Privacy Policy under GDPR regulation (for Europe and companies doing business towards European area users) for AMG Contracts

This privacy policy describes how our company collects, uses and discloses your personal information and data when you use our services through our websites and/or application.

Consent

K4 Consultancy understands ‘consent’ to mean that it has been explicitly and freely given, and a specific, informed and unambiguous indication of the data subject’s wishes that, by statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. The data subject can withdraw their consent at any time.

K4 will ensure active communication between the parties to demonstrate active consent. Consent cannot be inferred from non-response to a communication. The Controller (K4 Consultancy) must be able to demonstrate that consent was obtained for the processing operation. For sensitive data, explicit written consent of data subjects must be obtained unless an alternative legitimate basis for processing exists.

Disclosure of data

K4 Consultancy will ensure that personal data is not disclosed to unauthorised third parties which includes family members, friends, government bodies, and in certain circumstances, the Police. All Employees/Staff should exercise caution when asked to disclose personal data held on another individual to a third party. It is important to bear in mind whether or not disclosure of the information is relevant to, and necessary for, the conduct of K4 Consultancy business. All requests to provide data for one of these reasons must be supported by appropriate paperwork and all such disclosures must be specifically authorised by the Data Protection Officer / GDPR Owner.

Retention and disposal of data

K4 Consultancy shall not keep personal data in a form that permits identification of data subjects for a longer period than is necessary, in relation to the purpose(s) for which the data was originally collected. K4 Consultancy may store data for longer periods if the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the implementation of appropriate technical and organisational measures to safeguard the rights and freedoms of the data subject.

Data transfers

All exports of data from within the European Economic Area (EEA) to non-European Economic Area countries (referred to in the GDPR as ‘third countries’) are unlawful unless there is an appropriate “level of protection for the fundamental rights of the data subjects”.

Information asset register/data inventory

K4 Consultancy has established a data inventory and data flow process as part of its approach to address risks and opportunities throughout its GDPR compliance project. K4 Consultancy data inventory and data flow determines:

business processes that use personal data;
source of personal data;
volume of data subjects;
description of each item of personal data;
processing activity;
maintains the inventory of data categories of personal data processed;
documents the purpose(s) for which each category of personal data is used;
recipients, and potential recipients, of the personal data;
the role of the K4 Consultancy throughout the data flow;
key systems and repositories;
any data transfers; and
all retention and disposal requirements.

K4 Consultancy are aware of any risks associated with the processing of particular types of personal data.

K4 Consultancy assesses the level of risk to individuals associated with the processing of their personal data. Data protection impact assessments are carried out in relation to the processing of personal data by K4 Consultancy and in relation to processing undertaken by other organisations on behalf of K4 Consultancy

K4 Consultancy shall manage any risks identified by the risk assessment in order to reduce the likelihood of a non-conformance with this policy. K4 Consultancy shall, prior to the processing, carry out a DPIA of the impact of the envisaged processing operations on the protection of personal

Where, as a result of a DPIA it is clear that K4 Consultancy is about to commence processing of personal data that could cause damage and/or distress to the data subjects, the decision as to whether or not K4 Consultancy may proceed must be escalated for review to the GDPR Owner.

The GDPR Owner shall, if there are significant concerns, either as to the potential damage or distress, or the quantity of data concerned, escalate the matter to the supervisory authority. Appropriate controls will be selected and applied to reduce the level of risk associated with processing individual data to an acceptable level, by reference to K4 Consultancy documented risk acceptance criteria and the requirements of the GDPR.

What kind of data is collected?

Our company collects the following set of data and information:

Personal identification information (name, physical address, email address, phone number…)
Video and Imagery uploaded in relation specific data inputs such as forms, both internally and externally to the application

How is the data collected?

You provide our company with most of the data we collect, we collect data and process personal data and information when:

You register online or place and order for any of our products or services
Use our website or application when cookies are set on your device

Our company might also receive data and information indirectly from the following sources:

Flurry (https://www.flurry.com)
Firebase (https://www.firebase.google.com)
Count.ly (https://count.ly)
AppsFlyer (https://www.appsflyer.com)
Facebook App Event (https://developers.facebook/coom/docs/app-events)

How will we use your data?

Our company collects your data so that we can:

Process your order, manage your account
Send you email with special offers on products and services

How will we use your data?

Our company collects your data so that we can:

Process your order, manage your account
Send you email with special offers on products and services

When our company processes your order it may send your data to credit and banking agencies to prevent fraudulent purchases that can include third-party payment processors.

How is the data stored?

Our company securely stores your data in France (Europe) and the United Kingdom.

Our company will keep your name, physical address, email address, phone number for 3 years after a period of inactivity. Once this time period has expired, we will delete your data by running scheduled automations that identify 3 years from your last active date

Device model (anonymous)
OS version (anonymous)
Device’s language (anonymous)
Geolocalisation if provided
Country (deducted from geolocalisation)
City (deducted from geolocalisation)

Third-party data processors

(EXAMPLE CRM/ZAPIER/AIRTABLE/TAWKTO…)

Airtable
Zapier
ScormCloud
Datapine
Softr
Paperform
Fillout
Jotform

Marketing

Our company would like to send you information about products and services of ours that we think you might like.

If you have agreed to receive marketing emails or communication you may always opt out at a later date.

You have the right at any time to stop our company from contacting you for marketing purposes or giving data to other partners working with our company.

