The Privacy Practice Privacy Notice

Last updated: July 2023

The Privacy Practice (“we”, “our”, “us”) is committed to privacy compliance and to earning our users’ (“you”, “your”, “me”, “my”) trust.

​

To earn that trust, we aim to be transparent and ensure you understand our privacy practices including the information we collect, why we collect it, how it is used and your choices regarding your personal information.

1. Who are The Privacy Practice?

The Privacy Practice is a Data Protection consultancy and translation service company.
We are responsible for making decisions about how your personal information is processed (the “controller”).

2. Who does this Privacy Notice apply to?

This Privacy Notice applies to our website and services operated by The Privacy Practice (our “services”).

3. What information does The Privacy Practice collect about me?

Information you give us.

​

You choose to give us certain information when using our website.

​

This includes:

​

• Contact details: When you provide us with at least some basic details necessary for the service to work or for us to provide a quote, such as your name and contact details.
• Cookies: Please see our Cookie Notice.
• Service data: Please see the terms of your agreement with The Privacy Practice to understand how any data collected during the provision of our services to you is processed. 

​

Information we receive from others

​

In addition to the information you provide us directly, we receive information about you from others, including:

​

• Service providers: We may engage service providers when we need to carry out legally required checks (such as AML).

​​

Information collected when you use our services

​

• Device information: We may collect information from and about the device(s) you use to access our services, including:

• hardware and software information such as IP address, device ID and type, device-specific and apps settings and characteristics, app crashes, advertising IDs (such as Google’s AAID and Apple's IDFA, both of which are randomly generated numbers that you can reset by going into your device’ settings), browser type, version and language, operating system, time zones, identifiers associated with cookies or other technologies that may uniquely identify your device or browser (e.g., IMEI/UDID and MAC address);

​

• information on your wireless and mobile network connection, like your service provider and signal strength; and

​

• information on device sensors such as accelerometers, gyroscopes and compasses.

4. What does The Privacy Practice use my personal information for?

To provide the service

​

This includes:

​

• Onboarding you as a client and providing the agreed deliverables;
• Customer support and providing an initial quote;
• Completing your transactions; and
• Communicating with you about our services, including order management and billing

​

To prevent, detect and fight fraud or other illegal or unauthorized activities

​

We perform personal information analysis to better understand and design countermeasures against these activities and retain personal information related to fraudulent activities to prevent against recurrences.

To ensure legal compliance

​

And to comply with legal requirements, assist law enforcement and enforce or exercise our rights, for example our Terms and conditions.

5. What are The Privacy Practice’s legal basis to process my personal information?

To provide our service/perform our contract 

​

We process your personal information is to perform the contract that you have with us. For example, contact or billing details.

Legitimate interests

We may use your personal information where we have legitimate interests to do so. For example, for administrative, fraud detection and other legal purposes.

Legal obligation

In some cases, applicable laws may require us to process certain information about you.

Consent 

We may ask for your consent to use your personal information for certain specific reasons. You may withdraw your consent at any time by contacting us at the address provided at the end of this Privacy Notice.

6. Who does The Privacy Practice share your information with and why?

With our service providers and partners

​

We use third parties to help us operate and improve our services. These third parties assist us with various tasks, including personal information hosting and maintenance, analytics, customer care, marketing, advertising, payment processing and security operations.

We may also provide aggregated (anonymised) information to third parties.

A list of these third parties is available on request.

In corporate transactions

We may transfer your personal information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control.

When required by law

We may disclose your personal information if reasonably necessary: (i) to comply with a legal process, such as a court order, subpoena or search warrant, government / law enforcement investigation or other legal requirements; (ii) to assist in the prevention or detection of crime (subject in each case to applicable law); or (iii) to protect the safety of any person.

To enforce legal rights

We may also share information: (i) if disclosure would mitigate our liability in an actual or threatened lawsuit; (ii) as necessary to protect our legal rights and legal rights of our users, business partners or other interested parties; (iii) to enforce our agreements with you; and (iv) to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing.

With your consent or at your request

We may ask for your consent to share your personal information with third parties.
In any such case, we will make it clear why we want to share the information.

7. How does The Privacy Practice send information outside of my country?

When we send your personal information outside of your country we have in place adequate safeguards to do so.
This includes EU standard contract clauses approved by the European Commission or other suitable safeguard to permit personal information transfers from the European Economic Area (“EEA”) to other countries.

8. What are my privacy rights?

In certain circumstances, if you are an EEA resident, you may exercise the rights available to you under applicable data protection laws as follows:

​

• If you wish to access, correct, update or request deletion of your personal information.
• You can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
• If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. This may mean your access to certain services is restricted or denied as a result. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.

You can exercise your rights at any time by contacting us using the contact details below.

We respond to all requests we receive from users in accordance with applicable data protection laws.
We may ask you to provide proof of identity before we can answer the above requests.
In some cases, we may reject requests for certain reasons (for example, if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user).

9. How does The Privacy Practice protect my personal information?

We have implemented, and will maintain current, reasonable physical, technical, and organizational security measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

Unfortunately, the transmission of information via the internet is not completely secure.
Although we have security measures in place to protect your personal information, we cannot guarantee the security of your data transmitted to our sites; any transmission is at your own risk.

10. How long does The Privacy Practice retain my personal information?

Your personal information will be stored in accordance with applicable laws and kept for as long as needed to carry out the purposes described in this Privacy Notice or as otherwise required by applicable law.

11. Can this Privacy Notice change?

This Privacy Notice may be amended from time to time. We will post any changes we may make on this page and, where appropriate, notify you via e-mail. When amendments are made, we will update the "last updated" date at the top of this Privacy Notice.

12. How can I contact The Privacy Practice?

If you have any questions or comments, please contact jlg@leatongray.com