Privacy Policy

About Neucom Ltd

Our website address is www.neucom.uk

We are a UK Registered Company. Our main business is industrial accident investigation, specialist health & safety advice and accident investigation related training.

All of our data processing takes place in England and we can be contacted by post, telephone and email.

We collect personal data

• When you communicate with us in person, by email, telephone or post.
• When you or your organisation utilises any of our products or services or requests information about them.
• When you consent to receive marketing communications from us or update your preferences in relation to them.
• When you register for one of our events or complete an application form.
• In the form of cookies when you visit our website.

Contact forms

When you complete a form, we retain only the information you provide us. We do not see, receive or collect any banking or credit or debit card information save for the minimum that allows contact with the shopper/purchaser. 

Cookies

If you complete a form on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Profiling and Data for Marketing:

Neucom does not use any automated profiling to make marketing decisions.

Data sharing

Save for the following, we do not share data with any person or organisation.

Where a person completes a course of study with us that is approved, certificated or examined by the Institute of Industrial Accident Investigators (IIAI), we will securely pass the IIAI basic personal data sufficient for IIAI Examination, Certification and record purposes. Neucom controls the data but the IIAI will be a joint processor for administration purposes and will also control and store the data in respect of IIAI members and non members.

What rights you have over your data

You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Your contact information

We will retain contact information received from the IIAI for the duration of an individual’s membership whilst we are a joint data controller. 

How and why data is processed

Under the GDPR, there are six lawful bases for processing personal data and we have listed below the ones that we use and why. Data and any communications are always processed using secure systems and we have a data breach policy in place

Consent: this is the basis for all our marketing and business email and telephone communications. Any person may, at any time, opt-in or out as they or their organisation or employer wish. We do not engage in cold calling or emailing and do not use or authorise any third party marketing or communications.

Contract: we use this basis to process all data that is necessary to deliver any of our products or services. This includes any print, telephone or electronic communications needed for administration. It may also include data provided by your employer if, for instance, they pay for a service or product involving you or communications from us where you need, for instance, event joining instructions.

Legal: this applies when compliance with laws and regulations compels us and may arise, or vary, on a case by case basis.

Vital Interests: this basis might arise, for instance, where personal data is necessary to protect the vital interest of an individual (e.g. food allergy, medical condition).

Legitimate Interest: this applies when, in possession of an organisation’s or person’s data as a potential customer, we contact them about products or services which we believe will be of interest. We will only do this where doing so would not be a contrary or unreasonable expectation for them given the original reason that they or their organisation provided the data.

 

Your Rights:

GDPR gives you a right…

To be informed: when we collect data from you, it is your right to be told how and why we require or would like it, what we will do with it and how you can control the data of yours that we have. This policy is part of that overall process.

Of access: anyone has the right to ask if we hold data on them and, if so, what that data is. You can do this in writing by post or email via the contact details above. The requests are free of charge unless repetitive, excessive or manifestly unfounded (in which case, a reasonable fee of £50 will be charged). We will always aim to respond within 5 working days. 

To rectification: if any data we hold about you is incorrect, we will update it as soon as you inform us.

To erasure: you have the right to request that we completely erase any data we hold on you and such can be done via the contact details above. We will inform you of the outcome of this request and any associated erasure within 4 working weeks.

To restrict processing: you may request that we restrict your data from being processed but still hold it on our systems if required or necessary under GDPR. You can do this in writing via the contact details above. 

To data portability: if you want us to share your personal data with another controller (e.g. confirmation of course completions for IIAI membership) we will do this in an easily transferable secure format and will also send you a copy of your data via the same means at your request. 

To object: whilst we will ensure that you may keep your preferences up to date, you may object at any time to marketing communications and we will cease these upon receipt of a request in writing or by telephone from you. Requests can be made via the contact details above. 

In relation to automated decision making and profiling: you have the right to know if we profile you or make marketing decisions about you using wholly automated processes. Already noted above, we do not currently use any automated marketing or profiling systems.