right to withdraw consent: If you have given consent, you may withdraw it at any time.

You can exercise these rights by contacting us at info@workpermitcloud.co.uk.

9. Third-party Websites

9.1 Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we recommend you review their privacy policies.

10. Updating Information

10.1 Please inform us through email at info@workpermitcloud.co.uk. if your personal data needs to be updated or corrected.

11. Changes to this Notice

11.1 We may update this notice periodically by publishing a new version on our website.

11.2 Significant changes will be communicated via email or prominently on our website.

12. Contact Us

If you have any questions about this Privacy Policy, you can contact us:

WorkPermitCloud Limited
The Gherkin, Level 28, 30 St. Mary Axe, London, England, EC3A 8BF
Company Registration No: 12909694
Official working hours: Monday to Friday, 10:00 AM to 6:00 PM (excluding bank holidays)
Email: info@workpermitcloud.co.uk
Website: www.workpermitcloud.co.uk