1. How we use your information
We use information about you and your organisation to help us give you the best possible service. MRA is committed to protecting your privacy and with new EU data protection law [the General Data Protection Regulation ((EU) 2016/679) (GDPR)] we are updating our privacy policies.
This document makes you aware of how your personal data will be used and stored.
2. Data protection principles
We comply with applicable data protection law and principles, such as the GDPR, which means that your data will be:
- Used lawfully, fairly and in a transparent way.
- Collected only for legitimate purposes and not used in any way that is incompatible with those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have told you about.
- Kept securely.
3. Data security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We do not sell your date to third parties.
4. Rights of access, correction, erasure, and restriction
Your rights in connection with personal information. Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.