Make Do Drink Privacy Policy
The Data Protection Policy employed by Make Do Drink has been developed as an extension of our commitment to combine the finest quality services with the highest level of integrity in dealing with our clients, suppliers, associates and staff. This policy has been updated to be in line with GDPR standards in our ongoing commitment to protecting the privacy and security of your personal information. This policy guides you through how we collect, store and use information about individuals and organisations. It will be continuously assessed against new technologies, business practices and the changing needs of everyone we deal with.
Make Do Drink is a “controller” of your personal information. Our address is Flat 3, 2 Starkie Street, Preston PR1 3LU
Our Data Protection Policy recognises personal data that deserve protection:
Personally identifiable Information includes, for example, email addresses, billing information, employment status.
A subset of that category, Sensitive Data, deserves additional safeguards. Sensitive Data includes, by way of example, Clients’ confidential data, individuals’ home telephone numbers, Bank Account, Income Tax and National Insurance numbers, interview notes, CV’s, etc. If your relationship with us includes providing Make Do Drink with Sensitive Data, we will protect that information with extra care. We will not distribute Sensitive Data outside of Make Do Drink.
Make Do Drink collects personally identifiable information and sensitive data only when there is a legitimate business need to do so. We need to collect and store your name, address, and other basic personally identifiable information, for example, to provide you with the service you requested, as well as for invoicing purposes.
Our legal basis to use your personal information
We need your information primarily to allow us to perform our contract with you and to enable us to comply with legal obligations such as to pay VAT to HMRC. In some cases, we may use your personal information to pursue legitimate interests of our own (the efficient and effective operation of the business) provided your interests and fundamental rights do not override those interests.
If you fail to provide personal information
The provision of information by you is a contractual requirement. If you fail to provide certain information when requested, we may not be able to perform the contract or services for you.
Data sharing
Services we use include: MailChimp to send information by email, we use TicketTailor for our workshop registration services.
Data retention
We will typically retain your personal and invoicing information for 5 years following conclusion of the event.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Right to withdraw consent (Opt Out)
In any circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us at makedodrink@gmail.com. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Make Do Drink will not sell personal data in any form, including mailing lists. All of our data is for internal use only.
Make Do Drink will continue to oversee implementation of and compliance with our Policy and will adapt the Policy to reflect changes in technology and the expectations of everyone we deal with.
Make Do Drink Data Protection Policy has been developed out of respect for the privacy preferences and choices of our customers, associates and staff. We have established procedures to ensure that every reasonable effort is made to address your concerns.