If you no longer want to be contacted for marketing purposes you can contact us at: info@k4consultancy.com

Data protection rights

Our company would like to make sure you are fully aware of all your data protection rights. Every user has, if applicable, the right to:

The right to access: you have the right to request our company for copies of your personal data.
The right to rectification: you have the right to request that our company corrects any information you believe is inaccurate or mistaken. You also have the right to request our company to complete information you believe is incomplete.
The right to erasure: you have the right to request that our company erase your personal data under certain conditions.
The right to restrict processing: you have the right to request that our company restricts the processing of your personal data under certain conditions.
The right to object to processing: you have the right to object to our company’s processing of personal data under certain conditions.
The right to data portability: you have the right to request that our company transfers the data we have collected to another organization or directly to you under certain conditions.

If you have any request regarding this matter we have a month to answer you. If you want to exercise any of these rights please contact us by using the following contact detail: info@k4consultancy.com

Send us an email at:info@k4consultancy.com

Privacy policies of other websites or third-party

Our company’s website might contain links to other websites, our privacy policy applies only to our website and/or application and services so if you click on another website you must read their privacy policy.

Changes to our privacy policy

Our company keeps its privacy policy under regular review and places any updates on this web page, this privacy policy was last updated on 07/03/2023.

Contacting us

If you have any questions or demand about our privacy policy, the data we hold on you, or you would like to exercice one of your data protection rights, please contact us at: info@k4consultancy.com

Send us an email at: info@k4consultancy.com

Contacting the appropriate authority

If you have any complaint or concern regarding how your data is managed you can contact the appropriate authority at: Informations Commissions Office: NI@ico.org.uk

PRIVACY POLICY under other regulations than GDPR

Our company is committed to protecting individual privacy and securing the personal information made available to us when you visit. This privacy policy describes what information is made available to our company and how that information is used and retained and provides information on:

Information we receive (when you provide it, visit our website, receive email…)
How this information is used
Sharing of this information
Data retention
Third-party tools and sites
Children and privacy security

If you have any question or suggestion for its improvement, please let us know at info@k4consultancy.com

Information you give us

You do not have to provide our company with any personal information or create a user account to access information on our website and/or application. However for some services we may need personal information from you such as:

Personal identification information (name, physical address, email address, phone number…)
Information that is collated in relation to your job role.
Personal video's that are submitted from within the app in relation to the users business needs

Also when you visit our website the following information is automatically received and stored by servers:

IP address
Location

Third-party websites

Our company’s website and/or application might contain links to other websites, our privacy policy applies only to our website so if you click on another website you must read their privacy policy.

How information is used

If you choose to provide us with information we may use that information to contact you, respond to your message or provide information or services you requested.

We use data you provide and automatically generated data for statistical analysis to assess what information is of interest to users and system performance. This allows us to make general improvements to our site. We may also use your information in order to detect, prevent and respond to security issues and harmful activities on our website and/or application.

Sharing of this information

Information you choose to share with our company may be treated as public information.

Our company uses a third-party analytics provider (such as Google Analytics) to analyze data from cookies. The third-party analytics provider does not receive personally identifiable information through these cookies. We have also limited the provider’s ability to see your full IP address.

Within our company we restrict access to personally identifiable information to employees, contractors and vendors subject to non-disclosure requirements who require access to this information in order to perform their official duties and exercise controls to limit what data they can view based on the specific needs of their position.

We do not use or share your information for commercial purposes and except as described above, we do not exchange or otherwise disclose this information.

Link to external websites and third-party

Our website may link to other websites created and maintained by other private and/or public organizations and individuals. When you follow a link to an external site you are leaving our website and are subject to external site’s privacy and security policies. Our company does not control or guarantee the accuracy, relevance, timeliness or completeness of information contained on an external site.

Security

Our company takes reasonable precautions to protect our site and information. For example we restrict access to personally identifiable information to employees, contractors and vendors subject to non-disclosure requirements.

Our company also uses commonly used practices and technical controls to protect the information in our possession or control. These practices and controls include, but are not limited to, encrypting the transfer of personal information over the internet, using firewalls and intrusion detection systems and maintaining strict technical controls and procédures to ensure data integrity.

We periodically review our processes and systems to verify compliance with industry best practices and to ensure the highest level of security for our website.

Updates do this privacy policy

Our company will revise or update this policy from time to time, if we make significant changes to how we handle personal information we will post changes to the policy on our site and change the date at the end.

Updated on: 03/07/2023

Cookies

We can use different type of cookie or tracking technologies while you are visiting our website and/or application:

Strictly necessary cookies: These types of cookies enable you to access and browse websites and use their features. Without these cookies, services like billing or shopping baskets cannot work properly.
Performance cookies: these cookies collect information and data about how you use our websites and/or application. The data collected can be used to optimize our websites and/or applications. These cookies are used to know where our visitors and users are coming from. These cookies do not collect information that identifies you personally.
Functionality cookies: these cookies allow our website or application to remember your choices. They can be used to memorize your localisation, or your preferences such as language settings or font size.

How to manage cookies?

You can set your browser not to accept cookies and the above website and/or application tells you how to remove cookies from your browser. However some of our websites and/or applications might not work properly without the use of cookies.

Here are some of the main explanation on how to delete cookies on your browser: https://support.google.com/chrome/answer/95647 (Chrome); https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox); https://help.opera.com/en/latest/security-and-privacy/ (Opera); https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer); https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac (Safari); and https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

For mobile devices, if you don’t want to receive targeted advertising based on your center of interest coming from a mobile application, please check the parameters of the operating system of your mobile device and follow these instructions: 1) iOS Users: to enable “Limited Ad Tracking” follow the instructions given by Apple. 2) Android Users: to enable the option “deactivate ad personalisation”, follow the instructions given by Google on Google Play. 3) You might want to download the DAA mobile AppChoices application to control behavioral advertising online.

Supporting our NHS Heroes at Antrim Hospital