Privacy Statement

This Privacy Statement describes our policies and procedures on the collection, use and disclosure of your information when you use our platform services. It also outlines your Privacy Rights and how the law protects you.

We take privacy and the protection of personal and sensitive information seriously and are committed to protecting your data and complying with the data regulations to their full extent. Our Privacy Statement explains how we use and protect your personal information, to show that we are adhering to the GDPR/UK GDPR and Data Protection Act 2018.

In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data. We are CoreStream Ltd. Our address is CoreStream Ltd, 20 Grosvenor Place, London, SW1X 7HN. You can contact us by post at the above address, by email at info@corestream.co.uk or by telephone at 0207 1004378.

The UK GDPR requires every organisation that processes personal information to be registered with the Information Commissioner’s Office (ICO). Our registration number is ZA154741 and you can find us on the Information Commissioner’s register by searching for us by using our registration number.

 

Our promise to you

We are committed to our responsibility to be fair, lawful, and transparent when it comes to managing your information. We endeavour to make our processing activities easy to read and understand and we welcome your feedback. We promise that:

• We will do everything physically possible to keep your information secure and confidential.
• You are in control of how we communicate with you – and you can change your preferences at any time by contacting us.
• We will train our staff to ensure that they know how to manage your information appropriately and in line with regulations.
• We will not transfer your data to third parties, except for trusted partners who carry our specialist processing e.g., accountant, bank for financial transactions.
• We have done all checks possible to verify that any third parties comply with data protection legislation and will only use them if we are satisfied that they take your privacy seriously.

 

Legal bases

Where we process personal data, we will only do this if we have identified a legal basis to do so according to the UK GDPR.

Generally, for personal data, we rely on consent, contract or legitimate interest, depending on the purpose of processing. We will delete or anonymise your data as soon as it is no longer needed and not required by law.

 

​Personal data that we process

Information we collect and store depends on the service you have requested or are interested in requesting and whether or not we are entering into a contract.

We always collect the minimum data necessary for the purpose of the services requested. For more information about the individual categories and purposes of data we collect please look at the relevant heading below.

 

Employees

If you work for us, we will only collect the information that is necessary and that we are legally required to process to pay you and are necessary to maintain a working relationship. These details will be required and our legal basis for processing is contract.

Where you provide additional information, you do this voluntarily and our legal basis for processing these details are consent. Where we rely on consent for processing, you can always exercise your right to withdraw consent, although this may affect your employee benefits.

We will retain your data in line with statutory requirements, after which it will be safely and securely destructed, in line with the storage limitation principle.

It is your responsibility to inform us of any changes to your personal that so that we can keep it accurate in line with data protection principles.

Where we process special category data, we will only do this if we have a legal obligation to do so or you have given us explicit consent. In either case, we will only do so if we have identified an additional condition for processing as specified in article 9 of the UK GDPR.

For employment purposes your personal details will be processed on the legal basis of contract and special category data under the additional condition for processing of employment.

 

Clients

If you procure one or more of our platform modules, you will be entering into a contractual relationship with us. We will collect your organisation’s details, your contact details, and any details of contacts you provide us with to enable us to fulfil our contractual obligations towards you. In addition, we will process commercial, confidential, and sensitive information that you provide us with for the purposes specified in the contract and data processing agreement. We also will process financial details for the purpose of invoicing and financial transactions. When our contract ends, we will follow all instructions as per our contract with you in relation to all personal and other data that we have processed on your behalf. The legal basis we use is contract.

 

Sales enquiries

If you enquire about our platform modules and services, we will collect the personal details that you provide us with. This information will be collected either via a webform or email, depending on your preferred contact method. As you provide this information voluntarily, we rely on your consent for the purposes that you have specified in your enquiry. In some cases, we may contact you in relation to other services and will rely on legitimate interest to process your data. This will only be in cases where we can identify a legitimate interest and only if you have not asked us not to contact you for other purposes. You can request for your information to be deleted at any time. Where you ask for your information to be deleted, we will do this safely and securely so that it cannot be retrieved. Otherwise, we will retain your data in line with statutory requirements.

 

Job applications

If you have applied for a job with us, we will hold your information in line with statutory or recommended retention periods. We will contact you with any relevant job roles that may be available. For job applications we will use consent as a legal basis for processing.

 

Third party sharing

We will not share your information with any third parties for the purposes of direct marketing.

We use third parties to support the provision of our services and therefore under GDPR/ UK GDPR they are considered data processors. These third parties include our hosting partner, accountancy services, banking services and freelancers.

 

Your Data Protection Rights 

Under data protection law you have certain rights that you can exercise in regard to your personal data, these are outlined below:

• You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
• You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
• You have the right to ask us to erase your personal information in certain circumstances.
• You have the right to ask us to restrict the processing of your information in certain circumstances.
• You have the right to object to processing if we are able to process your information because the process forms part of our public tasks or is in our legitimate interests.
• Your right to portability only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right applies when we are processing your data with your consent or for the performance of a contract and when we are carrying out the processing by automated means.

Your rights are not absolute in some cases and exemptions and/or restrictions may apply. You can find out more about your rights on the ICO website.

 

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us via email info@corestream.co.uk or via phone 0207 1004378. You also have the right to complain to the ICO if you are unhappy with how we use or have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

​Helpline number: 0303 123 1113

Website: https://ico.org.uk