This Privacy Notice covers personal information provided to Weighbridge Trust Limited (“Weighbridge”, “we” or “our”) when you engage our services, when you use our website or when you request information from us. We are committed to protecting your personal information when you use our services. Personal data is any information that be used to identify you as a person.
In providing our services, we must obtain certain data from you, which may be construed as constituting personal data for the purposes of The Data Protection (Bailiwick of Guernsey) Law, 2017 (the “DP Law”). At all times, we shall process personal data in accordance with the requirements of the DP Law.
What personal information do we collect and why do we collect it?
When you engage with us, such as enquiring about services (including through our website), or enter into any agreement for services with us, we will request personal information about you, which will include your name, email address and other personal information. By giving us your details, you enable us to address your query or to provide services to you. From time to time, we may also undertake checks utilising accredited screening software, which searches publicly available databases.
We are obliged by law to hold certain additional personal information on clients and certain associated parties, which will include Customer Due Diligence, which we are required to hold by law as a business licensed by the Guernsey Financial Services Commission.
Personal data collected from you directly or by the other means described may be utilised for the purpose of entering into and maintaining a contract with you and/or providing services (which may not necessarily require us to have a contract directly with you, e.g. as a beneficiary of a trust) and/or to provide information to you in response to your enquiry, and/or to comply with regulatory requirements and applicable laws.
Who do we share your personal information with?
We may disclose your personal data to:
- outsourced service providers so we can provide services to you and maintain and update our website. In these circumstances we will ensure that the third party service provider will be contractually bound to process your personal information in accordance with the DP Law;
- law enforcement agencies, judicial bodies and government bodies as may be required by law or regulation; and
- to regulator(s) and/or associated parties because of our legal obligations.
This may require us to disclose and transfer your information to third party service providers, regulators and other bodies and agencies in the United Kingdom, EU or other jurisdictions. Unless the transfer is necessary for the performance of our services or you have expressly consented to the transfer of the personal information, or the transfer is otherwise permitted under the DP Law, we will only transfer your personal information to a country or territory that is deemed to have an adequate level of protection under the DP Law, or where there are adequate safeguards in place to protect the personal information.
We shall not provide your information to any other third parties (e.g. for marketing purposes) without your express consent and acknowledge that such consent may be withdrawn by you at any time.
How do we use your personal information?
We use your information for a number of reasons, including to contact you regarding an enquiry received from you, to complete transactions envisaged by our services and/or to meet contractual, legal and regulatory obligations.
When may we contact you?
We may contact you in relation to any service you have enquired about, where you have opted to receive further correspondence and in relation to a service we have agreed to provide. We may also need to contact you to obtain further information to meet our legal and regulatory obligations under the DP Law.
How will we manage your personal information?
At all times, information provided to us will be protected by appropriate security measures in accordance with our data protection obligations under the DP Law.
Howsoever collected, information shall only be collected by us and, as such, we are the data controller for the purposes of the DP law.
How long will we store your personal information?
Your personal information shall be held at all times in accordance with and for as long as our statutory and regulatory requirements require it. This includes a retention period following the cessation of our provision of services to you. Our standard retention period is 6 years, however we reserve the right to hold your data for differing periods, which shall, at all times, be determined by our legal and regulatory obligations. As soon as such obligations cease to apply, we shall permanently erase all personal information held on you from our records within a maximum period of 12 months.
Cookies, Web Statistics and third party monitoring
Cookies are small text files which are stored on your computer or device by your web browser. When you visit our site, we may automatically collect certain information including your IP address, your browser type, the type of device you use to access the website, your operating system, your geographical location and the content you view.
The information generated by the cookies regarding our website is anonymised and transmitted and stored by Google Inc on servers that may be hosted in the United States. Google Inc uses this information for the purpose of evaluating use of our website, compiling reports on website activity for website operators and providing other related services to Weighbridge Trust Limited. Google Inc may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google Inc’s behalf. Google Inc does not associate your IP address with any other data held by Google Inc.
By using our website you consent to the processing of data about you by Google Inc in the manner and for the purposes set out above.
What are your rights?
You have certain rights and protections granted to you under the DP Law. These include, but are not limited to:
- your right to request that your personal data be corrected or updated (your right to rectification);
- your right to obtain a copy of your personal data (your right of access). Please note that Guernsey law requires us to keep certain types of information confidential, which may limit your right of access;
- your right to restrict our processing of your personal data where certain conditions apply (your right to restriction of processing);
- your right to request that your personal data be erased in certain circumstances. For example, when we have no legal ground for holding it (your right to erasure);
- your right to withdraw your consent to our processing of your data at any time;
- your right to object to the processing of your personal data for direct marketing;
- your right, if you switch to another provider, to request that we transmit your personal data to the new provider in a commonly-used machine readable format. (your right to data portability); and
- your right not to be subject to decisions based on automated processing when there are no legal grounds justifying the use of automated processing.
If at any time you believe we hold information in error or that the information we hold on you is inaccurate or incomplete, or wrongly held, you may submit a request to us to consider rectifying and/or erasing it.
If you request a copy of your personal information, one copy will be provided for free but we reserve the right to charge a small fee where more than one copy is requested or where the request is unfounded, repetitive and/or excessive. Where a request is submitted, we will require you to prove your identity with 2 pieces of approved photographic identification. Once identity has been verified, we will use reasonable efforts to supply, correct or delete personal information about you on our files within one month of the request.
If at any time you are concerned with the information held, the way in which we hold it or are unhappy with any response from us in relation to information held or with any other element relating to your personal information, you may lodge a complaint.
We would ask that you contact us in the first instance and we will seek to resolve any concerns as soon as possible. You also have a right to lodge a complaint directly with a regulatory authority, in Guernsey this is the Guernsey Data Protection Authority (“DPA”):
Guernsey Information Centre
St. Peter Port
Decisions of the DPA can be appealed to the Royal Court.
Details of the complaints and appeals processes are available on their website at www.dataci.gg.
Data Protection Point of Contact
The primary point of contact for all data protection purposes is the Data Protection Point of Contact (DPOC), Emma Skillet. Should you wish to make contact or require any further information on any of the above, please contact the DPOC through compliance @weighbridge-trust.co.uk.
Updates to this Notice
This Privacy Notice may be updated from time to time so you may wish to check it each time you submit personal information to Weighbridge.