Introduction

The Centre for Effective Dispute Resolution and its affiliates (“G BLOG”, “we”, “us”, or “our”) are dedicated to safeguarding and respecting your personal data. This privacy policy explains why and how we gather and use personal data, as well as how individuals can exercise their rights. This policy applies to personal data that is supplied to us by people and other parties.

Any information belonging to a recognised or identifiable living person is considered personal data. Our policy is to be honest about why and how we acquire and use personal data. We receive personal data directly from individuals, from third parties operating on their behalf or in connection with an individual, or through publicly available sources (such as internet searches, and Companies House).

G BLOG is a Data Controller for the purposes of the Data Protection Act 2018 and is registered with the Information Commissioner’s Office (ICO) under registration number Z7433346. G BLOG collects and uses personal information solely for the reasons specified in our notice to the Information Commissioner’s Office.

We maintain data.

Personal data is processed by G BLOG for a variety of purposes:

Client-facing work

Where G BLOG provides professional services to clients, we may collect and handle personal data to fulfil contractual obligations. When individuals utilise our services, we often get personal data directly from them or from the person or organisation with whom they are in dispute. When businesses utilise our services, the information they supply us with may include personal data about the persons, employees, or advisers engaged in a specific situation.

Customer administration

When connecting with and analysing the requirements of current or potential clients, personal data may be handled to ensure those needs are met effectively. This may entail determining whether our clients and contacts are receiving the appropriate collection of services and information.

Our services’ promotion

We may use your business contact information to send you information on successful dispute resolution and conflict management, as well as information about our services, that we believe will be of interest. For instance, updates and insights into the sector, alternative services that may be of interest, and invites to events are all examples. Without the explicit agreement of individuals who use our consumer services, we do not utilise personal data about them for such promotional reasons.

Administration

We may collect and handle personal data in order to maintain and administer our businesses and services. This may include (but is not limited to) the maintenance of internal corporate records, the management of customer and supplier relationships, the hosting of events, and the maintenance of internal operational systems, such as personnel administration.

Regulatory

We may be compelled to collect and process personal data from time to time in order to comply with regulatory, legal, and ethical standards. This might include establishing an individual’s identity.

We may process personal data that includes any relevant financial or non-financial information that is essential for us to perform our services. This may include, but is not limited to, contact information, payroll information, employee information, shareholder, customer, and supplier lists, as well as any other data that is expressly relevant.

The type of data processed is determined by the nature of the service being offered and the intended receiver. In certain situations, depending on the nature of the service, this may include sensitive data special category data such as race or ethnic origin, political ideas, religious beliefs, trade union membership, health, sexual orientation, or criminal record.

Security

We take the security of the data we collect and maintain very seriously. We educate our employees on data protection, confidentiality, and security, and we foster a culture of confidentiality.

We have a set of rules and processes in place to protect the security of our data.

All data is stored on secure servers, and we have implemented necessary internal security measures to protect your personal information from being mistakenly lost, used or accessed in an unauthorised manner, altered or disclosed. Additionally, we restrict access to your personal data to those employees, agents, contractors, and other third parties who require the information for business purposes. They will treat your personal information exclusively in accordance with our instructions and are bound by a confidentiality obligation.

We have processes in place to deal with any potential data security breach and will notify you and any authorized regulator as required by law.

We have taken precautions to guarantee that all personal data is adequately protected and that any personal data transfers beyond the EEA are authorised.

Retention period

We maintain personal data we process for as long as is necessary to fulfil the purpose(s) for which it was obtained (including as required by applicable law or regulation).

When selecting an appropriate time frame for personal data, we consider the amount, nature, and sensitivity of the personal information, the risk of harm from unlicensed use or disclosure of your private information, the purposes for which we process your private information and whether these purposes can be accomplished through other means, and applicable legal requirements.

Exchange and publication of information

G BLOG will never sell or exchange your personal information with a third party.

Our data processors may have access to your information. These are third-party service providers who supply us with applications/functionality, data processing, or information technology services. Third parties assist us in providing our services and in maintaining, operating, and managing our internal information technology systems. For instance, information technology providers, cloud-based software providers, identity management providers, website hosting and administration providers, data analysis providers, data backup providers, security providers, and storage providers.

Additionally, we may share personal data with individual members of our mediator, adjudicator, consultant, and training panels as necessary for the execution of our services.

All of our trusted partners are expected to adhere to data privacy laws and our stringent standards, and are only permitted to treat your information in accordance with our explicit instructions. We will always ensure that suitable contracts and procedures are in place, and we will conduct regular compliance audits of all our partners.

We may disclose your personal information to third parties if we are required to do so by law (for example, to the police or a government body); if it is necessary to enable us to enforce or apply our terms and conditions or rights under an agreement; or if it is necessary to protect us, for example, in the case of suspected fraud or defamation.

We will not share your information with any third parties for any other reason.

Your legally protected interests

You have a variety of rights under the GDPR and Data Protection Act 2018. The following sections outline your primary rights. Additionally, the Information Commissioner’s Office can provide additional information.

• You have the right to be informed in plain language about how we use your personal data and your rights.
• You have the right to request access to your personal data; this entitles you to acquire a copy of the personal data we possess about you and to verify that it is being processed lawfully.
• You have the right to request corrections to the personal data we possess on you; this enables you to have any inaccuracies or omissions addressed.
• You have the right to seek the deletion of your personal data; this permits you to request that we erase or remove personal data that we are no longer processing for a legitimate purpose.
• You have the right to object to us processing your personal data if we are relying on our legitimate interests or the legitimate interests of a third party and there are specific facts that make you want to object to us using your data on this basis and we do not have a compelling legitimate reason to do so that outweighs your rights, interests, and freedoms; you also have the right to object if we are processing your personal data for direct marketing purposes.
• You have the right to request that we suspend the processing of your personal data; this enables you to request that we stop processing personal data about you.
• You have the right to request the transfer of your personal data to a third party if you supply it to us and we use it with your agreement or to carry out a contract with you and we handle it automatically.
• You have the right to withdraw consent in any situation where we have relied on your consent to collect, handle, and transmit your personal data for a specified purpose.
• You have the right to file a complaint with the appropriate authorities. If you believe we are using your information in a way that violates the GDPR or the Data Protection Act 2018, you have the right to complain to us and, if you remain dissatisfied with our answer, you have the right to submit a subsequent complaint with our The Information Commissioners Office (ICO).

The ICO may be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Additionally, you may reach them by phone at 2323235745 or online at ico.org.uk.

If you wish to access, verify, correct, or request erasure of your personal data, object to the processing of your personal data, withdraw your consent to the processing of your personal data, or request that we transfer a copy of your personal data to a third party, please contact our Company Secretary at https://www.gblog.info/.

We will get back to you as soon as possible with a response to your request. Generally, we will respond within one calendar month of receiving your request, but on rare situations, it may take longer, in which case we will notify you.

This Privacy Notice may be amended from time to time.

Any future modifications to our Privacy Notice will be posted on our website and, where applicable, communicated to you through email or other means.