Horley Online Privacy Policy

Horley Online Privacy Policy

Horley Online is a community website for the town of Horley in Surrey and the surrounding area. Published by a small team of local people, we are committed to handling your Personal Information in a responsible manner, ensuring we provide the appropriate safeguards. Horley Online follows the guiding principles of the General Data Protection Regulations (GDPR) and the Privacy of Electronic Communications Regulations 2003 when it comes to protecting your data.

The Editor of Horley Online is the Data Controller as defined by the GDPR and can be contacted by email at editor@horleyonline.co.uk or by telephone +44(0)1342 842400.

The first thing we want to say about the privacy of personal information is that we do not share any information we have with other parties.

As a community website we publish a job vacancies page and a local business directory. We also publish pages of information on local schools, health services, sports clubs and more.

About the privacy of your information on the Horley Online Business Directory

If you complete our online registration form to list your business or service on the Horley Online Business Directory you are submitting your data with the aim of having it published on the Horley Online Business Directory. During this process we collect and store the email address you provide so that we can contact you to manage your entry. We do not publish your email on the directory, nor do we pass on your email to any other parties.

On the Horley Online Business Directory we publish your business description, a link to your website and any telephone numbers or postal address information you submit to us. We store the information you submit to us until you tell us to remove your directory listing.

You can pay for an ‘Enhanced Listing’ on the Horley Online Business Directory. Your payment is taken via the Stripe payment system. We do not see or store your payment details. These are collected and processed by Stripe. Stripe have signed up to the Privacy Shield Framework and we are reassured that this framework meets the requirements of the GDPR regulations.

Stripe publish the following statement: If You are located in the EEA or Switzerland, we comply with applicable laws to provide an adequate level of data protection for the transfer of Personal Data. Stripe is certified under the EU-U.S. and the Swiss-U.S. Privacy Shield Framework. View the Stripe Policy Statement.

About the information you supply for the Horley Online Job Vacancies Page

If you complete our Job Vacancies Form you are submitting to us the information you want us to post on our Job Vacancies Page. During this process we collect and store the email address you provide so that we can contact you to manage your job vacancy.

We do not publish the email address that you use to send the form. However, because you may want your email address published so that job applicants can contact you, you are asked on the Job Vacancies Form whether you want us to publish your email address. If you click the ‘Yes, please publish my email address’ button we will publish any email addresses you submit on the Job Vacancies Page.

We hope this is clear. If you have any queries please contact us at Horley Online.

About your information if you advertise on Horley Online

If you complete the Advertising Enquiry Form for Horley Online we collect and store the information you provide so that we can contact you to manage your advertising. We only display your advertisement on the Horley Online pages. Your advertisement will link to your website. We do not publish any information about you as an advertiser, nor do we pass on any information about you to any other parties.

Cookies

We use cookies to enable a better user experience when using our website. We do not collect personal information through our cookies and we do not use 3rd party cookies either for marketing or analytical purposes.

Retention policy

The data we collect directly from you is the minimum we require to facilitate the lawful processing described above. Personal information placed on our system will be deleted as soon as practicable after termination of a commercial contract between us.
Any personal information collected and processed for finance purposes will be held for the maximum time as determined by any legal requirement (normally 3 years).

Your rights as a data subject

The regulations provide a number of rights to you as the Data Subject. Horley Online is committed to upholding those rights, and those applicable to the personal information we collect and process are listed below. In addition to these rights, you have the right to escalate any concern to the Supervisory Authority, which in the UK is the Information Commissioners Office https://ico.org.uk. A full and detailed explanation of all rights can be found at https://ico.org.uk/for-the-public/

The Right to be Informed
You should be clear about what, why and in what way your personal information will be processed at the time it is processed. This privacy policy sets out that information
.

Right of Access
You have the right to know what personal information is held, by whom and why. You can send a Subject Access Request to see what personal information and any supplementary information relating to you is held by us. We will provide you with the information we hold within one month of your request, unless the provision of that information is particularly complex. In which case, we may extend the deadline by a further two months. This information will be provided free of charge unless you require multiple copies of the same information, in these circumstances, we retain the right to charge a reasonable administrative fee.

The Right to Rectification
If the information we have collected and processed is inaccurate or incomplete, you have the right to have it rectified. We will respond to your request for rectification within one month, unless the request is complex or multiple.

Right to Erasure
You have the right to have your personal data erased and to prevent processing in some specific situations, these include:
– Where personal data is no longer necessary regarding the purpose for which it was originally collected
.
– When you withdraw consent
.
– When you oppose the processing and there is no superseding legitimate interest for continuing the processing
.
– If the personal data was unlawfully processed (i.e. otherwise in breach of the GDPR)
.
– If the personal data must be removed in order to comply with a legal obligation.
– If the personal data is processed in relation to the offer of information/society services to a child.

Right to Restrict Processing
If you contest the accuracy of the personal data we hold, we will restrict the processing of your data until accuracy is verified. The restriction of processing can occur for other reasons too, such as if you require us to retain your data in the advent of a legal claim.

Right to Data Portability
You have the right to move, duplicate or transfer your data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

Other websites
This privacy policy only applies to the Horley Online website, if you follow a link to another website from ours, you should read their own privacy policy.

Changes to our privacy policy

We keep our privacy policy under review and we will place any updates on our website. This privacy policy was last updated in April 2018.

How to contact us
You can write to Horley Online at this address:
Laker Sharville Ltd.
208 Smallfield Road
Horley
Surrey
RH6 9LS