In this document, we will explain how and what we do with your data, who we share it with and what your rights are over us as a Data Controller/Processor.
Companies and websites covered in this Privacy Policy
The following companies and websites are covered by this privacy notice.
Irene Harrison
ireneharrison.co.uk Contact us
Should you wish to contact Irene Harrison for any reason with comments, questions or suggestions about our privacy notice, or about the way we process your personal information, please send an email to
info@ireneharrison.co.uk Purpose of Processing
We process your data in order to deliver the requested service to you.
Lawful basis for the processing of personal data
Below we describe the various forms of personal data we collect from our website or direct/indirect contact with you along with the relevant lawful basis for the processing of this data.
Due to the complex nature of consent and legal exemption we will, where possible, not use consent as the lawful basis. Where consent has been used we are not always able to fulfil deletion ("Right to be Forgotten") requests, and it is important you understand this prior to accessing our services.
The recipients or categories of recipients of the personal data
There may also be occasions that your personal information is shared when we (Irene Harrison) consider/believe that there is a lawful reason to do so, which is more important than protecting your privacy. This doesn't happen often, but in these circumstances, your information may be shared:
- to find and stop crime and fraud,
- if there are serious risks to the public, our staff or to other professionals,
- to protect a child,
- to protect adults who are thought to be at risk, for example, if they are frail, confused or cannot understand what is happening to them.
The details of the existence of automated decision-making, including profiling
Irene Harrison does not use automated decision-making, where personal data is used.
The details of transfers of your personal data to any third countries or international organisations
Your data that is provided is stored in a database that belongs exclusively to Irene Harrison, and there is no transfer of data to any third (party) countries or international organisations.
Your rights
As a data subject, whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email
info@ireneharrison.co.uk or use the information supplied in the Contact section below. To process your request, we will ask you to provide two valid forms of identification for verification purposes. Your rights are as follows:
The right to be informed
As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
The right of access
You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any third-party requester, we will provide access to the personal data we hold about you as well as the following information:
a) The purposes of the processing,
b) The categories of personal data concerned,
c) The recipients to whom the personal data has been disclosed,
d) The retention period or envisioned retention period for that personal data,
e) When personal data has been collected from a third party, the source of the personal data.
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If requests are frivolous or vexatious, we reserve the right to refuse them. If answering requests is likely to require additional time or occasions unreasonable expense (which you may have to meet), we will inform you.
The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
The right to erasure (the 'right to be forgotten')
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
Due to the complex nature of consent and legal exemption, we are not always able to fulfil deletion ("Right to be Forgotten") requests, and it is important you understand this prior to accessing the service.
The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:
a) The accuracy of personal data is contested.
b) Processing of personal data is unlawful.
c) We no longer need personal data for processing, but the personal data is required for part of a legal process.
d) The right to object has been exercised, and processing is restricted pending a decision on the status of the processing.
The right to data portability
You may request your personal data be transferred to another controller or Processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfillment of a contractual obligation.
The right to object
You have the right to object to our processing of your data where;
a) Processing is based on legitimate interest,
b) Processing is for the purpose of direct marketing,
c) Processing is for the purposes of scientific or historical research, or
d) Processing involves automated decision-making and profiling.
The right not to be subject to automated processing, including profiling
You have the right not to be subject to automatic processing, including profiling. However, this shall not apply if the decision:
a) Is necessary for entering into, or performance of, a contract between the data subject and the data controller,
b) Is authorised by member state law to which the controller is subject and which also also lays down suitable measures to safeguard the data subject's and the freedoms and legitimate interests, or
c) Is based on the data subject's explicit consent.
The details of the existence of automated decision-making, including profiling
Website
ireneharrison.co.uk does not use automated decision-making, where personal data is used.
Final provisions
Should you wish to make a complaint against the website
ireneharrison.co.uk for the way we process your personal information, it is your right to do so. We hope that you contact us first at
info@ireneharrison.co.uk so that we may assist you.
This document will reflect any changes in the personal data processing policy by the Operator. The policy is valid indefinitely until it is replaced by a new version.
The current version of the Policy is freely available on the Internet at
http://ireneharrison.co.uk/privacy.