How we use your information…
This privacy statement tells you what to expect when ABa collects your personal information. It applies to information we collect about:
- Visitors to our website
- Complaints and feedback received
- Information required for commercial purposes for providing our services to our customers
- Information for marketing of ABa
- Job applicants and current and former employees
- Suppliers, including self-employed contractors
Visitors to our website
When someone visits our website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Use of cookies by ABa
You can read about how and why we use cookies on our Cookies Page.
Submission of your information
Any information submitted through our website is held on our secure platform and protected by appropriate security measures. Only the required personnel have access to this information. Your information will only be used for its stated intended purpose and will not be shared outside of ABa without your express consent, which will be sought at the time of you submitting your data.
Complaints and feedback
Should you wish to make a complaint, our complaints process is available upon request. All information received during the course of a complaint is handled with the same high level of security and privacy as any other information we collect.
Information required for commercial purposes
ABa uses information provided by you to provide our products and services to our customers. This data is used solely for its intended and stated purposes, including financial information used for issuing invoices and receiving payments.
Protecting your information
To protect your information, we maintain robust security controls, including:
- Monitored Firewall protection
- Malware protection on all platforms
- Encryption on data at rest and in transit
- Ongoing backups
- Auditing for data integrity on an ongoing basis
Information Backups
ABa has a formal backup policy. Upon receiving a valid request to remove personal data, this information will be completely removed from our live production environment. Complete deletion across backup media is achieved in line with our secure retention and overwriting schedule.
Requests for your information
You have the right to request a copy of the personal information we hold about you. We will respond to all valid requests within the statutory 30-day timeframe. Information is provided free of charge; however, where requests are manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or refuse to act on the request. All information will be provided in a secure digital format (such as a PDF document).
Marketing Information
ABa collects information from various public and professional sources for marketing purposes. We retain this information only for as long as it remains relevant to our business relationship or marketing campaigns, after which it is deleted or anonymized.
Sharing information
ABa will not disclose your personal information to third parties except where necessary to provide our services, administer your relationship with ABa, complete any required identification and verification checks, comply with our statutory obligations, or where otherwise required or permitted by law.
Supplier Information (including self-employed contractors)
ABa recognises that some information with regards to our suppliers, including self-employed contractors, may constitute personal data. This information is protected to the same high standard as all other personal data within our environment. It is not shared unless express permission is granted by the individual or required by law.
If any information includes identity and verification check data (eg. identity documents, visas, share codes, or digital verification records to fulfil legal duties to verify eligibility to work in the UK), this is retained only for as long as necessary to fulfil our statutory obligations as required by current UK legislation. Once these obligations end, your information is permanently destroyed.
Sharing: Any required verification checks may be processed through certified digital identity verification services or government bodies where necessary to fulfil statutory compliance checks.
Job applicants
When ABa receives job applications, we hold these securely. Application forms are securely destroyed after the selection period is completed. This information is not shared externally and is only accessible internally by the relevant designated personnel. If we wish to retain an applicant’s contact details for future potential opportunities, we will seek express consent prior to keeping this information.
Current and former employees
All personal information held by ABa on current and former employees is managed and maintained securely. Current employees have the right to view the data held about them at any time by making a formal request through their line manager; former employees may request their data by following our standard information request process, detailed above.
All information, including identification and verification records, is retained only for as long as necessary to fulfil our legal and statutory obligations as required by current UK legislation. Once these obligations end, your information is permanently destroyed.
Reporting of Data Breaches
ABa reports significant personal data breaches to the Information Commissioner’s Office (ICO), as well as affected customers or suppliers where required by law. All potential security incidents are fully investigated in accordance with our Information Security Incident Policy. Where a reportable breach occurs, it will be notified to the ICO within 72 hours of detection.
Security and Certification
ABa takes information security seriously. We maintain formal certification under the following international standards:
- ISO 27001 Information Security Standard
- ISO 9001 Quality Management Standard
- ISO 22301 Business Continuity Standard
Our management systems are independently audited and verified on an annual basis.
Data Protection Officer
ABa have designated the Technical Director as their Data Protection Officer (DPO). To contact the DPO please email: [email protected]