Data Protection Code of Practice
Our data protection code of practice lays out our procedures that ensure The
Wright Partnership Limited trading as Wright & Partners and our employees
comply with The General Data Protection Regulation (GDPR) (Regulation (EU)
2016/679).
What data do we store?
We store email addresses and contact numbers in our password protected
Outlook 365 inboxes. We store paper copies of remittances of payment, but we do
not store payment details such as card details. We store paper copies of correspondence
in secure archive folders which are destroyed after 6 years.
What do we use the data for?
We use data to communicate with our clients, employees and property related
news or programmes.
SMS/email notifications and marketing, recall cards
We do not use SMS for marketing. We do not
send out email marketing through a database. We rely on business through our
work as a registered member of institutions such as the RICS, word of mouth, marketing
properties on web based programmes such as EACH and CoStar and on our website.
What software do we run to manage data?
We use the following software to store and handle
our data. All software systems are fully or are working towards being fully
GDPR compliant by 25th May 2018.
Offsite
Microsoft Exchange and locally Outlook for Emails - GDPR Compliant
General
documents are stored on our servers which are password protected
Security of information
The data is stored on our servers located in a
dedicated room. Paper documents, if retained, are stored in secure cupboards.
The information is only accessible to authorised team members.
Disclosure of information
The data we collect is not shared with any third party, unless we
receive consent from the data who’s information we have and would like it to be
passed on.
Retaining information
We retain data in securely archived email folders for reference purposes
and paper documents are archived securely for 6 years.
Access to your records
You have the right of
access to the data that we hold about you and to receive a copy. Please note
that you may be asked for ID verification when requesting access to your
records.
If you do not agree
If you do not wish personal data that we hold about you to be disclosed or used
in the way that is described in this Code of Practice, please discuss the
matter with your contact at Wright & Partners
Return to news