GAGEWARE PRIVACY NOTICE
Gageware Ltd (“us”, “we”, or “our”) is committed to protecting and respecting your privacy. This Privacy Notice sets out the basis on which any Personal Data we collect from you or that you provide to use will be processed by us. Please read this Privacy Notice carefully to understand our treatment and use of Personal Data. In this Privacy Notice, references to “you” means the person whose personal information we collect, use and process.
​
Gageware operates the https://gageware.co.uk website. We will use your Personal Data only for the purposes and in the manner set forth below, which describes the steps we take to ensure the processing of your Personal Data is in compliance with the Data Protection Acts 1988 to 2018 and any subsequent data protection and privacy legislation, European Union Law including Regulation (EU) 2016/679, known as the General Data Protection Regulation or GDPR and any subsequent amendments (collectively referred to as “Data Protection Legislation”).
​
We seek to maintain the privacy, accuracy, and confidentiality of data (including your Personal Data) that we collect and use concerning our customers. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise declined in this Privacy Notice, the terms used in this Privacy Notice have the same meanings as in our Terms of Use, accessible from https://gageware.co.uk
Effective Date 25 April 2022.
​
1. DEFINITIONS
-
“Service” means the https://gageware.co.uk website operated by Gageware Ltd.
-
“Personal Data” has the meaning given to it in Data Protection Legislation.
-
“Controller” has the meaning given to it in Data Protection Legislation..
-
​
2. IDENTITY OF THE CONTROLLER OF PERSONAL DATA
For the purposes of Data Protection Legislation, the Controller is the Gageware Ltd, a private company limited by shares registered in England (company number 13345696) having its registered office at 23 Sarum Hill, Basingstoke.
​
3. WHEN DOES THIS PRIVACY NOTICE APPLY
This Notice applies to personal information that we collect, use and otherwise process about you in connection with your relationship with us as a customer or potential customer.
​
4. PROCESSING OF YOUR PERSONAL DATA
​
4.1 How and why do we process your Personal Data?
We collect several different types of information for various purposes to provide and improve our Service to you. The Personal Data we collect, the basis of processing and the purposes of processing are detailed below. Sometimes, these activities are carried out by third parties (see “Sharing of Personal Data” section below).
​
Personal data
Personal data including name and email address.
​
Basis of processing
Consent is the legal basis for marketing communications and legitimate interests is the legal basis for all other forms of communication.
​
Purpose of processing
To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or the instructions provided in any email we send.
To provide customer support
​
4.2 Where does Gageware obtain my Personal Data from?
4.2.1 Most of the Personal Data we process is obtained from you when you provide it directly to us e.g. when you fill out a form, register as a user on the Gageware website or send us an email. We may also obtain your Personal Data from other sources in the course of the performance of our functions and activities.
​
4.2.2 We may also collect and process your Personal Data when you visit our website. This may include traffic data, location data, weblogs and other communication data. For more information on how we collect such Personal Data please see our Cookie Policy.
​
4.3 Special Categories of Personal Data
​
Certain categories of Personal Data are regarded as “special” including health data (both physical and mental), political opinions, biometric and genetic data, trade union membership, ethnic or racial origin and sexual orientation. We process your special personal data only where we have a legal basis e.g. with your explicit consent which you may withdraw at any time.
​
5. RETENTION OF DATA
5.1 Gageware will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Notice. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
​
6. DISCLOSURE OF DATA
6.1 Disclosure for Law Enforcement
Under certain circumstances, Gageware may be required to disclose your Personal Data if required to do so by law or in response to valid legal requests by public authorities (e.g. a court or a government agency).
​
7. SHARING OF PERSONAL DATA
7.1 We may employ third party companies and individuals to facilitate our Service (“Service Providers”), provide the Service on our behalf, perform Service-related services or assist us in analysing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to use it for any other purpose.
7.2 In certain circumstances, we share and/or are obliged to share your Personal Data with third parties outside Gageware for the purposes described above and in accordance with Data Protection Legislation.
These third parties include:
• relevant industry bodies;
• external professional advisors; and
• others, where it is permitted by law, or where we have your consent.
​
8. TRANSFER OF DATA
8.1 Your information, including Personal Data, may be transferred, stored and processed on computers located outside of the European Economic Area (“EEA”), for example, when one of our service providers use employees or equipment based outside the EEA. For transfers of your Personal Data to third parties outside the EEA we take additional steps in line with Data Protection Legislation. We rely on the EU Commission’s adequacy decisions for third countries (if applicable) and in the absence of an adequacy decision we have put in place adequate safeguards with respect to the protection of your privacy, fundamental rights and freedoms, and the exercise of your rights, e.g. we establish an adequate level of data protection through EU Standard Contractual Clauses based on the EU commission’s model clauses.
