BACKGROUND:
Assemble You Limited understands that your privacyis important to you and that you care about how your personal data is used. Werespect and value the privacy of everyone who visits this website, https://www.assembleyou.com/ (“ourSite”) and will only collect and use your personal data as described in thisPrivacy Policy and as permitted by law.
Please read this Privacy Policy carefully and ensure that you understand it.Your acceptance of this Privacy Policy is implied by using this website and/orthe licensed content system (“System”).
Information About Us
Our Site is owned and operated by Assemble YouLimited, a limited company registered in England and Wales under company number13136109.
Registered address: 3rd Floor, 86-90 Paul Street, London, EC2A4NE
VAT number: 383 9121 81
Data Protection Officer: Adam Lacey
Email address: support@assembleyou.com
Postal address: 3rd Floor, 86-90 Paul Street, London, EC2A4NE.
The System is owned by Kwantic Limited, a limited company registered inEngland and Wales under company number 14665130 and is made available toAssemble You Limited under license. What Does This Policy Cover?
This Privacy Policy applies only to your use ofour Site and/or the System. Our Site/the System may contain links to otherwebsites. Please note that we have no control over how your data is collected,stored, or used by other websites and we advise you to check the privacypolicies of any such websites before providing any data to them.
What Is Personal Data?
Personal data is defined by the UK GDPR and the Data Protection Act 2018(collectively, “the Data Protection Legislation”) as ‘any information relatingto an identifiable person who can be directly or indirectly identified inparticular by reference to an identifier’.
Personal data is, in simpler terms, any information about you that enables youto be identified. Personal data covers obvious information such as your nameand contact details, but it also covers less obvious information such asidentification numbers, electronic location data, and other online identifiers.
What Are My Rights?
Under the Data Protection Legislation, you have the following rights,which we will always work to uphold:
a) The right to be informed about our collection and use of your personal data.This Privacy Policy should tell you everything you need to know, but you canalways contact us to find out more or to ask any questions using the details inPart 10.
b) The right to access the personal data we hold about you. Part 9 will tellyou how to do this.
c) The right to have your personal data rectified if any of your personal dataheld by us is inaccurate or incomplete. Please contact us using the details inPart 10 to find out more.
d) The right to be forgotten, i.e. the right to ask us to delete or otherwisedispose of any of your personal data that we hold. Please contact us using thedetails in Part 10 to find out more.
e) The right to restrict (i.e. prevent) the processing of your personal data.
f) The right to object to Us using your personal data for a particular purposeor purposes.
g) The right to withdraw consent. This means that, if we are relying on yourconsent as the legal basis for using your personal data, you are free towithdraw that consent at any time.
h) The right to data portability. This means that, if you have providedpersonal data to us directly, we are using it with your consent or for theperformance of a contract, and that data is processed using automated means,you can ask us for a copy of that personal data to re-use with another serviceor business in many cases.
i) Rights relating to automated decision-making and profiling. We do not useyour personal data in this way.
For more information about our use of your personal data or exercising yourrights as outlined above, please contact us using the details provided in Part10.
It is important that your personal data is kept accurate and up-to-date. If anyof the personal data we hold about you changes, please keep us informed as longas we have that data.
Further information about your rights can also be obtained from the InformationCommissioner’s Office or your local Citizens Advice Bureau.
If you have any cause for complaint about our use of your personal data, youhave the right to lodge a complaint with the Information Commissioner’s Office.We would welcome the opportunity to resolve your concerns ourselves, however,so please contact us first, using the details in Part 10.
What Personal Data Do You Collect and How?
Subject to the following, we do not collect any personal data from you. Wedo not place cookies on your computer or device, nor do we use any other meansof data collection.
Our Site collects certain information automatically, including your IP address,the type of browser you are using, and certain other non-personal data aboutyour computer or device such as your operating system type or version, anddisplay resolution.
If you send us an email, we may collect your name, your email address, and anyother information which you choose to give us. For the purposes of the DataProtection Legislation, we are the data controller responsible for suchpersonal data.In the context of your use of the System,personal data made available to Assemble You and the proprietors of the Systemwill be limited to an email address. Alternatively, Assemble You Limited mayelect to deploy an anonymised access code system to facilitate access to theSystem.
