Your privacy is of the highest importance to us. XEC7 Group Ltd is committed to keeping your personal data safe and being transparent about what personal data we hold and how we use it.
We ensure that your information is processed in accordance with all applicable laws concerning the protection of personal data. This policy explains:
Who we are;
What personal data we collect about you;
How we use and store your personal data;
Your rights; and
Who we are
We are Executive Seven LTD, a company which is registered in England and Wales.
Collecting personal data
This privacy notice sets out how we process personal data that we collect from you, or that you provide to us, in line with current data protection legislation and other applicable laws. We will treat all your personal data as confidential, however we reserve the right to disclose this data in ways set out in this privacy notice.
Personal Information (or “data”) is any information that can be used to identify you. It can for example, include your name; date of birth; email address; postal address; phone number; payment card details and medical information.
Data Protection law recognises that certain categories of personal information are more sensitive. This is known as sensitive personal data and covers health information, racial or ethnic origin, religious beliefs and political opinions. We do not usually collect such sensitive personal data about our customers. If for any reason we do need to collect sensitive data, we will always make it clear to you that we are collecting this sensitive personal data and the reasons for it.
Personal data we may collect and process:
Your full name and your title;
Bank or payment card details;
Records of correspondence with us; and
Information you enter onto our websites.
We collect data in the following ways:
Information you give to us: We collect information from you when you contact us by email, phone or website contact form. Sometimes your information is collected or processed by a third party for us, for example event registration providers, marketing facilitators or communication providers. Where they are doing so purely for Executive Seven LTD, we will remain responsible for your information at all times and they will not be permitted to use your personal information for their own marketing unless you have consented to such marketing from them. We collect only the personal data necessary for the purpose it is being collected, stored and processed.
Information you allow third parties to share with us: Your information may be shared with us by third parties who, for example use us to fulfil a service, or are forwarding your details to us for the purpose of providing you with service or product directly. These third parties will only share your personal information with us if you have provided your consent. You should read their privacy policies to fully understand how they will process your information.
How we use your personal data
The ways in which we use your data depend on why you have provided it. We may use your data in the ways set out below
To provide you with the information, services or products you have requested from us;
To respond to your enquiries;
To maintain a record of your relationship with us and for internal administrative purposes (including accounting);
to comply with applicable laws and regulations;
to keep in contact with you in ways you have requested or agreed to;
Notify you about changes to our services or policies;
for Direct Marketing by email, post or telephone. We may occasionally include information from other companies who we partner on particular products and services. More information on how we use your personal data for marketing purposes can be found under the “Marketing” section in this policy;
XEC7 Group Ltd we want to ensure that you receive the level of marketing communications from us that are right for you, and contain the information you want to receive. The ways in which we market through various channels are set out as follows:
Email and Text Marketing: We have a legitimate interest to contact our existing customers by electronic methods for marketing purposes, if you provided us with an email address and/or phone number, about similar products and services which we think you may be interested in. If you have actively and explicitly consented to us contacting you with marketing communications, we may email you about our products and services; company updates and announcements; or news relevant to our sector, depending on your topic preferences. You can update your preferences to tailor the information you want to receive, by clicking the ‘update my preferences’ link at the end of our marketing emails or by getting in touch at email@example.com. You can opt out of these communications at any time by getting in touch at firstname.lastname@example.org, or by clicking the unsubscribe button at the bottom of our marketing emails.
Post and Telephone Marketing: If you have provided us with your address and phone number we may send you direct mail or phone you for marketing purposes related to the purpose for which this data was collected. We do check phone numbers against the Telephone Preference Service. If your number is on this list we will not contact you by phone unless you have expressed specifically to us that you consent to receive such calls from us.
Retaining your personal data
We retain your personal data only for as long as is required to operate our services in accordance with legal and tax requirements. Once we no long require your data in order to fulfil a service you have asked for, to provide you with great customer service and communication, or to satisfy legal requirements we will delete it in a secure manner. If we are relying on consent for a particular method of data processing, we will contact you to renew consent at reasonable intervals..
Sharing personal data
XEC7 Group Ltd may disclose your personal data to third parties in the following circumstances:
To provide you with products or services that you have requested, for which we use a separate company to fulfil those services or supply the products;
To refer you to another company, with your consent, who can fulfil a service you have requested which we cannot provide; or
To third parties who process data on our behalf and provide a service to us, such as companies we use to store data, conduct marketing and communicate with you.
