5. Do we share personal information?
We contract with third party service providers and suppliers to deliver certain services. Our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions. Our service providers change from time to time and we will inform you if this is the case by updating this privacy notice:
• WordPress CMS who provide our website hosting services and who control the Gravity Form plugin which is used for the “Contact Us” form on our website.
We will also provide your personal information to third parties where there is a legal obligation to do so, for example to regulators, government departments, law enforcement authorities, tax authorities and any relevant dispute resolution body or the courts.
We may also provide your personal information to third parties in connection with any sale, merger, acquisition, disposal, reorganisation or similar change in our business.
We will provide information about you to any other person who is authorised by you to act on your behalf.
The data that we collect from you will usually be stored inside the UK or the European Economic Area (EEA).
However, if you live or work outside of the UK or the EEA, we may need to transfer your personal data outside of the UK or the EEA to correspond with you. Where this applies, we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.
We also may transfer data outside the UK or the EEA where our, service providers host, process, or store data outside the UK or the EEA. Where we do this, we will ensure that the transfer is to a country covered by a decision of the Commission of the European Union or is otherwise made in circumstances where we have put appropriate safeguards are in place to protect your data in accordance with the Data Protection Legislation.
6. How long do we keep your personal information?
We will not hold your personal information for any longer than is necessary for the uses outlined above, unless we are required to keep your personal data longer to comply with the law and any regulatory requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
As an additional security measure the enquiries@castleview.co.uk email address also has an auto delete every thirty (30) days to ensure that no personal data is being held beyond such a period.
Data which is submitted via the website Gravity Form is held on WordPress CMS database which sits on the server in London. This data is automatically deleted after thirty (30) days.
7. General
Please contact us at using the details set out at section 2 above as soon as possible after there is any change to your personal details, including your contact details.
Our website may contain links to external websites. If you follow a link to other sites then please note that these will be governed by their own privacy policies and therefore we do not have any control over that other website. We cannot accept liability and/or responsibility for the protection and privacy of any data use which you provide whilst visiting those websites and such sites are not governed by this privacy notice. You should exercise caution and look at the privacy notice applicable to the website in question.
