For much of the personal information we collect and process through the services, we act as a data processor on behalf of our clients. In such cases, if you want to exercise any data protection rights that may be available to you under applicable law or have questions or concerns about how your Personal Information is handled by William Martin Compliance as a processor on behalf of our individual clients, you should contact the relevant the data controller that is using our services and refer to their separate privacy policies. If you are using our services but are not aware of who the data controller is, please contact our Support Team by emailing firstname.lastname@example.org and we will provide you all relevant contact details. The personal data we hold may span across multiple data controllers if you use our Services on behalf of more than one company.
How we collect information
To provide and improve our services, we collect information about visitors to our sites and applications, users of our services, the devices they use, and sometimes their locations.
We collect certain information directly from you, such as when you fill out forms with a name or email address. It is important that your personal data we hold is accurate and up to date, please inform us if your personal data changes. We collect other information, usually about devices, browsers, or locations, automatically (without you typing it into a form).
You have choices about whether you visit our sites, install our apps, or provide information to us. However, if you do not provide us with certain information, you may not be able to use our service.
Information we collect from you
You provide us with information about yourself when you:
- Register or log in to your account
- Edit your user profile
- Contact our support team, consultants or management teams
- Respond to questionnaires or surveys
Examples of the information you provide are: name, email address, job title and phone number.
Information we collect automatically
We automatically collect information from you and your devices when you use our services, even when you visit our sites or apps without logging in.
The information we automatically collect includes:
- Device and usage information: We collect information about how you use our services and the computers or other devices, such as mobile phones or tablets, you use to access our services. Some examples include:
- IP address
- Precise geolocation information that you allow our apps to access (usually from your mobile device). If you do not want us to see your device location, you can turn off location sharing on your device, change your device privacy settings, or decline to share location on your browser.
- Unique device identifiers and device attributes, like operating system and browser type
- Usage data, such as: web log data, referring and exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages and content viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used our services, the frequency of your use of our services, error logs, and other similar information
You can choose to decline cookies through your browser settings. However, if you decline cookies, you may not be able to use some parts of our services.
Information we collect from other sources
We may collect information about you from others, such as:
- Our clients: Our clients (the data controllers) may give us your information. For example, to register you as a user to access our services, they will give us your details which may include; your name, job title, email address and telephone number.
Information we collect and process on behalf of our clients
When our clients use our services, we process and store certain information on their behalf as a data processor. For example, in Meridian when a client (or the clients authorised users) upload documents to the system or log incident data, we act primarily as a data processor and process information on the clients’ behalf and in accordance with their instructions. In those instances, the client as the data controller is responsible for all aspects of the processing of the information. If you have any questions or concerns about how information is processed in these cases, including how to exercise your rights as a data subject, we recommend contacting the relevant the data controller that is using our services, and refer to their separate privacy policies. If you are using our services but are not aware of who the data controller is, please contact our Support Team by emailing email@example.com and we will provide you all relevant contact details. The personal data we hold and process about you on behalf of our clients may span across multiple data controllers if you use our Services on behalf of more than one company.
Use of your information
Where you are using our services on behalf of our client, we rely on legitimate interests in performing our contract with our client as the lawful basis on which we collect and use your personal data. We use the information held about you in the following ways:
- To provide you with the services you request
- To provide our client with the services they require
- To record details about what happens with electronic documents, such as who uploaded/downloaded them and when these events occur
- To create and review data about our users and how they use our services
- To test changes in our services and develop new features and products
- To fix problems you may have with our services, including answering support questions and resolving disputes
- To manage the Meridian Website including support systems and security
- To prevent, investigate and respond to: fraud, unauthorised access to or use of our services, breaches of terms and policies, or other wrongful behaviour
- To meet legal retention periods
Lawful basis for processing your information
If William Martin Compliance acts as a controller, our lawful basis for collecting and using your information will depend on the information concerned and the specific context in which we collect or use it.
We collect or use information from you or others only where we have your consent to do so, where we need the information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights. In some cases, we may have a legal obligation to collect or retain personal information or may need the personal information to protect your vital interests or those of another person. For example, when we:
- Use information to create and manage an account, we need it in order to provide relevant services.
- Gather usage data and analyse it to improve our services, we do so based on our legitimate interest in safeguarding and improving our services.
Information storage and sharing
The data that we collect from you and process as a result of your use of the Services is stored at a location in the United Kingdom. It is processed by staff operating inside the European Economic Area (“EEA”) who work for us. Such staff may be engaged in, among other things, the provision of support services.
We share information as follows:
- Where agreed system links are in place. Where our client has agreed a link with a third-party system, Meridian will share data, which may contain personal information, with the third-party system as defined by the agreement.
- Consent. We may share your information in other ways if you have asked us to do so or have given consent. For example, with your consent, we may post user testimonials that may identify you by name.
Retention of information
We keep your personal information for as long as we are contractually obliged, this will often be defined by the data controller. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws. Where there are technical limitations that prevent deletion or anonymisation, we safeguard personal data and limit active use of it.
How we protect your information
Updates to this policy
How to contact us
For questions, comments or requests regarding our use of your information please contact us at firstname.lastname@example.org or William Martin Compliance, 85 Gresham Street, London, EC2V 7NQ