How can you contact us?

Address

12 Oak Industrial Park

Chelmsford Road

Dunmow

Essex

CM6 1XN

Contact

01371 532 531

www.avellite.co.uk

What types of personal information do we collect as a company?

Through our standard business operations, we collect the following personal information. It may be noted that we do not collect all this information for every person we interact with.

• Names
• Addresses
• Email Addresses
• Outgoing payment information (sort code & account numbers)
• Website user statistics (basic)
• Visual, written, and personal information contained within photographic and video formats.
• Business information
• Client trading information
• Email contents

How do we obtain the personal data listed above?

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• You have sent us an email or used one of our website forms.
• You have worked with us, and we have rendered a service for you. In doing so, we have asked information from you, and data may be contained within the services rendered (e.g. from photographs, files, or other systems).
• You have rendered a service for us, and we have asked for information regarding payment.

We also receive information from external sources, such as:

• Website analytics service providers such as Microsoft and Google.
• Security service providers such as Proofpoint and SentinelOne when we monitor your systems.

We use the information above to be able to offer a complete and comprehensive service, to offer products in the future to our clients, for the security of our business, and moreover for the security of our client’s businesses, as a part of our contracts.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

• Your Consent which you may revoke at any time by contacting us and stating your intentions via privacy@avellite.co.uk.
• We have a contractual obligation (either inferred or by agreement in the event of business services rendered).
• We have a legitimate interest.

Our primary reason for retaining client data is to offer a complete and comprehensive service; which due to the nature of our field in IT security, we rely on to ensure the safety and data integrity of our client’s information, and thus our own.

We will never pass personal information to a third party without your explicit consent; and under no circumstances do we sell any data to third parties. We hold our client’s security and business interests in the highest regard.

How do we store and dispose of personal information?

Your information is stored securely at all times.

All data is encrypted using industry standard encryption algorithms when at rest. Information is secured in transit using standard encryption methodologies such as SSL, when available. All data is stored at rest in the United Kingdom with multiple layers of redundancy, and always behind 2FA and unguessable passwords on regular rotation.

We keep all personal information for a period of 6 years, and photographic data for a period of 2 years.

In order for us to erase this data, if electronic our service providers destroy the encryption keys for these blocks of storage, so they are undecipherable to any person or computer. If stored on site, we overwrite data multiple times to ensure the data is sufficiently obfuscated. If the personal information is stored as a hard copy, we redact critical information and then shred the information using an industry standard cross shredder. In some instanced, we classify high security documents and incinerate the shreddings.

What are your data protection rights?

Under data protection law, you have rights including:

• Your right of access - you have the right to ask for copies of your personal information.
• Your right to rectification - you have the right to ask us to rectify personal information you think is inaccurate; you have the right to ask us to complete information you think is incomplete.
• Your right to erasure - you have the right to ask us to erase your information in certain circumstances.
• Your right to restriction of processing - you have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - you have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please send us an email at privacy@avellite.co.uk if you with to make a request.

How can you complain?

If you have any concerns about our use of your personal information, you can make a complaint to us as per our complaint’s procedure here.

You can also complain to the ICO if you are unhappy with how we have used your data. Their contact information is as follows:

Address

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Contact

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk