Privacy Policy
Last updated: 19 September 2018
Overview
In accordance with the General Data Protection Regulation, personal data is “any information relating to an identified or identifiable natural person” such as a name, email address, postal address or IP address. Processing of personal data refers to “any operation or set of operations which is performed on personal data”.
This privacy policy sets out how and why McGregor Media processes any personal data that you give us when you use this website. It is written in plain language with as little jargon as possible. It is set out in sections to make it easier to understand.
Contact Forms
What personal data do we process?
Our contact form collects your name and email address.
Why do we process this personal data?
We collect your name so we know who is contacting us. We collect your email address so we can reply to your message if necessary. The lawful basis for processing this data is legitimate interests.
How long do we keep this personal data for?
Personal data from contact forms is kept for as long as is necessary to complete the query.
Who has access to this personal data?
Our administration team has access to this personal data. It is not shared with any third party unless we are legally required to do so.
Google Analytics
What personal data do we process?
We track users’ visits to our website using Google Analytics including where the user was directed to our website from, which pages they visited and for how long, whether they are a first-time visitor or returning visitor. Google Analytics will also track anonymous user demographics including age range, gender and users’ interests depending on whether the user is signed into a Google account on their browser at the time of their visit to our website. Users’ IP addresses are anonymised.
Why do we process this personal data?
We use this data to track our website’s popularity and to see which pages are our most visited, allowing us to enhance our website accordingly. The lawful basis for processing this data is legitimate interests.
How long do we keep this personal data for?
Google Analytics data is held for 26 months.
Who has access to this personal data?
Our administration team has access to this personal data. It is not shared with any other third party unless we are legally required to do so.
Website Security
Our website is secured by SSL to ensure data transferred between our server and your device is encrypted.
We have procedures in place on our website to reduce the risks of a data breach. For example, login forms are protected so that if you enter the wrong login details a certain number of times within a particular period of time, you will be suspended from logging in for a period of time. This deters brute force attacks from bots.
Data breaches
We have procedures in place to detect, report and investigate personal data breaches.
If a data breach is detected, in the first instance we will evaluate the risk to the rights and freedoms of individuals. If a data breach is likely to result in a risk to these rights and freedoms we will notify the Information Commissioner’s Office within the required 72 hours of discovery of the data breach. If a data breach is not likely to result in a risk to the rights and freedoms of individuals, we are not required to notify the ICO of the breach but will document the breach and our reasons for not notifying the ICO.
Where a breach is likely to result in a high risk to the rights and freedoms of individuals, we will notify the affected individuals without undue delay.
Can I see the personal data you hold relating to me?
Please contact us if you would like to see what personal data we are processing. We will provide all your personal data held within one month. If you find any discrepancies in the data, let us know and we will rectify it immediately.