Member Privacy Notice
Comply Direct collects and processes personal data relating to its customers to manage the business relationship and fulfil its’ legal obligations as a government approved producer compliance scheme supporting companies who have a legal obligation under the Packaging, WEEE and Batteries regulations.
Personal data is specific information about personal or factual characteristics relating to an individual who can be identified from that data.
The company is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
What information does the organisation collect and why?
Comply Direct collects and processes the following personal data from all its’ customers;
- Full name
- Job title
- Business contact details
We collect and process this information in order to fulfil our legal obligations as a government approved producer compliance scheme, and for business operational purposes in line with the contracts agreed with our customers.
Passing on Personal Data
We use the personal data which you have provided us with to carry out your requests and requirements for the basis of completion of contract and fulfilment of our mutual obligations under the relevant legislation. Your information may be passed on to the Environment Agency and any other third parties deemed necessary in order fulfil the requirements of the contract.
Comply Direct do not sell, transfer or share or disclose your data and will not do so in future, as we are committed to protecting your data. We will disclose, however if required by law, or for the purpose of the contract we hold with you, unless you have given Comply Direct express consent to do so.
How does Comply Direct protect data?
The company takes the security of your data seriously. The company has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties.
Where the company engages third parties to process personal data on its behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
For how long does Comply Direct keep data?
Comply Direct will hold your personal data for the duration of your contract with Comply Direct, and in line with legal requirements, for four (4) years following the end of the contract.
The member area of the Comply Direct’s website require registration or a password for access. Information obtained from users of these areas may also be used for the Comply Direct’s marketing purposes within the limits of national law. Comply Direct provides a right of access and rectification of personal data under the applicable legislation, please refer to Your Rights below.
Contact from Comply Direct
Comply Direct would like to contact you and keep in touch to provide you with necessary information in connection with your existing contracts and current interests, offers and updates to legislation, company information, news, products and additional services.
You can unsubscribe from our mailing list at any time by emailing us at email@example.com
As a data subject, you have a number of rights. You can:
- access and obtain a copy of your data on request
- require the company to change incorrect or incomplete data
- require the company to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
- object to the processing of your data where the company is relying on its legitimate interests as the legal ground for processing.
If you would like to exercise any of these rights, please contact the HR & Ops Manager firstname.lastname@example.org.
If you believe that the company has not complied with your data protection rights, you can complain to the Information Commissioner.