We will only share your personal data with third parties who comply with relevant data protection legislation, and we will ensure appropriate controls are in place. We regularly monitor their activities to ensure they continue to comply with law and with our policies.
We will never share, sell or swap your personal data with any third parties for the purposes of their own marketing unless you have explicitly consented to us sharing your data with specifically named third parties.
We will ensure your personal data is only accessible by appropriately trained staff or contractors.
International transfers of personal data
For financial and technical reasons, we may use the services of a supplier or products or services outside of the European Economic Area (EEA), meaning that your personal data is therefore transferred, processed and stored outside of the EEA. Although this includes countries that the European Union authorities do not consider as providing adequate levels of protection of personal data, we will take reasonable steps to ensure that your personal data is kept safe and in accordance with this privacy notice. In such cases, the transfer will be carried out subject to a Data Transfer Agreement in compliance with Data Protection law. For further information, please contact us on email@example.com
Legal basis & legitimate interest
When we process your personal data, we will ensure this is done in accordance with at least one of the legal grounds stated within Data Protection Law. These consist of the following:
We have obtained your affirmative and specific consent to use your personal data for a previously notified purpose, which may include sending you electronic direct marketing by email or text, or to provide you with a product, service or information that you have requested;
In some circumstances we make collect and use personal data where it is necessary to fulfil our legitimate interest as a business. We shall however, always balance our legitimate interests against your rights as an individual and data subject to ensure we use your data in a way you would reasonably expect in accordance with this policy and which does not intrude on your privacy or preferences. Examples of how we may use our legitimate interests include:
To send you direct marketing material to you by post or telephone;
To send existing customers marketing material (including by electronic means) of products and services we think might be of interest to you unless you opt out of these communications;
To conduct research in order to better understand our customers;
To maintain a record of our relationship with you;
For administrative purposes;
To protect our business against fraud and other risks; and
Maintain our customer database and systems.
Processing your personal data is necessary for the performance of a contract, such as to provide you with products or services you have purchased or requested; or
We have a legal obligation to use or disclose information relating to you, for example, if we were ordered to do so by a court or regulatory authority.
Your debit and credit card details
If you use debit or credit card details to pay us for a product or services we will take care to ensure this payment is made securely and in accordance with the Payment Card Industry Data Security Standard. For further information about PCI DSS, click here.
We do not store your credit or debit card details at all after the transaction is complete. Only staff authorised and trained to take payments will do so.
Cookies are small text files which are stored on your computer by websites that you visit, to help websites work more efficiently and provide us with information. There are four reasons cookies may be stored on your device when visiting a website owned by XEC7 Group Ltd:
To enable the website to work correctly for you so you can use the online services provided;
To remember your preferences and to make the website easier for you to use;
To enhance the facilities and information on our website; and
To collect data about your use of our website which are anonymised and used to improve our website.
Strictly Necessary Cookies – These cookies are essential for you to be able to use certain key functions of the website, such as registering in the event.
Third Party Cookies – These cookies collect information if you use social media sites or share a page from our website. Some of our pages contain embedded content such as YouTube videos and Twitter & Facebook likes, so you may receive cookies from these websites.
Please be aware we cannot control third party cookies. You can block cookies via the settings on your browser, however this may limit your access to certain websites including our site. To understand more about these third-party cookies and their privacy policies please visit the relevant websites below.
You can find further information about cookies at www.allaboutcookies.org.
If you send any inappropriate, offensive or defamatory content on our website or social media platforms, we may use your personal data to inform relevant third parties including your internet provider or law enforcement.
Under the EU regulation 2016/679 General Data Protection Regulation (“GDPR”), you have rights as individuals in relation to the information we hold about you. These are as follows:
The right to be informed:
You have the right to be informed about the collection and use of your personal data. This information must be concise, transparent, intelligible, easily accessible, clear and in plain language.
Where such data is collected from you directly, you will be informed of its purpose at the time of collection.
Where such data is collected from a third party, you shall be informed of its purpose either when the first communication is made, before a transfer of that data is made or as soon as reasonably possible no longer than one month after we obtain the data.
The information provided shall include details about us, the purpose for which the data is collected, the legal basis for collecting the data, the legitimate interests used to justify collection when applicable, the categories of data collected, the data to be transferred to third parties and details of those third parties, details of a transfer outside of the EEA if applicable, details of retention of the data, details of your rights, details of your right to complain to the Information Commissioners Office, details of any legal or contractual requirement necessitating the collection or processing of personal data and details of failure to oblige, and details of any automated decision-making or profiling that will take place using the personal data if applicable.
