Our customers’ privacy is a priority at IPortalis Limited, and we go to great lengths to protect it ensuring best practice measures are implemented by the service providers we use and our own customer management solutions. We recognise your need to protect and manage any personal information you share with us. Please take a moment to read the following to learn more about our information practices, including what type of information is gathered, how the information is used and for what purposes, to whom we disclose the information, and how we safeguard your personal information.
Information Collection and Use There are situations in which your personal information may help us give you better service. At such times, we may collect personal information relevant to the situation, such as your name, mailing address, phone number, email address, and contact preferences. In some cases, we also ask you to provide information for market research purposes to gain a better understanding of our customers and thus provide more valuable service.
Website Traffic As most Web sites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time, and clickstream data. We use this information, which DOES NOT identify individual users, to analyze trends, to administer the site, to track users’ movements around the site and to gather demographic information about our user base as a whole. This helps us to determine how best to provide useful information to customers and to understand which parts of our websites and Internet services are of most interest to them.
iPortalis Limited is the sole keeper of the information collected.
General Data Protection Regulation (GDPR)
Under GDPR, all personal data obtained and held by us must be processed according to a set of core principles. In accordance with these principles, we will ensure that:
a) processing is fair, lawful and transparent
b) data is collected for specific and legitimate purposes
c) data collected is adequate, relevant and limited to what is necessary for the purposes of processing
d) data is kept accurate and up to date. Data which is found to be inaccurate will be rectified or erased without delay
e) data is not kept for longer than is necessary for its given purpose
f) data is processed in a manner that ensures appropriate security of personal data including protection against unauthorised or unlawful processing, accidental loss, destruction or damage by using appropriate technical or organisational measures.
Your Legal Rights
You have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
- If you want us to establish the data’s accuracy.
- Where our use of the data is unlawful but you do not want us to erase it.
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
- You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Our lawful basis for processing your general personal data
Consent of the Data Subject
We need your consent to make you aware of special offers by either post, email or by telephone. Consent is requested when you contact us via the contact forms in our website. All promotional emails sent to you from iPortalis contain an option to unsubscribe.
Processing necessary for the performance of a contract with the data subject or to take steps to enter into a contract
When we take your order by telephone, fax or email and ask you for all the personal data required, this is so we can enter into a contract with you the customer. This contract being the exchange of goods and/or services in the return for payment. We need the personal data explained with this privacy notice for the exchange of goods and services. We also collect personal data to assist in recruitment processes, HR policies, and employee personal development programs.
How personal data is used
Personal data is used to fulfil commercial processes and to assist in evaluating potential candidates, measuring existing employees personal development, and to support any ongoing HR processes.
How personal data is stored
Data is stored electronically and securely via ISO27001 policy, and physically in a secure off site location.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of the personal data which we hold about you;
- The right to request that we correct any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary to retain such data;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
How to request information or to make a complaint
Should you wish to request which information we hold on you or your company, to amend any data that we hold on you or your company or to make a complaint, please download, complete and return the ‘Subject Access Request Form’ by clicking on the link below and we will act upon your request immediately.