This privacy notice covers our website, jam-pan.com and the data we collect from you when you use our site, together with the personal data we process when you register for an account as a potential client or supplier and when you contact us with a general enquiry.
These are our reasons for collecting it, what we do with it and what your rights are.
Who are we?
We are Jam-Pan Learning Ltd. Our registered address is Manchester Spinningfields, 3 Hardman Square, Manchester, M3 3HF, ENGLAND (company registration number 08883684).
You can call us on +44(0) 161 397 4974 and email us at firstname.lastname@example.org.
We are the data controller for this processing and are registered with the Information Commissioner’s Office (ICO). Our registration number is ZA589628.
Purpose of processing
We process your personal data:
- to create an account for you as a potential client
- to create an account for you as a potential supplier
- to respond to your enquiry
- to market our services to you
Once you are established as a client or supplier, we will then process your personal data:
- to manage our commercial relationship with you
- to market our services to you
Basis of processing
When you create an account with us as a potential client or supplier, or are using our website as an established client or supplier, our lawful basis for processing your personal data depends on the nature of your business:
- If you are a sole trader or partner in a partnership then we will process your personal data because we are taking the steps required to create a contract with you, or are performing the contract which exists between us.
- If you are acting on behalf of your employer then we will process your personal data because it is in our legitimate interest to do so as we are taking the steps required to create a contract with your employer, or are performing the contract that exists between us and your employer.
Where we are dealing with other general enquiries we process your personal data because it is in our legitimate interest to do so in order to deal with your enquiry.
When we are processing your data for the purposes of marketing our services to you we do so either with your consent, or because it is in our legitimate interest to so to promote our services. Where we are relying on your consent for marketing activity you are free to withdraw that consent at any time, and where we are relying on our legitimate interests you are free to object to that at any time. In either case we will ensure that we cease to market our services to you should you withdraw your consent or object to our legitimate interests.
What personal data do we collect?
When you create an account on our website we collect the following data:
- Your name
- Your email address
- Your password
- Company Name
- Phone Number
- Additional languages spoken
When you become a supplier to Jam Pan we also collect:
- Banking and payment information
- VAT information where applicable
- Contact and commercial records
When you use the enquiry form on our website we collect the following data:
- Your name
- Your email address
- Your country
- Your phone number
Special category data
There are additional rules we must follow if we collect certain types of more sensitive data, known as Special Category Data. These include details of your ethnicity, beliefs, health and sexuality. We do not collect any special category data about you.
Do we ever share personal data?
We will share your data if required to do so by a legitimate law enforcement agency.
When you submit your personal data online your data is held by our partner who hosts our website.
If you consent to the use of analytics and tracking cookies from our website we will share data with those cookie providers (see below).
If we are communicating with you via email or social media channels we will be sharing your personal data with those email and social media providers.
We utilise external suppliers to provide marketing services to us and to support our IT systems, these partners will occasionally have access to your personal data.
We always ensure that we have appropriate contracts in place to protect your rights when personal data are shared with our suppliers.
How do we keep your data secure?
We take sensible steps to keep your data secure:
- All data sent between your browser and our website is encrypted in transit
- We maintain appropriate records of processing activities which record any data processors we use and we ensure that appropriate contracts are in place to protect your rights, that the processors take appropriate security measures to safeguard your data, and that any international transfers are done correctly under UK data protection laws
- Our employees are all subject to an obligation of confidentiality, and receive training on data protection matters
You have a number of rights relating to the processing of your data, if you would like to use them or have any questions then please contact us.
We won’t charge you for doing any of the following, however we may make a charge in the case of frequent repeat requests:
- Awareness: You have the right to be fully informed about why and how we process your information. This privacy notice is intended to meet that requirement, but please do contact us if you have any questions.
- Access: You have the right to a copy of the data we hold about you
- Rectification: If you think some of the data we hold is wrong then you have the right to ask us to correct it.
- Erasure: You have the right to ask us to delete the data we hold about you. Where we are holding the data to fulfil a contract with you then we will need to retain the data in accordance with the data retention requirements shown below.
- Restriction: You have the right to ask us to restrict the processing of personal data whilst we check its accuracy, if you think the processing is unlawful, if you believe we no longer need to process the data but you need us to store it due to pending legal claims, or when you object to our processing based upon our legitimate interests and we are assessing the validity of that.
- Object: Where we are processing your personal data based upon our legitimate interests you have the right to object to that. If your objection is valid (for instance in the case of any direct marketing activity) then we will stop processing your personal data for that purpose.
- Data portability: You can request a copy of your data in a digital format which you can then supply to another provider.
- Automated decisions and profiling: You have the right, in certain circumstances, not to be subject to decisions based on automated processing (including profiling) if it has a significant or legal impact on you. This doesn’t apply if the processing is necessary to fulfil a contract with you, or if you have given us your consent to do so. We do not currently use any technology to make automated decisions about you.
How long do we keep your data for?
Where we are relying on your consent or our legitimate interests to process your data then we will keep your personal data until you withdraw your consent for us to use it, or object to our legitimate interests.
Where are processing your data for the purposes of performing a contract with you or your employer or taking the necessary steps to do so, then we will keep the personal data for 7 years after the end of the contract.
We utilise cookies on our website. Some are required for our site to work, these are known as essential cookies, and we also use others for analytics and marketing purposes.
We will ask for your consent to use any cookies which aren’t essential, and we won’t deploy any non-essential cookies without your consent.
These are cookies we use:
|Name of Cookie||Set By||Type|
|Google Tag Manager||Marketing and Analytics|
|Marketing and Analytics|
What happens when I follow links to other sites?
If you follow a link from our site to another site then you should read the privacy notice on the other site prior to providing your data to them.
Where do we process data?
We primarily process data in the UK.
- Our web hosting provider processes data in the UK
- Our IT Systems (Microsoft) processes data in the UK
We use some other software tools and partners to help us deliver our services, some of these services will mean that your personal data are transferred outside of the UK and EU. We always ensure that appropriate protections are in place to safeguard your rights, as detailed below:
- Our email service provider (Drip) – USA based, Standard Contractual Clauses in place
- Our CRM provider (Zoho) – USA based, Standard Contractual Clauses in place
Making a complaint
Please contact us at the above address. You can also contact the Information Commissioner’s Office (ICO) on their helpline 0303 123 1113 or online at www.ico.org.uk. If you should contact the ICO they will normally ask you to contact us first.