Privacy Policy
The services available at https://orderwork.online/ring or https://my.orderwork.co.uk are provided by OrderWork Ltd (Registered No: 05662167), of Montpelier Chambers, 61-63 High Street South, Dunstable, Bedfordshire LU6 3SF. ("OrderWork", "we", "us" or "our").
This policy (together with our Terms and Condition) set out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It applies to both customers and service providers, and, with regard to transparency provisions according to the General Data Protection Regulation (GDPR), to other individuals whose data we may process except for our employees.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Orderwork Limited treats all information processing seriously. We have a continuous awareness that some of the data that we process is personal data, we need to ensure our processes treat personal information with respect and protect it from misuse. We take the processing of personal data very seriously.
For the purpose of the General Data Protection Regulation (GDPR) and applicable UK laws, we are the data controller where you are using our services through the OrderWork platform. If you are using OrderWork Ltd through our commercial partners, OrderWork Ltd may be a joint data controller or a data processor, which will be made clear to you at the point of sharing your data. In cases where OrderWork Ltd is merely a data processor, it is our partners’ responsibility to inform you about their data processing practices and your rights in that regard.
We process data only for our core business purpose, we only process data for the original purpose that it was collected for. We do not keep lists of names for mail shots or cold calling, we will never pass on information to other parties for that purpose.
Here are the principles we operate to in respect of the personal data that we process;
Services to our end user customers
We process personal data about the individuals that we deliver services to. We only take the information that we need to be able to communicate with our customers about arrangements to plan the service, to deliver the service and then carry out any follow up work straight after the service which may include a satisfaction survey. For this we hold their name, address, phone number and email address. We do not request, record or process any other data, including special data, about our customers.
If there is on online payment made in relation to the service, we pass card details directly to our third-party payment processing provider, Sage Pay (https://www.sagepay.co.uk/), we do not record payment card or payment information ourselves.
All transaction and cardholder information passed between us and Sage Pay will be encrypted using SSL encryption technology. Sage Pay securely stores and processes card data for us, any messages sent to our servers from Sage Pay are signed using MD5 hashing to prevent tampering. We only access your payment information via Sage Pay using a secured connection to handle payments, credits and refunds.
Sage Pay is PCI DSS (Payment Card Industry Data Security Standard) compliant to the highest level and maintains regular security audits. They are also regularly audited by the banks and banking authorities to ensure that their systems are impenetrable. Sage Pay is an active member of the PCI Security Standards Council (PCI SSC) that defines card industry global regulation. You may also want to read Sage Pay’s Privacy Policy.
After the service is completed and invoiced, we may retain all the information about the service event to enable analysis of our services, for historical trending and planning for the future of our business.
If we use a supplier to deliver a service for us, customer details will be passed to them to enable the service. After the supplier completes their tasks they will not retain that information.
We never pass our customer data on to other parties after a service event is closed and we will not contact end user customers after all service events are closed.
All our customer data is held on our own servers, processed and hosted in the UK.
Disclosing Your Information
We will not disclose your personal information to any other party other than in accordance with this Privacy Policy and in the circumstances detailed below:
1. In the event that we sell any or all of our business to the buyer.
2. Where we are legally required by law to disclose your personal information.
3. To further fraud protection and reduce the risk of fraud.
Cookies
Our websites/Apps may use cookies to distinguish you from other users of our websites/Apps.
A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. This helps us provide you with an optimal experience when you use our websites/Apps and also allows us to continuously improve these.
Our cookies may be persistent (those only OrderWork can read and use to save your login information for future logins to the OrderWork platform) or session-based (which get automatically deleted from your computer when you log off from the OrderWork platform and then close your browser).
If you are concerned about cookies, it is possible to turn them off in your web browser preferences.
The following table sets out the different categories of cookies that our Apps/websites use and why may we use them. The lists of third-party cookie providers are intended merely as illustrative not comprehensive:
|
Type of Cookie |
Purpose |
Cookie Provider |
|
Authentication & Session Management |
These cookies (including local storage and similar technologies) tell us when you’re logged in, so we can customise your experience and connect your account information and settings. |
OrderWork |
|
Features and Services |
These cookies provide functionalities that help us deliver our services on the OrderWork platform. For example, allowing you to pay via Sage, showing your service location on a map, showing only services in your area if you are a customer, or enabling you to contact OrderWork via Chat |
OrderWork Googlemap SagePay Tawkto |
|
Analytics and Research |
These cookies are used to understand, improve, and research our products and services. For example, we use cookies to understand whether our users access our websites more from a computer or mobile device and how various features are accessed depending on device type. |
OrderWork Bitly
|
|
Advertising |
If you have heard about OrderWork via an advertisement on another website, we may track the origin of your visit. This is so we can measure conversions and the cost effectiveness of our marketing activity. |
OrderWork |
Your rights under the GDPR;
Right of access: You have the right to obtain confirmation from us as to whether or not we process personal data from you and you also have the right to at any time obtain access to your personal data stored by us. To exercise this right, you may at any time contact us.
Right to rectification of your personal data: If we process your personal data, we shall endeavour to ensure by implementing suitable measures that your personal data is accurate and up-to-date for the purposes for which we collected your personal data. If your personal data is inaccurate or incomplete, you have the right to obtain the rectification of such data. To exercise this right, you may at any time contact us.
Right to erasure of your personal data or right to restriction of processing: You may have the right to obtain the erasure of your personal data or the restriction of processing of your personal data. To exercise this right, you may at any time contact us at data-controller@orderwork.co.uk or info@orderwork.co.uk.
Right to withdraw your consent: If you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on the consent before the withdrawal. To exercise this right, you may at any time contact us
Right to data portability: You may have the right to receive the personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller. To exercise this right, you may at any time contact us.
Right to object: You may have the right to object to the processing of your personal data as further specified in this Privacy Policy. Right to lodge a complaint with supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority located in the European Union.
CHANGES TO OUR PRIVACY POLICY
Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.
Contacting Us
Please do not hesitate to contact us regarding any matter relating to this Privacy Policy at info@orderwork.co.uk or data-controller@orderwork.co.uk if the nature of the enquiry is specifically in regard to data protection and security.
