Sopra products and www.sopra.io are owned by Surespark Ltd and the Privacy Policy held on this website is taken from Surespark Ltd.
Personal data
“Personal data” is any information about a living individual which allows them to be identified directly or indirectly from that data (examples include a name, photographs, videos, email address, or address).
Surespark Ltd and personal data
Surespark Ltd equips public, private, and non-profit agencies with solutions that support the planning and delivery of outputs that enhance communities & locales. To enable us to provide our services, we may need to collect and process the following personal data:
· Names, titles, and aliases, photographs;
· Contact details such as telephone numbers, addresses, and email addresses;
· Where appropriate (or required), we may process profile data about your organisation, which might include details of personnel;
· Where appropriate (or required), we may process demographic information such as gender, age, date of birth, marital status, nationality, education/work history, academic/professional qualifications, hobbies, family composition, and dependants;
· Information about any specific accessibility and/or dietary requirements, so that we can deliver accessible services;
Surespark Ltd as Data Controller
Where Surespark Ltd stores and controls personal data, GDPR designates us as “Data Controller” for these purposes. This imposes legal obligations on us to ensure we keep personal data up to date; store and destroy it securely; not collect or retain excessive amounts of data; keep personal data secure, and protect personal data from loss, misuse, unauthorised access and disclosure and to ensure that appropriate technical measures are in place to protect personal data.
We use personal data to:
· Enable us to meet all legal and statutory obligations;
· Enable us to deliver our services;
· Comply with our safeguarding policies;
· Seek your views or comments;
· Notify you of material changes to our business and its services
· Send you communications (following opt-in)
· Request case studies and success stories (published data can be anonymised)
· Monitor our services and to better assess our impact.
The Surespark Ltd and Sopra websites (herein referred to simply as “our websites”) operate cookies, for which, we will ask your consent to install;
Our websites may operate media plugins, which are GDPR compliant, and will adhere to any privacy settings you have chosen for your social media accounts;
Our websites operate a Google Analytics plugin to monitor website usage. This is GDPR compliant and all user data is anonymised;
Surespark Ltd may use other third-party tools for online actvity to facilitate services. Any data collected will be in accordance with their own privacy policies, which do not conflict with Surespark Ltd’s policy. Examples include payment processing, website contact forms and bookings.
Storing your personal data
Surepark Ltd uses Google’s G-Suite, which is GDPR compliant. G-Suite provides cloud storage for our document editing and management, which will include personal data. All Surepark Ltd personnel use 2-step verification, whether on desktop or on mobile, which reduces the risk of unauthorised login attempts and subsequent data breaches. Printed copies of documents containing personal data are locked away securely for as long as needed. Any documents with personal data are securely destroyed.
The legal basis for processing your personal data
Most of our data is processed because it is necessary for our legitimate business interests or any legal obligations (e.g. processing a DBS check). Personal data will not be relayed to any other party, unless consent is obtained and there is a genuine legitimate business interest to do so. Surespark Ltd will never sell personal data.
Data retention
We retain personal data, in-so-far as required by law, and as reasonably so, for our legitimate business interests. This includes 7 years best practice for financial records. Surespark Ltd routinely purges data overtime in keeping with GDPR.
Updating your personal data
Surepark Ltd may contact you periodically to update its data for marketing purposes, where you will be given the option to unsubscribe from our communications.
Your rights and your personal data
You have the right to request from Surespark Ltd what information we hold about you. In order for us to fulfil your request, it is likely we may request proof of your identity, in order for Surepark Ltd to process such as request.
Your rights are:
1. To be informed if we collect or process your personal data and for what purpose, as well as who it will be shared with.
2. To request what information we hold on you, how we use it and how it was obtained.
3. To request data we hold on you is corrected/updated.
4. To request data we hold on you is restricted from further processing or deleted or ported to another data controller.
Requests for access of personal data Surespark Ltd holds may be subject to a reasonable administration fee (£10) and will be fulfilled within 1 calendar month of a request being raised. If there is a reason Surespark Ltd is unable to fulfil a request, we will also notify you. Any requests for 4. above may prevent you from accessing Surespark Ltd services.
Data outside the EU
Personal data is never transferred outside the EU in hard copy format by Surespark Ltd. However, any personal data placed on our systems in electronic format may be stored outside the EU, as per our G-Suite cloud storage, and adhere to Safe Harbour guidelines.
Website
Our websites use contact forms that are processed using SQL databases on the hosts. Our websites are hosted in datacentres in the EU, which are compliant with GDPR.
Contacts
For any questions about our Privacy Policy or any requests, please contact info@surespark.org.uk
Data Misuse
If you believe Surespark Ltd has misused your data or not kept it secure, you can lodge a complaint directly with the Information Commissioners Office. Visit https://ico.org.uk/make-a-complaint/ for details.