Data Protection Act
A law designed to protect personal data.
The purpose of the Data Protection Act
The 1998 Data Protection Act was passed by Parliament to control the way information is handled and to give legal rights to people who have information stored about them.
The Principles of Data Protection
Shisha Lovers will ensure that your data is:
- Fairly and lawfully processed
- Processed only for limited, specifically stated purposes
- Used in a way that is adequate, relevant and not excessive
- Used accurately Kept on file no longer than absolutely necessary
- Processed in accordance with your legal rights Kept secure
- Never transferred outside the UK without adequate protection
Data Protection Policy
Shisha Lovers is committed to protecting the rights of individuals to privacy with regard to the processing of personal data.
It is necessary for Shisha Lovers to process personal data in the normal and proper conduct of business operations. Such processing will be conducted fairly and lawfully in accordance with the Data Protection Act 1998. If you have a query regarding the accuracy of your personal data then your query will be dealt with fairly and impartially.
General use of personal data
Shisha Lovers holds data on: prospective, current and former clients; prospective, current and former staff; other business contacts; and other individuals interested in Shisha Lovers.
This personal data is held in a variety of formats, both electronic and manual.
The processing of personal data is subject to the rules laid down under the Data Protection Act 1998. Your personal data will be used only for proper purposes that are considered by Shisha Lovers to be for your benefit.
For clients, this includes (but is not restricted to) monitoring activity, statistical reporting, performance data collection and the provision of general business services.
For staff this includes (but is not restricted to) the conduct of normal business management and employment matters.
For other individuals this includes (but is not restricted to) the normal conduct of business relationships.
The protection of your personal data will be governed by the provisions of the Data Protection Act 1998. Access to your data is restricted to those personnel to whom it is necessary for proper purposes.
Shisha Lovers does not sell your personal data to third parties. Your personal data will only be transferred to third parties where this is necessary, for proper purposes related to business matters, for example: where this is required by professional bodies or where it is necessary for the delivery of services by third parties, to you.
Shisha Lovers is registered as a Data Controller under the Act, and will adhere to the principles and the guidelines set out by the Information Commissioner.
Shisha Lovers seeks to use your personal data only for the purposes of legitimate interests and, where practicable, with your consent.
For clients, it is a condition of working with Shisha Lovers that you consent to Shisha Lovers processing your personal data. By engaging Shisha Lovers, you signify your agreement.
For staff, it is a condition of employment that you consent to Shisha Lovers processing your personal data. By applying you signify your agreement.
You have the right to know what personal data Shisha Lovers holds about you, and for this to be correct. Procedures for the management of personal data are in place and enquiries may be made as set out below.
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.
Understanding how you use our website
Recognising you when you return
Providing you with a better, personalised service
What types of cookies do we use?
There are a number of different types of cookies, however, our website uses:
Shisha Lovers uses these cookies so that we recognise you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
Shisha Lovers uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address.
Shisha Lovers sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
[Add any other types of cookies Shisha Lovers uses]
How to manage cookies
You can set your browser to not accept cookies. However, in a few cases, some of our website features may not function as a result. For further information, please contact Shisha Loversemail.
We are aware that you may have concerns over disclosing information about yourself to us.
Our primary aim in collecting personal information is to provide you with a customised experience on our website – aiming to show you information that is relevant to you.
We also collect information for statistical purposes and to offer you future products and services that may be of interest to you.
We are collecting data for our accounting system, the accounting system will be used to generate invoices and receipts
Any personal data relating to you gathered by us in the registration process or during your use of the service will be recorded and only be used in accordance with our Data Protection Policy.
The website uses various order and registration forms to enable you to request information, products and services.
When you register for the secure sections of our website you will need to provide us with information such as your name, date of birth, e-mail address and password.
Any personal data we collect during registration is designed to allow us to personalise the site for you and give you access to the right kinds of information.
If you register, request further information or contact us we may keep a record of that correspondence and incorporate the information it contains into our database(s).
The web server that hosts this site is not used to store personal information of any kind.
Any personal information that you do provide is stored on a separate and secure database server within the Shisha Lovers firewall. There is no direct link between this database server and the internet and access is strictly limited to internal Shisha Lovers IT staff and authorised site administrators only.