The lawful basis under the Data Protection Legislation that allows us to useinformation arising from your use of our Site is article 6(1)(f) of the UK GDPRwhich allows us to process personal data when it is necessary for the purposesof our legitimate interests, in this case, the proper operation andfunctionality of our Site. If you contact us as described above, you will berequired to consent to our use of your personal data to contact you. In thiscase, our lawful basis for using your personal data will be article 6(1)(a) ofthe UK GDPR, which allows us to use your personal data with your consent for aparticular purpose or purposes.The lawful basis under the Data ProtectionLegislation that allows for the processing of your personal data pertaining toyour use of the System is article 6(1)(a) of the UK GDPR, which allows us andthe System proprietors to use your personal data with your consent for aparticular purpose or purposes as well as article 6(1)(b) of the UK GDPR, whichallows for the processing where it is necessary for the performance ofcontractual obligations to you.
How Do You Use My Personal Data?
Where we collect any personal data, it will be processed and storedsecurely, for no longer than is necessary in light of the reason(s) for whichit was first collected. We will comply with Our obligations and safeguard yourrights under the Data Protection Legislation at all times. For more details onsecurity see Part 7, below. Except as stated herein, we do not generallycollect any personal data directly from you, but if you contact Us and weobtain your personal details from your email, we may use them to respond toyour email. The other technical data referred to above is necessary for thetechnical operation of our Site and will not normally be used in any way topersonally identify you. We will not share any of your personal data with anythird parties for any purposes other than storage on an email and/or webhosting server and/or to facilitate your access to the System.
How and Where Do You Store My Data?
We may store some or all of your personal data in countriesoutside of the UK. These are known as “third countries”. We will takeadditional steps in order to ensure that your personal data is treated just assafely and securely as it would be within the UK and under the Data ProtectionLegislation as follows:
We ensure that your personal data is protected under binding corporate rules.Binding corporate rules are a set of common rules which all our group companiesare required to follow when processing personal data. For further information,please refer to the InformationCommissioner’s Office.
Do You Share My Personal Data?
We will not share any of your personal data with any third parties for anypurposes, subject to the following exceptions.
We may contract with the following third parties for hosting and data storagepurposes:
Use Webflow.com (USA)Kwantic.co(the licensed platform upon which the System is hosted)
If any of your personal data is transferred to a third party, as describedabove, we will take steps to ensure that your personal data is handled safely,securely, and in accordance with your rights, our obligations, and the thirdparty’s obligations under the law, as described above in Part 7.
If any personal data is transferred outside of the UK, we will take suitablesteps in order to ensure that your personal data is treated just as safely andsecurely as it would be within the UK and under the Data ProtectionLegislation, as explained above in Part 7.
If we sell, transfer, or merge parts of our business or assets, your personaldata may be transferred to a third party. Any new owner of our business maycontinue to use your personal data in the same way(s) that we have used it, asspecified in this Privacy Policy (i.e. to communicate with you).
In some limited circumstances, we may be legally required to share certainpersonal data, which might include yours, if we are involved in legalproceedings or complying with legal obligations, a court order, or theinstructions of a government authority.
How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask Usfor details of that personal data and for a copy of it (where any such personaldata is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email orpostal addresses shown in Part 10.
There is not normally any charge for a subject access request. If your requestis ‘manifestly unfounded or excessive’ (for example, if you make repetitiverequests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within one month of receivingit. Normally, we aim to provide a complete response, including a copy of yourpersonal data within that time. In some cases, however, particularly if yourrequest is more complex, more time may be required up to a maximum of threemonths from the date we receive your request. You will be kept fully informedof our progress.
How Do I Contact You?
To contact us about anything to do with your personal data and dataprotection, including to make a subject access request, please use thefollowing
Email address: support@assembleyou.com
Postal Address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE
Changes to this Privacy Policy
We may change this Privacy Notice from time to time. This may benecessary, for example, if the law changes, or if we change Our business in away that affects personal data protection.
Any changes will be immediately posted on our Site and you will be deemed tohave accepted the terms of the Privacy Policy on your first use of our Siteand/or the System following the alterations. We recommend that you check thispage regularly to keep up-to-date.
This Privacy Policy was last updated on the 21st September 2023.
