Privacy Policy

PHDrift ("we") are committed to protecting and respecting your privacy.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us (either directly or via a third party), will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

By visiting www.phdrift.co.uk on the web or through mobile, you are accepting and consenting to the practices described in this policy.

Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.

Personal data we may collect from you

“Personal data”, or personal information, means any information that enables us to identify you, directly or indirectly when combined with other information we hold. It does not include data where the identity has been removed (anonymous data). We may collect and process the following kinds of personal data about you:

• Information you give to us. You may give us personal data about you by filling in forms on our site. This includes personal data you provide when you register to use our site or services, and when you report a problem to us. Information we collect about you. With regard to each of your visits we may automatically collect the following information:
• technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version and platform; and
• information about your visit, including the full Uniform Resource Locators (URL) through and from our site (including date and time); page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

How do we use your personal data?

We will only use personal data held about you for purposes described in this privacy policy and when the law allows us to do so. We will generally use your personal data on the following legal grounds:

• where the use of your personal data is necessary for the performance of a contract we are about to enter into or have entered into with you;
• where the use is necessary for the purposes of our legitimate interests (or those of a third party);
• where we need to comply with a legal or regulatory obligation; or
• where you have given your consent, or explicit consent (with regard to special categories of personal data), which can be withdrawn at any time.

Do we disclose your personal data?

We may disclose your personal data to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If PHDrift or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of PHDrift, our customers, or others.
• As described elsewhere in this privacy policy.

How long do we store your personal data

We will only retain your personal data, in a form that permits us to identify you, for as long as necessary to fulfil the purposes we collected it for. We will retain and use your personal data as necessary to satisfy any legal, accounting or reporting requirements, to resolve disputes or to enforce our agreements and rights. In line with this privacy policy, we will either securely delete or anonymize your personal data so that it cannot be linked back to you. Generally, we store personal data in a form that can identify an individual for up to 10 years following collection unless it is required to fulfil any legal or contractual obligation, or is required for the establishment, exercise or defence of legal claims.

Your rights

In accordance with the General Data Protection Regulation (GDPR), in certain circumstances you have:

The right to access your personal data and supplementary information and to be aware of and verify the lawfulness of our processing of your personal data. We will not generally charge a fee for an access request, but a reasonable fee may be charged if a request is manifestly unfounded or excessive, particularly if it is repetitive. We may also charge a reasonable fee to comply with requests for further copies of the same information.

The right to rectification. Your personal data can be rectified if it is inaccurate or incomplete. We respond to requests for rectification within one month of receipt of the request. This can be extended by two months where the request for rectification is complex.

The right to erasure. This is also known as 'the right to be forgotten’. You have a right to have your personal data erased and to prevent processing in specific circumstances:

• Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
• When you withdraw your consent.
• When you object to the processing and there is no overriding legitimate interest for continuing the processing.
• If the personal data was unlawfully processed (ie otherwise in breach of the GDPR).
• If the personal data has to be erased in order to comply with a legal obligation.
• If the personal data is processed in relation to the offer of information society services to a child.

The right to restrict processing of your personal data. You have a right to ‘block’ or suppress the processing of your personal data. If you contest the accuracy of your personal data, we will restrict its processing until its accuracy has been verified.

The right to data portability.In certain circumstances, you have the right to request the transfer of your personal data directly to a third party where this is technically feasible.

The right to object. You have the right to object to us processing your personal data. In this case, you must have an objection on grounds relating to your particular situation.

To exercise any of these rights, in the first instance please contact [email protected]

If you have any questions in relation to this policy, please contact [email protected]