Note that, where you choose not to receive marketing communications, we may still use your contact details to communicate with you in relation to matters relevant to our relationship with you, such as customer service communications (if you are a client).
    6. Use of data for other standard business purposes
Your personal data may also be used by us:
    ● to maintain appropriate records of our business communications and relationships (in our legitimate interests); and
    ● to protect or enforce legal rights, or for other purposes permitted or required by law, including data protection law (in our legitimate interests, or as needed to comply with a legal obligation).
    7. Sensitive personal data
    We do not generally hold sensitive categories of data about clients and other business contacts described above (for example, information about health, racial or ethnic origin,
or criminal convictions). If any such data becomes relevant (for example if you provide us with information about any special needs which you have relevant to our relationship), we will assess our legal responsibilities at that time and, where appropriate, provide you with additional information about how we may use such data.

    3. SHARING YOUR DATA
        1. Our service providers
Our service providers may handle your data, such as our data centre and technology service providers. They act as processors on our behalf, meaning that we remain primarily responsible for how they use your data on our behalf in line with the purposes and legitimate interests identified in section 2 above.
        2. Other parties
We may also share your data, where relevant, with the following parties

        ● legal authorities or regulatory bodies;
        ● our legal or other professional advisers;
        ● prospective or actual purchasers of our company or business;
        ● other parties to the extent needed to progress an enquiry or request from you, or to provide a service requested by you or your organisation, or if you have consented to us doing so; and
        ● other parties where we are otherwise required or permitted by law to do so (including by data protection law). Our legal bases for such data sharing are, as appropriate, our (or the recipient’s) legitimate interests in the relevant activity, compliance with a legal obligation, or your consent.

    4. INTERNATIONAL DATA TRANSFERS
At the date of this notice, we do not transfer your data outside the UK and the European Economic Area (within which organisations are subject to the UK GDPR or the EU GDPR, which provide protection for and give you rights in relation to your personal data). However, we may have members of our organisation, based outside the UK & EU where data may be transferred to conduct relevant activities based on services provided.

    5. RETAINING YOUR INFORMATION
We will retain your personal data for as long as we need it for the relevant purposes specified above, in accordance with our records retention procedures. Please contact us (using the contact details at section 8 below) for further information about these.

    6. YOUR RIGHTS
In accordance with data protection laws, you have certain rights in relation to our use of your personal data. These rights include the following:
    ● to obtain a copy of the personal data we hold about you, together with other information about how we process it (known as a subject access request);
    ● to withdraw any consent which you have given relating to the use of your data;
    ● to request rectification of inaccurate or incomplete data, and, in some circumstances, to request us to erase or restrict our use of your data, or otherwise to object to our processing of your data for direct marketing purposes or for reasons relating to your particular situation;
    ● where our use of your data is based on your consent or necessity for our contract with you (described as the ‘legal basis’ in the relevant sections above), to exercise a right to data portability, in order to transfer sets of data provided by you and held electronically to another organisation;
   ● not to be subject to a decision based solely on automated processing, which significantly affects you, unless additional legal requirements are met; and
   ● to make a complaint about how we handle your data to the UK Information Commissioner’s Office. Please visit www.ico.org.uk for further information about how to do this (and further guidance on your rights).
Please contact us (see section 8 below) to send us requests to exercise these rights (specifying what you are requesting), or if you would like further information about these and other rights which you have.

Note that there are certain limitations and exemptions to these rights which we may apply depending on the circumstances.

    7. OUR ACTIVITIES AS A PROCESSOR

Note: Our clients have primary responsibility to ensure Carous’s use of the information as outlined in this section complies with data protection and privacy laws. If you have any queries about use of your data for these purposes, they should be directed to the relevant client.

    1. Client websites, CMS and DMS
    ● We design and host content of our clients’ websites, which may provide information about individuals, handle enquiries from individuals, make sales to individuals, assist in handling payments for clients, and have other interactive content. They may also use cookies to collect information about use of the website.
    ● We store and process information from or relating to those websites within our content management and dealer management systems (CMS and DMS).
    ● We may send clients by email details of leads which have been captured by their websites.
In these cases, we collect, use and store (and share with our clients) personal data and related information on behalf of our clients, for the purpose of providing these services.
Such personal data may include names, telephone numbers, email addresses, content of enquiries, details of sales, data collected by cookies, and other content of communications.

    2. Marketing communications
We provide marketing services to our clients, in which case clients may provide us with their marketing lists (including names and email addresses), and we send out marketing
communications on their behalf. This also involves our use of personal data of individuals on such marketing lists on behalf of our clients, for the purpose of providing these services.
    3. Our service providers
In providing the services described above, our service providers may also handle our clients’ data (including your personal data), such as:
   ● our data centre and technology service providers; and
   ● mailing or communications service providers
   8. OUR CONTACT DETAILS

Post: CAROUS LIMITED, OFFICE 126, REGUS, CONCORDE PARK, CONCORDE
ROAD, MAIDENHEAD, SL6 4BY

Email: [email protected]