XL Marketing - Privacy Policy
ICO Registration number: ZA779196
This Privacy Policy sets out the data processing practices of XL Marketing Grp Ltd. Please note that all data thus captured will be used and held in accordance with the requirements of the Data Protection Act 2018.
XL Marketing Grp Ltd is a UK based market-leading full-service provider of B2B Direct Marketing, Database Solutions, Application Development and Digital Marketing.
We specialise in providing contact centre services in the form of outbound lead generation, appointment setting and survey gathering. We also specialise in providing profitable acquisition, retention and business intelligence solutions utilising our expertise across our List Sourcing, List management, Data cleaning & Enhancement, Analysis and Data Processing functions.
XL Marketing Grp Ltd is the controller and our Data Protection Officer is Mark Salisbury. If you have any requests concerning your personal data or any queries with regard to how we handle your data you can contact the Data Protection Officer by phone on (+44)01772 585111, email marks@xlmg.co.uk or write to us at XL Marketing, Park Hall, Park Hall Road, Charnock Richard, PR7 5LP.
Purpose of processing your personal data
Data collection and use
All data collected will be used solely by XL Marketing Grp Ltd either for carrying out our business function of providing database solutions, as well as our internal marketing communications and for our web site evaluation.
Marketing
Our web site does not automatically capture or store personal information, other than logging the user’s IP address and session info such as the duration of the visit and the type of browser used. Through Google Analytics, this is recognised by the Web server and is only used for system administration and to provide usage statistics.
We would like to use your personal data to send you details of products or services that we offer that we have identified as likely to be of interest to you. We will only send you the information in line with the preferences you indicated when you provided the personal data.
If at any point you would like to opt-out of receiving communications from us or would like to change the channels (such as email or post) that we use to contact you, please contact our DPO, Mark Salisbury at marks@xlmg.co.uk. You can also use the ‘Marketing Preferences’ section on our website. (https://engagemg.co.uk/marketing-preferences/)
Enquiries and Website order Forms
You may be asked for personal information (restricted to carrying out our business function) and company information if you would require further information on our services, upload/transfer data files or if you wish us to contact you. In each case, we will only use the personal information you provide to deliver the information you have told us you require, and you will be informed of what we will collect and agree on this in advance. We do store, contact name, company name, full address, telephone, fax and email. Should you wish to withdraw your consent to marketing communications from XL Marketing Grp, please contact us. There is a facility on our website for you to state your communication preferences and to update them as and when they change.
Please see below the lawful basis attributed to each data processing activity:
Data subject’s rights
As is your right under GDPR, you are entitled to know exactly what data XL store about you. This Act is called the Access to Information. Should you request to access any information we have about you, we will supply it within 3 days (72 hours).
The right to be informed – you have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, who we will share your data with. If you have any questions on how and why we process your data, please contact the Data Protection Officer
(DPO). If you want to know more about this right, the ICO has more guidance on their website: ICO (Right to be informed)
Right of access – you have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: ICO(Right of access)
Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: ICO (Right to rectification)
Right to erasure – this right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: ICO (Right to erasure)
In such a case, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.
Retention periods
We will keep your personal data in connection with the services/products you have bought for 7 years after the last purchase. We need to retain this data for our own accounting purposes and for legal and tax purposes.
In terms of personal data, we use for marketing, we will keep this data for as long as we are able to market to you and if you withdraw your consent or opt-out of marketing communications, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.
Third-party websites
Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.
This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy we will communicate these to you.
Third Party Websites
Our website may contain links to other websites that are outside our control and are not covered by this privacy policy. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their own privacy policy. This may differ from ours!
The privacy policy is regularly reviewed and will be updated when deemed necessary. If we make significant changes to the policy we will communicate these to you.
Data Breach Procedures
The UK GDPR introduces a duty on all organisations to report certain personal data breaches. If we become aware of a data breach we will report this to the relevent data authority within 72 hours. If a breach is likely to result in a high risk of adversely affecting individuals' rights and freedoms, we will also inform those individuals without undue delay.
Data Protection Officer: Mark Salisbury marks@xlmg.co.uk
Registration Number: ZA246531