Privacy Policy
1. Introduction
Welcome to Avalon Strategies. We are committed to safeguarding the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the UK GDPR and the Data Protection Act 2018.
2. Data Controller
Avalon Strategies is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data protection practices, please contact us at:
- Email: [email protected]
3. Data Collection
We may collect and process the following personal data:
- Identity Data: Name, job title, and company information.
- Contact Data: Email address, postal address, and telephone numbers.
- Financial Data: Bank account details for payroll and payment processing.
- Technical Data: IP address, browser type, and version, time zone setting, browser plug-in types, operating system, and platform.
- Usage Data: Information about how you use our website and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
4. Methods of Data Collection
We collect data through:
- Direct Interactions: Filling out forms on our website, corresponding via phone, email, or otherwise.
- Automated Technologies: As you interact with our website, we may automatically collect Technical Data using cookies and similar technologies.
- Third Parties: We may receive personal data about you from analytics providers or search information providers.
5. Use of Data
We use your personal data for the following purposes:
- Service Delivery: To provide and manage our services, including payroll management, tax compliance, HR support, and benefits administration.
- Communication: To manage our relationship with you, including notifying you about changes to our services or policies.
- Marketing: To deliver relevant content and advertisements to you and measure or understand the effectiveness of our advertising.
- Legal Obligations: To comply with legal and regulatory requirements.
6. Legal Basis for Processing
Our legal bases for processing your personal data include:
- Performance of a Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: Processing necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: Processing necessary for our legitimate interests, provided that your interests and fundamental rights do not override those interests.
- Consent: Where you have provided consent for specific processing activities.
7. Data Sharing
We may share your personal data with:
- Service Providers: Third parties who provide services such as IT and system administration, payroll processing, and tax services.
- Professional Advisers: Including lawyers, bankers, auditors, and insurers.
- Regulatory Authorities: HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing, and applicable legal requirements.
9. Your Rights
Under data protection laws, you have the following rights:
- Access: Request access to your personal data.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data.
- Restriction: Request restriction of processing your personal data.
- Data Portability: Request transfer of your personal data to you or a third party.
- Objection: Object to processing of your personal data where we are relying on legitimate interests.
- Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us using the contact details provided above.
10. Cookies and Tracking Technologies
Our website uses cookies to distinguish you from other users. This helps us provide a better experience and allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please refer to our Cookie Policy.
11. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to those employees, agents, contractors, and other third parties who have a business need to know.
12. International Transfers
We do not transfer your personal data outside the UK. If this changes in the future, we will ensure that any transfers comply with data protection laws and that appropriate safeguards are in place.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes.
14. Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us at:
- Email: [email protected]