​
8.2 If you would like to see a copy of any relevant provisions, please contact us (see “Contact Us” section below).
​
9. SECURITY OF DATA
9.1 We operate and use appropriate technical and physical security measures to protect your Personal Data.
9.2 We have in particular taken appropriate security measures to protect your Personal Data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access, in connection with the customer relationship. Access is only granted on a need-to-know basis to those people whose roles require them to process your Personal Data. In addition, our service providers are also selected carefully and required to use appropriate protective measures.
​
10. LINKS TO OTHER SITES
10.1 Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Notice of every site you visit.
10.2 We have no control over and assume no responsibility for the content, privacy notices or practices of any third party sites or services.
​
11. CHILDREN’S PRIVACY
11.1 Our Service does not address anyone under the age of 18 (“Children”).
11.2 We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.
​
12. YOUR DATA PROTECTION RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)
12.1 You may have various rights under data protection legislation.
These may include:
​
Your right
Right of access
​
What does it mean?
Subject to certain conditions, you are entitled to have access to your Personal Data which we hold (this is more commonly known as submitting a “data subject access request”).
​
How do I execute this right?
Requests for such information should be made in writing to chris@gageware.co.uk. If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.
​
Conditions to exercise?
We must be able to verify your identity. Your request may not affect the rights and freedoms of others, e.g. privacy and confidentiality rights of other customers. Data solely retained for data backup purposes is principally excluded.
​
---
​
Your right
Right of data portability
​
What does it mean?
Subject to certain conditions, you are entitled to receive the data which you have provided to us and which is processed by us by automated means, in a commonly-used machine readable format.
​
How do I execute this right?
Requests should be made in writing to chris@gageware.co.uk. If possible, you should specify the type of information you would like to receive to ensure that our disclosure is meeting your expectations.
​
Conditions to exercise?
The GDPR does not establish a general right to data portability. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means (e.g. not for paper records). It affects only Personal Data that was “provided” by you. Hence, it does, as a rule, not apply to Personal Data that was created by Gageware.
​
---
​
Your right
Rights in relation to inaccurate personal or incomplete data
​
What does it mean?
You may challenge the accuracy or completeness of Personal Data which we process about you. If it is found that Personal Data is inaccurate, you are entitled to have the inaccurate data removed, corrected or completed, as appropriate.
​
How do I execute this right?
We encourage you to notify us of any changes regarding your Personal Data as soon as they occur, including changes to your contact details, telephone number, immigration status.
​
Please always check first whether self-help tools are available.
​
If no such tools are available, requests should be made in writing to chris@gageware.co.uk.
​
Conditions to exercise?
This right only applies to your own Personal Data. When exercising this right, please be as specific as possible.
​
---
​
Your right
Right to object to or restrict our data processing
​
What does it mean?
Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your Personal Data.
​
How do I execute this right?
Requests should be made in writing to chris@gageware.co.uk.
​
Conditions to exercise?
This right applies only if the processing of your Personal Data is explicitly based on our so-called “legitimate interests” (see “basis of processing” above). Objections must be based on grounds relating to your particular situation. They must not be generic so that we can demonstrate that there are still lawful grounds for us to process your Personal Data.
​
---
​
Your right
Right to have Personal Data erased
​
What does it mean?
Subject to certain conditions, you are entitled, on certain grounds, to have your Personal Data erased (also known as the “right to be forgotten”), e.g. where you think that the information we are processing is inaccurate, or the processing is unlawful.
​
How do I execute this right?
Requests should be made in writing to chris@gageware.co.uk.
​
Conditions to exercise?
There are various lawful reasons why we may not be in a position to erase your Personal Data. This may apply (i) where we have to comply with a legal obligation, (ii) in case of exercising or defending legal claims, or (iii) where retention periods apply by law or our statutes.
​
---
​
Your right
Right to withdrawal
​
What does it mean?
You have the right to withdraw your consent to any processing for which you have previously given that consent.
​
How do I execute this right?
Requests should be made in writing to chris@gageware.co.uk
​
Conditions to exercise?
If you withdraw your consent, this will only take effect for the future.
​
​
13. YOUR RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
You have the right to make a complaint with the Data Protection Authority, in particular in the Member State of your residence, place of work or place of an alleged infringement, if you consider that the processing of your Personal Data infringes the GDPR. The Irish personal Data Protection
Authority contact details are:
Information Commissioner's Office
Telephone: +44 0303 123 1113
For further information please visit https://ico.org.uk/global/contact-us/
​
14. CHANGES TO THIS PRIVACY NOTICE
14.1 We may update our Privacy Notice from time to time at our sole discretion. We will notify you of any changes by posting the new Privacy Notice on this page.
14.2 We will let you know via email and/or a prominent notice on our website https://gageware.co.uk, prior to the change becoming effective and update the “effective date” at the top of this Privacy Notice.
14.3 By continuing to use our services after we email and/or post any such changes, you accept and agree to this Privacy Notice as modified.
​
Contact Us
For further information or if you have any questions about this Privacy Notice, please contact us:
Email: chris@gageware.co.uk
​
​