Data Usage & Cookies and Privacy Management
Data Usage Policy
We take your privacy seriously. Here’s a summary of what data we collect and how we use it. We will never sell your information and we promise to keep it safe.
Who we are: We, SupplyESChange Ltd UK are a London based UK registered consulting firm and initiative, advising and advocating in the areas of Supply Chain social compliance (modern slavery eradication and good labour conditions) and sustainability. Our website address is: http://supplyeschange.com/dev.
We believe in conducting Business Ethically, and the purpose of this business and our website is to support the delivery of improved supply chain labour and environmental conditions. To achieve those results, we wish to facilitate discussion on challenges businesses face and to share guidance to overcome those challenges. Answering some of your questions and supporting your efforts via our occasional email Insight Updates, and discussion sections of this website may be best achieved through allowing you easier login, which requires some collection of personal data, and/or your joining our e-newsletter list.
We are committed to maintaining the privacy of your data, and will not sell it to third parties.
Security: Our website uses an encrypted connection using an HTTPS security certificate. Most browsers enable you to verify this by looking for a (usually green) padlock near the website address. This means that any information between the website and your browser is sent securely and can’t be intercepted or snooped on in transit.
Analytics: When you visit our website we use Google Analytics to collect information on your journey through the website. This information is anonymous and we do not use it to identify you. Google provides a Google Analytics opt-out add on for all popular browsers.
Contact forms: SupplyESChange will use the information you provide on our Contact form to be in touch with you and to provide updates and marketing. Please tick the box marked ‘Email’ to indicate you are happy for us to do this in accordance with our Data Use Policy. Without this tick, we won’t be able to send the latest insights on emerging supply chain labour and environmental risks and how business manage them!
We don’t sell your data: We take data privacy very seriously, and will always treat your information with respect, and will not sell it to third parties.
Removing yourself from our email list: You can change your mind about receiving our emails at any time, just click the unsubscribe link at the bottom of any message you receive from us, or contact us at firstname.lastname@example.org .
What data we Collect: Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you such as:
- Identity Data includes first name, last name, username or similar identifier, title and gender, public social accounts such as Twitter and LinkedIn.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Profile Data includes purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but we understand that it is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
If you fail to provide personal data: Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
- How is your personal data collected?
We use different methods to collect data from and about you, including through:
Direct interactions. You may give us your Identity and Contact by filling in forms, providing a business card or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- subscribe to our publications or newsletters;
- subscribe to our Courses;
- provide us your business card at an event or when we meet;
- request marketing or information to be sent to you;
- enter a competition, promotion or survey; or
- give us some feedback.
When you create a user profile on our website we will collect your name and email address. We store this information securely on the back-end of our website.
As a website with articles, we allow you to comment via your linkedin account, which may include links to some information including personal details (like names and job title or employer). We only do this where the information is already in the public domain and we link to it. Unless you request removal, if you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. If your name or other personal details appear on our website and you would like them removed, please contact us to request this.
What rights you have over your data: If you have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If you sign up to our Updates or other email communications, we will collect data you choose to provide such as your name, email address, company/employer, or perhaps sector and region. This information is stored in MailChimp and perhaps our database and managed by us. When you sign up to our emails and optionally disclose this data, we may use this data to provide you more tailored updates.
If you would like to receive no more than weekly Update emails from us, please sign up here.
If you would like to unsubscribe from our Weekly Update emails do so here.
If you would like to unsubscribe from all SupplyESChange communications, please contact us using the details below.
If you would like to review or update your subscription settings for any of our emails, please click the ‘update subscription preferences’ link which is at the bottom of every email we send.
EVENTS AND MEETINGS
If you provide us your business card or contacts when we meet you at an event, you are likely providing us your name, email address and organisation. We will assume a legitimate interest in updates from us, and our email will indicate to you how you can easily unsubscribe if you are not.
If we hosted an event, we may use tools such as Eventbrite to track similar data, which would be stored in the tool such as Eventbrite to allow us to keep track of attendance levels and carry out day-of-event tasks including registration, name badges and content customisation. Eventbrite will use this information to send transactional emails regarding the event you have registered for (e.g. your ticket and attendance reminders).
A record of your registration will be synchronised with Mailchimp to allow us to keep you up to date in the run up to the event, and share news of future events if you consent to our doing so. We will never use this information for marketing purposes unless you explicitly give consent.
