Collection of Personal Data

• List all the types of personal information that the business collects from or about users:

• Does the website collect any sensitive information in relation to users?

  • No
  • Yes

  !

  Sensitive information (also known as special category personal data under the UK GDPR) is personal information that is particularly private and requires a higher level of legal protection, including:

   – Racial or ethnic origin.
  – Political opinions.
  – Religious or philosophical beliefs.
  – Trade union membership.
  – Genetic data.
  – Biometric data used to uniquely identify a person (e.g. fingerprints or facial recognition).
  – Health information.
  – Information about a person’s sex life or sexual orientation.

• List all the sensitive information that is being collected from users:

• Select the main reason for which the sensitive information is being processed:

  • employment purposes
  • to protect vital interest
  • legitimate activities
  • to make publicly available
  • to defend/establish legal claims
  • public interest
  • medical and social care
  • protection of public health
  • for archiving, scientific or historical research

• Does the website collect any criminal information from users?

  • No
  • Yes

  !

  Criminal information is personal information relating to a person’s criminal convictions, offences, alleged offences, criminal proceedings, or related security measures:

   – Criminal convictions.
  – Criminal offences or alleged offences.
  – Court proceedings relating to criminal matters.
  – Criminal record check results (such as DBS checks).
  – Information about sentences, penalties, or rehabilitation measures.

• List all the criminal data that is being collected from users:

• List all the lawful purposes for which the business will process criminal information obtained from users:

• Will the business collect personal information directly from users (e.g. when creating an account, making a purchase, completing a form, or contacting the business)?

  • No
  • Yes

• List all the ways in which users may directly provide their personal information through the website:

  !

  Users may directly provide their personal information when they:

   – Create or register an account.
  – Place an order or make a purchase.
  – Complete contact, enquiry, or support forms.
  – Subscribe to newsletters or marketing communications.
  – Request a quotation or additional information.
  – Download resources or access gated content.
  – Submit reviews, comments, or feedback etc.

• Will the business collect personal information directly from cookies placed on the website?

  • No
  • Yes

• List all cookies used on the website that collect or process users' personal information:

• Does the website obtain any personal information about users from third parties?

  • No
  • Yes

• List all third parties from which the business collects or receives users' personal information:

• List all purposes for which users' personal information is processed by the business:

• List all the purposes for which sensitive information is being processed:

• List all the purposes for which criminal information is being processed:

Processing of Personal Data

• The personal information is being processed based on:

  • user's express consent
  • legal contract
  • necessity to comply with legal obligation
  • necessity to protect legitimate interest
  • necessity to protect vital interest
  • necessity to protect public interest

• Does the business plan to share obtained personal information with other third parties?

  • No
  • Yes

  !

  Sharing personal information with third parties may be necessary to meet the purposes for which such information is being collected.

• List all the parties with whom personal information is being shared:

• Describe how long personal information shall be retained by the business:

  !

  The indicated period of time shall be sufficient to fulfil purposes for which such information is being retained.

• List all the technological and organisational measures the business uses to protect personal data and keep it secure:

Miscellaneous

• Will the business transfer users' personal data outside the United Kingdom?

  • No
  • Yes

• List all countries where personal data of users can be transferred by the business?

• Describe the circumstances in which users' personal data may be transferred outside the United Kingdom:

• Does the website use automated decision-making processes, including artificial intelligence (AI), when processing users' personal information?

  • No
  • Yes

  !

  Automated decision-making means the use of personal information in order to make a decision which is undertaken by an electronic system (i.e. the decision is not made by a human)

• List all decisions involving users' personal information that the business makes using automated decision-making processes:

• Does the business monitor communications with users through which personal information may be collected or obtained?

  • No
  • Yes

• List all the circumstances in which the business will monitor communication:

• Does the business use users' personal information to carry out credit checks or make credit-related decisions?

  • No
  • Yes

  !

  Credit checking involves assessing a person’s financial reliability or ability to repay money, usually by reviewing information such as credit history, payment records, outstanding debts, or financial behaviour. Businesses may use credit checks when offering credit, payment plans, loans, financing, or other services involving deferred payment.

• Does the business carry out fraud checks using users' personal information?

  • No
  • Yes

  !

  Fraud checks are processes used by businesses to identify and prevent potentially fraudulent transactions, account activity, or misuse of services. They may involve analysing personal information such as identity details, payment information, transaction history, device information, or IP addresses to assess fraud risks.

• List all the purposes for which fraud prevention checks will be made:

• Do you want to add a signature?

  • Yes
  • No

• Add signature:

  Save signature Clean

  Edit signature