Privacy Policy

Last updated: January 1, 2024

1. Introduction and Overview

This Privacy Policy explains how The Social Halo ("we", "us", or "our") collects, uses, shares, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.

2. Data Controller Information

The Social Halo is trading name for Ziahmco Ltd registered as a data controller with the Information Commissioner's Office (ICO) under registration number 12345678. Our registered office is at Flat 9 Lowood House, Bewley Street, London, UK, E1 0BT.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent (Article 6(1)(a) UK GDPR)
• Contractual necessity (Article 6(1)(b) UK GDPR)
• Legal obligation (Article 6(1)(c) UK GDPR)
• Legitimate interests (Article 6(1)(f) UK GDPR)

4. Personal Information We Collect

We collect and process the following categories of personal information:

• Identity Data (name, title, date of birth)
• Contact Data (email address, telephone numbers, postal address)
• Technical Data (IP address, browser type, device information)
• Usage Data (information about how you use our website and services)
• Marketing and Communications Data (your preferences in receiving marketing)

5. Special Category Data

We do not routinely collect special category data. If we need to process such data, we will obtain your explicit consent unless another legal basis applies.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Different retention periods apply to different types of data.

7. International Transfers

If we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Government or adequacy decisions.

8. Your Rights Under UK GDPR

You have the following rights:

• Right to be informed about our processing
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making and profiling

9. Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Staff training on data protection
• Access controls and authentication procedures

10. Cookies and Tracking Technologies

Our use of cookies and similar technologies is detailed in our separate Cookie Policy. We only use essential cookies without consent, and obtain explicit consent for all other types of cookies in accordance with UK GDPR and PECR requirements.

11. Third-Party Processors

We use carefully selected third-party processors who provide guarantees to implement appropriate technical and organisational measures in compliance with UK GDPR. All our processors are bound by written contracts.

12. Data Breaches

We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

14. Contact Information

For any questions about this Privacy Policy or our data practices, please contact:

15. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.