How we will use your data:
Besides keeping you updated about our articles, courses, podcasts, services, possible events, and other topics we believe you will be interested in, we may also use your personal information for administrative reasons, including:
- in relation to correspondence you have entered into with us whether by email, letter or any other means, and to contact you about any content you provide;
- for internal record keeping to keep a record of your relationship with us and as necessary for our legitimate interests (to keep our records updated and to study your interest and views on SupplyESChange issues and/or our products);
- to implement any instructions you give us to with regard to withdrawing consent to send marketing information or informing us that you do not wish to receive any marketing information;
- We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, events and offers may be relevant for you (we call this marketing).
- as necessary to comply with any legal obligations.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
If you apply for a job at our organisation we may store your CV/application form in a central secure repository, unless you request it deleted, or we do after a reasonable time. We do not collect any data from your CV or application form other than for the purpose of that particular recruitment.
It is your choice as to whether you receive communications from SupplyESChange.
If you wish to opt-out and stop receiving Updates, or request a change in frequency you can do so by unsubscribing here or contacting us here info@SupplyESChange.com.
If you have any questions about this privacy notice, including any requests to view, edit or remove your personal data, please contact us on info@SupplyESChange.com or via:
Full name of legal entity: SupplyESChange Limited
Postal address: 27 Old Gloucester St, London, WC1N 3AX, United Kingdom
Telephone number: +44 7557359598
SupplyESChange takes the following precautions to keep your data secure:
When you sign up to our newsletter your data is held in Mailchimp. Access to our Mailchimp account is password protected and limited to a small number of employees and contractors.
If you send us your CV a copy is held in Office 365 Exchange Email Server. This is password protected and encrypted. Access is limited to only necessary employees.
If you register for an event your data may be held in Eventbrite or a similar service. Access is limited to the a small number of employees for the purposes of putting on the event.
WHO HAS ACCESS TO YOUR INFORMATION?
We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
The following third-party services work on our behalf. Follow any of the links to view the Privacy Policies for those services.
Microsoft Microsoft run Office 365, the subscription software service that hosts our email and document storage systems.
Worldpay merchant services allows small and large businesses to take card payments securely online, over the phone or using card machines. We may use them to process payments from our website.
Eventbrite is an event management and ticketing system. We may use them to carry out event registration, keep track of event attendance figures and send out reminders.
We may have to share your personal data with Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
TRANSFERRING DATA OUTSIDE OF THE EU: Your personal data may be transferred outside of the EU to countries with different data protection laws. When you submit your personal data, you consent to this transfer, storing and processing. When transmitting data outside of the EU we take all necessary precautions to ensure that it is done so securely and that your right to privacy is upheld.
CHILDREN: Anyone aged under 13 must seek parental permission in order to allow their data to be stored. If you know of someone under 13 with their data stored with us, you should contact us directly to notify us.
LEGAL BASES FOR COLLECTING AND USING INFORMATION
Under EU data protection laws, we collect and process information on the following bases:
We have a legitimate interest in using your information – for example in order to provide the content on our website and in our updates, to carry out our hiring process or to seek support for the Pledge for the Manifesto we promote;
We have a legal obligation – for example to keep financial records, to fulfil reporting commitments or to maintain records for libel purposes;
We have your consent – for example if you have accepted the placement of cookies or opted in to receive email communications.
- Data retention
How long will you use my personal data for?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We will though delete your data on your request, within a reasonable time period of response to your request.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
DATA USAGE POLICY CHANGES
SupplyESChange may change its Data Usage Policy from time to time and encourages visitors to frequently check this page for any changes. Your further use of the Services after a change to our Data Usage Policy will be subject to the updated policy.
This policy was last updated on: 02/11/2018
No changes to date.
What Are Cookies
For more general information on cookies see the Wikipedia article on HTTP Cookies.
You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site.
The Cookies We Set
This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content. For more information on Google Analytics cookies, see the official Google Analyticspage.
Some of the content on our site is provided by third parties. This includes but is not limited to: Google Maps for interactive mapping, YouTube or Vimeo for hosted video and Instagram for images. When you visit a page containing content from one of these sites a cookie may be set. We do not have any control over these cookies and you should check the relevant third party website for more information about these.
Hopefully that has clarified things for you. If there is something that you aren’t sure whether you need or not, it’s usually safer to leave cookies enabled in case it does interact with one of the features you use on our site.
This policy was last updated on: 02/11/2018
No change yet.