Privacy notice
Last updated
Who we are
Assize Data Ltd (“we”, “us”) is the controller for the personal data described in this notice. We are a private limited company registered in England and Wales, company number 17510115, with our registered office at c/o IWN Accountancy, The Echo Building, 18 Albert Road, Bournemouth BH1 1BZ.
This notice covers assizedata.co.uk, and any other website that we run under one of our trading names and that links to this notice. We also trade as Assize News; see our brands.
You can contact us about anything in this notice at dataprotection@assizedata.co.uk, or by post to the address above, marked “Data protection”. Our registration with the Information Commissioner’s Office is described on our data protection page.
What we collect, why, and for how long
When you visit this website
Our hosting provider, Cloudflare, processes technical information about each request so it can deliver the website and protect it from attack: your IP address, browser and device details, the page requested and the time. We do not keep our own web server logs.
We use Cloudflare Web Analytics to count visits. It does not use cookies or similar technologies, does not build a profile of you, and gives us only aggregate figures such as page views.
Lawful basis: our legitimate interests in running a secure, working website and understanding, in aggregate, how it is used.
When you contact us
If you use our contact form or email us, we collect your name, your organisation if you give it, your email address and whatever you choose to tell us in your message. We use this only to reply to you and to keep a record of our correspondence.
Our contact and job application forms use Cloudflare Turnstile to tell people apart from automated abuse. When you start filling in a form, Turnstile assesses signals from your browser and device; we receive only a pass or fail result.
Lawful basis: our legitimate interests in responding to enquiries and keeping our form free of abuse or, if you are asking about working with us, taking steps at your request before entering into a contract.
How long we keep it: for up to two years after our last contact with you. If your enquiry leads to us working together, it becomes part of that client record and is kept for as long as that record is.
When you apply for a job
If you apply for a role with us, we collect your name, email address, your note to us, any links you share, your CV if you send one, your confirmation that you have the right to work in the UK, and anything you tell us about adjustments you need. Only the people involved in recruiting see your application. We use it to consider you for the role you applied for and to contact you about it. We do not make recruitment decisions by automated means.
If you tell us about adjustments you need, that may include information about your health. We use it only to make those adjustments.
If we offer you the role, we will carry out the right to work checks the law requires, and give you a separate privacy notice for employees.
Lawful basis: taking steps at your request before entering into an employment contract, and our legitimate interests in recruiting the right people. For information about adjustments, our obligations under employment and equality law.
How long we keep it: if you are not offered the role, for six months after we tell you our decision, and then we delete it. If you join us, your application becomes part of your employee record.
When you make a data protection request or complaint
We keep the information needed to deal with your request or complaint, including any correspondence and, where necessary, proof of identity.
Lawful basis: our legal obligations under data protection law. How long we keep it: for three years after the matter is closed.
Who we share it with
We use these service providers, who act on our instructions:
- Cloudflare, Inc.: website hosting, security, analytics, the Turnstile check, and delivery of messages and job applications sent through our forms.
- Microsoft Corporation: email and document storage through Microsoft 365.
We may also share personal data with our professional advisers, or where the law requires us to. We do not sell personal data, and we do not use it for advertising.
International transfers
Cloudflare and Microsoft may process personal data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework, for providers certified under it) or on the International Data Transfer Addendum approved by Parliament.
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict how we use your data
- object to our use of your data where we rely on legitimate interests
- ask for data you gave us to be passed to you or another organisation in a portable form, where that right applies
Some rights apply only in certain circumstances. To use any of them, see our data protection page. We will reply within one month.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at dataprotection@assizedata.co.uk. We will acknowledge your complaint within 30 days and tell you what we are doing about it.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Cookies
We do not use cookies for tracking or advertising. Our cookie statement has the detail.
Changes to this notice
We will update this notice when how we use personal data changes. The date at the top shows when it last changed.