Privacy Policy and Terms of Use

We are committed to protecting and respecting your privacy. This policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

Who are we?
We are Paul Evans Associates UK Ltd and trade under the name of Paul Evans Associates (PEA). We are a content lead generation, list brokerage and data consultancy / solutions specialist serving the business to business market.
We are registered in England & Wales No: 11657510
Our VAT registration number is 308 4995 71
Our data protection registration number is Z3163697

How can we be contacted?
Our registered address is: Northwood House, Northwood, Shrewsbury, Shropshire SY4 5NN
Our Data Protection representative is Paul Evans, Managing Director
He can be contacted on: paulevans@paulevansassociates.com or telephone on +44 (0) 1948 710236.

Where do we collect information about you?
We obtain information about you when you use our website, make enquiries for, or purchase our products or services or information that is gathered from publically available sources such as websites or Linkedin. Additionally, we source personalised information directly from list owners who offer GDPR compliant data on decision makers in companies we would like to approach in order to promote our products and services.

Which data subjects do we collect personal information on?
Customers, enquirers, prospects, suppliers, contractors, agents and consultants

What type of information is collected from you or about you?
The information we collect might include your gender, name, job title, company name and address, telephone number, corporate email address as well as other information specific to the nature of our interaction such as business interests and preferences. We do not collect or process any sensitive personal information or special categories of data.

What is the legal basis for retaining this information?
PEA has a legitimate interest in retaining and processing personal data relating to enquirers and prospects who have a potential need for our products and services subject to communications being of a professionally relevant nature with the option for data subjects to opt-out from our communications at any point in time via an easy to use unsubscribe process. Additionally, data subjects can opt-out using our ‘Contact Us’ page. PEA has completed a Legitimate Interests Assessment where we have balanced the needs of PEA with the rights and fundamental freedoms of the data subjects. A copy of our Legitimate Interests Assessment is available on request. In instances where the data subject is an active customer, supplier, consultant, agent or contractor, then the lawful basis for processing would be for the performance of a contract or agreement.

How is your information used?
We may use your personal information to:
- Process an enquiry or request a quotation;
- Process an order for our products or services;
- Conduct market research;
- Carry out our obligations arising from any agreements or licenses entered into e.g. advising you of license/data lease cessation dates relating to a previous order;
- Seek your views or comments on the services we provide;
- Notify you of changes to our services;
- Send you professional business to business communications that based on your companies business activity and your role within the business, may be of interest.

How long do we retain your personalised information?
We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us. We will comply with our obligations as a Data Controller and safe guard your rights under GDPR and the Privacy and Electronic Communication (EC Directive) Regulations 2003.

Who has access to your information?
We will not sell, rent or exchange personal information on customers, enquirers, suppliers and prospects to third parties for their own marketing purposes. The only time that personal information of this nature will be provided to a third party is as follows:
- When we are required to do so by law, for example, by a Court Order or for the purposes of prevention of fraud or other crime or to another authorised governmental body
- When we employ the services of a third party to conduct specific work on PEA’s behalf. Examples of this would include; services required to fulfil a mailing, telemarketing or email marketing campaign on our behalf. Please however be aware that when we use third party service providers, we disclose only the personal information that is necessary for them to deliver the service and we have an agreement in place that requires them to keep your information safe and secure to the standards set out under GDPR.
- As part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or re-organisation. In instances such as this, the acquiring company would be permitted to use your personal data only for the same purposes for which it was originally collected by PEA.
- If we are under a duty to disclose or share your personal data in order to comply with or enforce any terms of business

Where do we process & store data?
We process and store data at our registered office but will from time to time have personal data processed and stored by third parties (under a suitable Data Processor Agreement) elsewhere within the European Economic Area (EEA). Please be assured that we will not transfer your data outside the EEA.

How do we secure your data?
Please be aware that the transmission of information via the internet is not completely secure. We are unable to guarantee the security of your personal data during transmission to PEA. Any transmission is therefore undertaken at your own risk. Once we have received your personal information, we will apply strict technical and organisational security procedures so as to prevent unauthorised access, use, disclosure, accidental loss, deletion or alteration of any kind. Any transmission of personal information from PEA to a third party will be via industry standard file encryption

Your choices & rights as a data subject
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us, then please advise us immediately by post, email or telephone or simply unsubscribe using the link in our emails or via our ‘Contact Us’ page. You will then be suppressed immediately from any future communications based on your specific preferences. Please however be aware that PEA will still need to retain basic information concerning the suppression so as ensure that the data subject is not sourced via alternative means and then accidentally added back into our database.

How you can access and update your information
The accuracy of your information is important to us. You can request copies of the information we hold on you at any time (Subject Access Request or SAR) via post, email or telephone. You have the right to request that this information be amended/corrected if you so desire. We have an obligation to respond to all Subject Access Requests within 28 days from initial receipt although will do our utmost to respond in a more timely fashion.

Use of 'cookies'
Please be aware that PEA does not use cookies. You can therefore access and browse this website without disclosing any associated personal information.

Data Protection Policy
A copy of our Data Protection Policy is freely available – please feel free to request a copy of this document using the ‘Contact Us’ page confirmed above.

Right to complain
If you are unhappy with anything concerning our collection, processing, transfer, storage or disposal of your personal data and we have been unable to resolve the problem for you, you have the right to lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk)

Review of this Policy
We reserve the right to change this Policy without notice so please check this page to ensure that you’re happy with any changes that may have been implemented. This Policy was last updated on 24^th May, 2018.