Law Enforcement jobs in United Kingdom

Data Controllers and those responsible for Data Protection

A data controller is an organisation that collects and uses personal data and has responsibility for how the personal data is used and managed.

A nominated person is the person in an organisation who has responsibility for monitoring compliance with the law and for ensuring that personal data is protected within an organisation.

CollectPro is a trading name of The Collect Group Limited. The Collect Group Limited provides a delivery service to our Clients and is the data controller for the personal data provided by our Clients. The Collect Group Limited is registered in England, number: 08031231.Registered Office: Synergy House, Lawson Street, North Shields, NE29 6TG. The Collect Group Limited’s website is www.collectgroup.co.uk

In the context of this privacy notice, when we use the term ‘we’, it means The Collect Group Limited.

We use your personal data to provide our services to our clients and to you.

We use your personal data to provide our services to you and our clients in the following ways:

• To provide our delivery services to our clients and to improve that service
• To administer any prize draw or competition you may enter
• To analyse your delivery preferences or how you interact with or use our websites and application
• For research, analytical and statistical purposes
• To record and monitor outbound and inbound telephone conversations with you to ensure consistent service levels, to prevent or detect fraud, to resolve queries and complaints and for performance management and training purposes
• Static or moving imagery is used to help maintain the safety and security of our drivers, property, deliveries, collections and the public
• Our app maps collection points and generates data to help us estimate transit times, track journeys and push updates to ensure timely and consistent service levels are provided by our drivers

We will collect your personal data directly from our Clients when they request our delivery services, when they change any of your details (such as your name or address) or from you directly during the delivery service if you change any of your details to arrange re-delivery or similar. We require our Clients to provide your personal data in order to perform our delivery service to that Client and, if you do not provide the personal data we request, we will be unable to fulfil this service.

Some of our vehicles are fitted with recording equipment as well as internal driver and forward-facing cameras.

We need to process your personal data for a number of different reasons and these are our legal bases for processing. We also need to keep your personal data for as long as is necessary for us to operate our business and to comply with legal and regulatory obligations.

We rely on one or more of the following legal bases for processing personal data:

To fulfil our legitimate interests or the legitimate interests of a third party

When we process personal data to fulfil our legitimate interests we will use it in a way in which you would reasonably expect and which will have a minimal privacy impact. When we or third parties are relying on legitimate interests we will balance our interests against your interests and the privacy impact of the processing on you and we will process your personal data responsibly.

Examples of our legitimate interests are: providing our service, fraud prevention, preventing and investigating crime and indicating possible criminal acts as well as ensuring our IT security.

To comply with legal obligations to which our business is subject

We have to comply with relevant law and regulation in order to provide our services and we will need to process your personal data in order to comply with these legal obligations.

We will keep your personal data for the purposes set out in this privacy notice and only for as long as any legal basis continues to apply. Below is a non-exhaustive list of some of the reasons we need to retain your personal data:

Compliance with the requirements of Government Departments investigating crime or fraud.

Ensuring we have relevant information in the event of any queries or complaints.

Being able to identify if you have received a parcel in the event of an investigation.

To assist with the establishment, exercise or defence of legal claims.

The length of time we need to keep the personal data will vary depending on the nature of the personal data and the reason we are obliged to hold it. We will apply appropriate risk based measures to protect your personal data which may include pseudonymising or anonymising the personal data. If personal data is pseudonymised, this means it is de-identified so you are no longer identifiable, but we can re-identify you if we have a requirement to do so. If personal data is anonymised, it is de-identified, but can never be re-identified in the future.

Transferring personal data to other organisations needs to take place with appropriate safeguards and you can be assured that we will only share the personal data that is needed for these organisations to be able to provide the right service to our Clients, you or to support us in doing so.

We may transfer your personal data to the following third parties:

The originating Company who requested your delivery

Technology service providers – our partners who provide IT and website services.

Customer service providers – our partners who work with us to administer your delivery and provide you with any help you may need.

Telephony providers – our partners who provide telephone services and functionality.

Third party delivery companies – our Third Party and/or Self-Employed couriers and parcel firms who may deliver your goods or services and manage any returns on our behalf.

Regulators and other governmental agencies or law enforcement agencies.

Organisations who may be interested in purchasing our business or organisations who we may be interested in purchasing – we may sell parts of our business or acquire other businesses and your personal data may be shared with such third parties as part of this process.

We will only transfer your personal data to third parties who adhere to appropriate data security standards and controls. From time to time we may need to transfer your personal data to other countries. Where this is the case, we will ensure that the transfer is subject to appropriate safeguards to protect your personal data and complies with applicable law which may include having standard contractual clauses in place with the third party.

This is known as a Subject Access Request. If you want to know if we are processing personal data relating to you and to haveaccess to any such personal data you can email our Data Protection Team on data.protection@collectgroup.co.uk

If you believe that we hold inaccurate personal data about you, then you can contact our Client who requested our delivery services or you can email our Data Protection Team on data.protection@collectgroup.co.uk Depending on the type of personal data you believe is inaccurate, we may ask you for further proof to ensure that the personal data is being corrected properly. If we are satisfied that the personal data is inaccurate we will make the necessary changes. Please understand that records of deliveries may not be able to be altered given our mandate to comply with regulatory and law requirements.

You have a right to ask for your personal data to be erased in certain circumstances. However, this right does not apply where we have to comply with a legal obligation or where we need personal data for the establishment, exercise or defence of legal claims. Therefore, we cannot comply with an erasure request where you have been provided services for which we must keep records.

You have a right to request that processing of personal data is restricted in certain circumstances. However, we shall still continue to process the personal data for storage purposes, for the establishment, exercise or defence of legal claims.

Where we are relying on legitimate interests as a legal basis to process your data, you have a right to object to such processing on grounds relating to your particular situation.

You may also object to other processing when we rely on our legitimate interests as the basis for processing, but we do not have to stop the processing if we can demonstrate compelling legitimate grounds for the processing (taking into account our processing activities, the nature of our business and our legitimate interests) and that these grounds override your interests, rights and freedoms or in the event that we need the personal data for the establishment, exercise or defence of legal claims. To enable us to consider any objection we will need to know what specific interests, rights or freedoms relating to your particular situation you believe will potentially be put at risk by our processing. If we do stop processing your personal data, this may affect our ability to deliver our service to our Clients and you.

In certain circumstances, you can request that we provide to you your personal data in a commonly used format. If you wish to make such a request you can email our Data Protection Team on data.protection@collectgroup.co.uk

You have the right to lodge a complaint with the Information Commissioner and more details can be found on their website www.ico.org.uk

If you have any queries about how we use your information or on data protection generally please send an email to data.protection@collectgroup.co.uk or write us at the Data Protection Team, Synergy House, Lawson Street, North Shields, Tyne & Wear NE29 6TG.