Access to certain areas of the site is limited to specific registered user groups only. Registering as an accepted applicant or active user is restricted; we will verify your status before granting a user account of this type. If your status changes then your user account may be withdrawn or downgraded to ‘general visitor’ without further notice.
Whilst we do not directly track or record your usage of this website, in the event that we become aware that site security has been compromised as a result of external activity (including but not limited to external security attacks) we shall take reasonable measures which we deem appropriate. This includes but is not limited to internal investigation and reporting, and notification to and cooperation with law enforcement authorities.
Enquiries on Data Protection policy may be addressed to the administration of Shisha Lovers or, alternatively, it can be directed to the Information Commissioners Office (ICO)
Code of the Use of CCTV
You can see the ICO’s advice to operators in The Information Commissioner’s CCTV Code of Practice.
GDPR – General Data Protection Regulations
Enforceable from 25 May 2018, GDPR is a new EU regulation which has been designed to update the existing Data Protection Directive. Enacted in 1995, the existing directive was established before the days of widespread internet use, which has fundamentally changed the way we create, use, share, and store information.
Alongside the aim of updating data protection, GDPR is also levelled at unifying approaches to data privacy and security. Being a directive, the existing framework had, by its nature, the flexibility to be implemented by EU member states as they saw fit, resulting in quite different approaches to data protection across Europe. GDPR is a regulation and as such must be followed much more rigidly – and, indeed, not just by companies based in Europe.
At the core of GDPR is the aim to simplify, unify and update the protection of personal data.
How we use your information
This privacy notice tells you what to expect when Shisha Lovers collects personal information. It applies to information we collect about:
People who use Shisha Lovers services
Shisha Lovers offers various services to the public. We use a third party to deal with some publication requests, but they are only allowed to use the information to send out the publications.
We have to hold the details of the people who have requested the service in order to provide it. However, we only use these details to provide the service the person has requested and for other closely related purposes. For example, we might use information about people who have requested a publication to carry out a survey to find out if they are happy with the level of service they received. When people do subscribe to our services, they can cancel their subscription at any time and are given an easy way of doing this.
People who make a complaint to Shisha Lovers
When we receive a complaint from a person we make up a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved in the complaint.
We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We do compile and publish statistics showing information like the number of complaints we receive, but not in a form which identifies anyone.
We usually have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis.
We will keep personal information contained in complaint files in line with our retention policy. This means that information relating to a complaint will be retained for two years from closure. It will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.
Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provide.
When we take enforcement action against someone, we may publish the identity of the defendant in our Annual Report or elsewhere. Usually we do not identify any complainants, unless the details have already been made public.
Visitors to our websites
When someone visits Shisha Lovers website we use a third party service (Google Analytics) to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Use of data processors
Data processors are third parties who provide elements of our recruitment service for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Under the Data Protection Act 1998, you have rights as an individual which you can exercise in relation to the information we hold about you.
You can read more about these rights here – https://ico.org.uk/your-data-matters/
Complaints or queries
Shisha Lovers tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of Shisha Lovers collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.
If you want to make a complaint about the way we have processed your personal information, you can contact us in our capacity as the statutory body which oversees data protection law – Shisha Loverswebsite.
Access to personal information
Shisha Lovers tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the Data Protection Act 1998. If we do hold information about you we will:
Give you a description of it;
Tell you why we are holding it;
Tell you who it could be disclosed to; and
Let you have a copy of the information in an intelligible form.
To make a request to AEC Tutors for any personal information we may hold you need to put the request in writing addressing it to our Information Governance department, or writing to the address provided below.
If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.
If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting the Information Governance department.
Disclosure of personal information
In many circumstances we will not disclose personal data without consent. However when we investigate a complaint, for example, we will need to share personal information with the organisation concerned and with other relevant bodies. Further information is available in our Information Charter about the factors we shall consider when deciding whether information should be disclosed.
You can also get further information on:
- Agreements we have with other organisations for sharing information;
- Circumstances where we can pass on personal data without consent for example, to prevent and detect crime and to produce anonymised statistics;
- Our instructions to staff on how to collect, use and delete personal data;
- How we check that the information we hold is accurate and up to date.
Changes to this privacy notice
We keep our privacy notice under regular review. This privacy notice was last updated by
Shisha Lovers on 10/07/2020.
How to contact us