The right to erasure:
You have the right to request that we delete your personal data and stop processing it, if this processing is no longer necessary for the purpose it was collected, if you withdraw your consent, if you object to us storing or processing your personal data (where there is no overriding legitimate interest which will allow us to do so), if the processing is unlawful or if the personal data must be deleted to comply with a legal obligation.
We must comply with all required to erase personal data unless we have reasonable grounds to refuse.
You will be informed of the erasure within one month of us receiving the request from you. If further time is required, you shall be informed.
In the event that the personal data to be deleted, as per a request from you, has been shared with third parties, those third parties shall be informed (unless it is impossible or unreasonably difficult to do so).
The right of access:
You have the right to ask for a copy of the information we are processing about you by making a ‘subject access request’. We do not charge a fee for this service, however we reserve the right to charge reasonable fees for additional copies of information that has already been supplied to you, and for requests that are manifestly unfounded, excessive or repetitive. You can make a subject access request by emailing us at firstname.lastname@example.org If we hold personal data about you, we will:
Provide a description of the personal data held;
Explain why we are holding the personal data;
Inform you who this personal data has been shared with; and
Give you a copy of the data.
The right to data portability:
You have the right to obtain and reuse your personal data for your own purposes across different services.
You only have this right when the lawful basis for us processing this data is consent or for the performance of a contract, and if the data is processed by electronic means.
If these requirements are fulfilled, you may receive a copy of your personal data and/or have it transmitted to another company.
We may object to a request if it can be demonstrated that there is a legitimate reason that the transmission cannot take place, which adversely affects the rights or freedoms of others.
The personal data shall be provided in a format which is structured, commonly used and machine-readable.
The right to rectification:
If we hold inaccurate or out dated personal information relating to you, you have the right to ask us to rectify that information.
We shall rectify the information and inform you within one month of receiving the request or new information. If further time is required, you shall be informed.
In the event that the personal data to be rectified, as per a request from you, has been shared with third parties, those third parties shall be informed.
The right to object:
You have the right to request that we do not, or refuse us permission to, process your personal data for the purposes of marketing based on legitimate interests, direct marketing, profiling and for processing for scientific and/or historical research purposes.
Where you object to us processing their personal data based on legitimate interests, we shall stop processing your personal data immediately, unless we can prove legitimate grounds for such processing which override your interests and rights, or that is necessary for legal claims.
Where you object to us processing your personal data for marketing purposes, we shall stop processing immediately.
Where you object to us processing your personal data for scientific or historical research, you have an obligation under GDPR to demonstrate grounds relating to their particular situation. We might reject the request if the research is deemed necessary for the performance of a task carried out in the publics interest.
We will inform you before collecting your data if it is to be used for marketing purposes or to be shared with third parties.
The right to restrict processing:
You have the right to ask us to cease processing the personal data we holds about you.
If such a request is made, we shall only retain the personal data that is necessary to ensure the personal data concerned is not processed further.
In the event that the personal data concerned is shared with a third party, those third parties shall be informed of the relevant restrictions to processing (unless such notification is impossible or unreasonably difficult to fulfil).
You can restrict processing of your personal data for marketing purposes by contacting us at email@example.com
Where you have opted in to receive marketing correspondence, you have the right to withdraw your consent at any time, or update your preferences of the types of marketing you receive. This can be done via the instructions contained in the marketing correspondence, or by contacting us directly.
Rights related to automated decision making including profiling:
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning or significantly affecting you.
If such processing is carried out, we shall provide you with specific information about the processing, take steps to prevent errors, bias and discrimination, and give you rights to challenge and request a review of the decision made by solely automated means.
You have a right to object to profiling. Such a request can be made by contacting us at firstname.lastname@example.org
To speak to us about any of the above rights please get in touch at the above details. For further information on your rights, the Information Commissioner’s guidance is available here.
Links to other websites
This privacy notice is not applicable to links within this website which link to other websites. Please read the privacy statements on other websites which you visit.
If you would like to make a complaint about the way we have processed your data, or the information provided in this notice, please contact us our Head of Legal Services at email@example.com Alternatively you can contact the Information Commissioner’s Officer via their website.
Changes to this policy
We regularly review this privacy notice and will make any changes available on this page. If we make any significant changes, we will notify you by email. By continuing to use this website you will be deemed to have accepted such changes. This privacy notice was last updated on February 2020.
We recommend that you check this page regularly to keep up-to-date.