This Privacy Policy sets out the data processing practices of Pace Post Limited (Company Number 9072088) trading as Pace Print and Design. Please note that all data thus captured will be used and held in accordance with the requirements of the Data Protection Act 2018. We are registered with the ICO – certificate number ZA189341

 Established in 2001 Pace Print and Design specialise in the provision of print and mailing solutions for a variety of clients and markets.

Pace Print and Design is the controller and our Data Protection Officer is Martin Johnson.

If you have any requests concerning your personal data or queries about how we handle your data you can contract the DPO by email at martin@paceprintanddesign.co.uk or write to us at Martin Johnson : Managing Director

Pace Print and Design Ltd Unit 13, Buckholt Business Centre, Buckholt Drive, Worcester WR4 9ND.

 Purpose of processing your personal data

The legal basis on which we reply are:

Consent – valid consent is obtained by telephone, email or via our website and will be recorded within our CRM system. Contract

• processing is necessary for us to administer the pre-contract and contractual relationship between ourselves and our suppliers/ customers/potential employees in connection with the performance of a contract. Legitimate interests – personal data will be held within our CRM system. Employees of Pace Print and Design will use this data to liaise with you and keep you informed of commercial interests, job progress and potential service delays within the

Marketing

We would like to use your personal data to send you details of and products or services that we offer that we have identified as likely to be of interest to you & potential service delays within our industry.

If at any point you would like to opt-out of receiving communications from us or would like to the channels (such as emails or post) that we use to contact you, please contact Martin Johnson by email at martin@paceprintanddesign.co.uk

Recipients/categories of recipients

In carrying out our business including our obligations to you, we may use sub-contractors. We will ensure that they respect your privacy and abide by all data protection laws.

Retention periods

We will keep data supplied by our clients for processing for a maximum of 60 days. We need to retain this data for our own accounting purposes and for checking on any mailing questions and comeback by any postal operator. In terms of personal data we use for marketing, we will keep this data for as long as we are able to market to you and if you withdraw your consent or opt-out of marketing communications, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.

Data subject’s rights

You have rights in respect of your personal data. We will need to confirm your identity before we can consider your request so, if you wish to exercise any of these rights, we will need a to see a valid passport or driving licence as proof of identity to ensure you are the data subject.

The right to be informed – you have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, who we will share your data with. If you have any questions on how and why we process your data, please contact the DPO. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general- data-protection-regulation-gdpr/individual-rights/right-to-be-informed/ Right of access – you have the right to know whether

we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on

their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of- access/

 Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on

their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to- rectification/

Right to erasure – this right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-rganisations/guide-to-the-general-data-protection- regulation-gdpr/individual-rights/right-to-erasure/

Right to restrict processing – you have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DP at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/ for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/

Right to data portability – you have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data- protection-regulation-gdpr/individual-rights/right-to-data-portability/

Right to object – you have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling); and (iii) for purposes of scientific/historical research and statistics.

• Legitimate interests/legal task – your objection should be based on your situation We can continue to process the data if we can demonstrate compelling legitimate grounds which override your
• Direct marketing – you have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as
• Scientific/historical research and statistics – your objection should be based on your situation.
• If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more

about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general- data-protection-regulation-gdpr/individual-rights/right-to-object/

Processing based on consent

Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe/opt-out in any marketing we send you and you can contact the DPO at the contact details above.

The right to lodge a complaint to the supervisory authority

If you are unhappy with any aspect of our handling of your data you can make a complaint to the Information Commissioner’s Office – https://ico.org.uk/concerns/

Changes to the privacy policy

This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy we will communicate these to you. This policy was last reviewed in May 2018.

“We will never rent your data or our own data, nor let it be used by any other party for any purpose except that which you have commercially contracted us

to provide for you.”