Privacy Policy

This privacy policy was last updated on Tuesday 9th January 2024.

Hasan Independent IT Services (also referred to as “Hasan IT“), is committed to keeping your information private and being transparent about our dealings with your personal data.

As an existing or prospective client, contractor or job applicant of Hasan IT, there are many ways you can use the services we offer, some of which require you to share your personal data with us.

This Privacy Policy (together with our Terms and Conditions and any other documents that may be referred to in either) outlines the way in which we manage any personal data obtained through hasanit.co.uk (the “Website”) or otherwise provided by or about individuals (“you”, “your”) in the course of our WordPress Website Development and Data Engineering services (the “Services”). It explains:

• what personal data we collect about you in the course of your engagement with our services, why we collect it, who it goes to and how long we keep it
• how we use your personal data
• how we protect your personal data
• your legal rights in respect of your personal data, including how to access and update the information we hold about you.

Privacy Policy Contents

1. About Us

For the purposes of the General Data Protection Regulation and any other applicable data protection laws in force in the UK from time to time, the data controller is Hasan Independent IT Services (“Hasan IT”, “we”, “us”, “our”). This means that we decide why and how your personal information is used.

The Data Protection Officer can be contacted by emailing data@hasanit.co.uk. Hasan Independent IT Services are based at our Manchester office. You can find the contact details on our Website here.

2. What information do we collect about you?

By “your information”, “personal data” or “personal information”, we mean information about you (or others acting on your behalf, such as your employee or partner) from which you or that individual may be identified.

The categories of information we collect about you depend on the relationship you have with us.

We will let you know at the point of collecting your information whether this is optional, or whether it is necessary for you to provide this information to meet certain statutory or contractual requirements. If the latter and you do not wish to provide us with this information, this may limit the services we are able to provide you.

3. Where do we get your data from?

We may collect, store or transfer a variety of personal information from you directly when you:

• communicate with us via email, phone, in person, or an online enquiry form;
• request or receive our Services; or
• access, subscribe to or interact with the Website.

We may also receive your personal information from other sources such as:

• public searches (e.g. contact details from Companies House or LinkedIn)
• event attendance lists (if you have agreed to be contacted by us)
• your employer (if you are the nominated contact for a client)
• your profile on any external websites that you submit in connection with your job application (e.g. Linkedin profile, website, blog or portfolio)
• certain third party analytics cookies which collect information on how visitors use our website (see our Cookies policy here for further details).

4. Why do we collect your personal information and on what grounds?

We will only use your personal data if we have a permitted lawful basis to do so. Generally we collect your personal data because is it necessary for:

a. Performing our contract for the Services with you.

This means processing your personal data where it’s necessary to fulfil a contract with you or to take steps, at your request, before entering into such a contract.

b. Pursuing our legitimate interests.

This means processing your personal data as and when necessary to do so in order to conduct and manage our business to provide you with the best service and experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We don’t use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

We may also rely on your consent to use your personal data for marketing purposes (see “Marketing communications” below).

The purposes for which we use your personal data differ according to your reasons for engaging our services.

Regardless of your status, we will generally process your information for:

• monitoring the use of our Website (for our legitimate interests in providing effective services to you)
• in order to comply with our contractual obligations, such as requirement to appropriately meet the defined milestones

5. Marketing communications

We may rely on your consent to use your personal data for marketing purposes. This means that:

• where you have subscribed to our emails or opted in to receive marketing communications from us, you have agreed that we may use your information to contact you by email, post and occasionally by telephone, about new developments, offers and events that you may find useful, as well as other similar products and services offered by us from time to time.
• where you have permitted us to use your personal details in connection with our promotional materials (e.g. to provide a quote from you in relation to a news update about our work with you), you have agreed that we may publish your name, company name, job title, comments about the services you received from us and any other reasonable personal information which may be relevant to the PR materials on our Website or other forms of media (e.g. published journals, newspaper articles and social media channels).

You can withdraw your consent to marketing at any time by clicking the “unsubscribe” button at the bottom of each marketing email you get from us or contacting us using the details in the “Contact us” section below.

However, if we have collected your contact details in connection with another purpose or under another lawful basis (e.g. to provide certain contractual services to you), we may still be permitted to retain your data for those alternate purposes after you have withdrawn consent for marketing purposes. Additionally, withdrawing your consent may mean you are unable to receive certain further Services from us and it may not always be possible to remove your personal details from existing promotional materials before you withdrew your consent (e.g. if the materials have already been distributed in hard copy).

When we communicate with you it will be from either or both of Hasan Independent IT services, or Hasan IT, which is the collective brand name used for us.

6. Specific information about your data

Please click the relevant headings below to see more specific information about the personal data that we collect about you, our purposes for collecting this data and our legal grounds.

Are you:

7. Who do we share your information with?

8. How long will we keep your data for?

We keep your data for as long as it’s necessary to meet the relevant purposes for which we’ve collected your data, including for the purpose of satisfying any legal, accounting or reporting requirements.

To determine the appropriate length of time for holding your data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm, from unauthorised use or disclosure of your personal data, the purpose for which we process your data and whether we can achieve those purposes through other means, along with the applicable legal requirements.

9. Will my personal data be sent abroad?

We will process your personal data within the European Economic Area (“EEA”) as far as possible. However, some of the external parties we work with to provide our services to you are based outside of the EEA. In particular, some of our contractors are based in Bangladesh and some of your personal data may need to be transferred there.

We ensure that where such international transfers are needed, these will be made subject to appropriate safeguards as required by data protection laws to ensure a similar degree of protection is afforded to your personal data. Such measures include the use of EU Commission approved standard contractual clauses or using organisations certified under the Privacy Shield framework You can request copies of any model clauses currently in use for transferring your data outside of the EEA by contacting us at the details below or view the list of Privacy Shield participants here.

10. Your rights in respect of your personal data

Under certain circumstances, you have rights under data protection laws in relation to the personal data we hold about you. You can request to:

• access information held about you. Please note that we reserve the right to request for proof of your ID to process the request, and to charge you a reasonable administrative fee for any repetitive, manifestly unfounded or excessive requests. If we refuse your request to exercise this right, we will give reasons for our refusal and allow you to challenge our decision.
• rectify any incorrect or incomplete data we hold about you. It is both in our interest and yours that any personal information we hold about you is accurate, complete and current. If the data we hold about you is inaccurate in any way, please contact us to have your personal information corrected.
• delete, restrict or remove the data we hold about you.
• transfer the data we hold about you to another party.
• object to any further processing of your data.

You can make all such requests via emailing: data@hasanit.co.uk

Please note that in respect of all these rights we reserve the right to refuse your request based on the exemptions set out in the applicable data protection laws.

If you have any concerns about how we handle your data, please contact us. If you are not satisfied after we’ve tried to resolve your issue, you’ll be entitled to lodge a complaint with our data protection regulator, the Information Commissioner’s Office (ICO). Please see the ICO website for further details, www.ico.org.uk

11. Third party links on the website

Our site may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these will have their own privacy policies which should be checked before you submit any personal information through them. We are not in control of, and do not accept any responsibility or liability for these policies or any third party website linked to the Website.

12. Cookies and other technical information

For further information about our Cookies policy, please click here.

13. Changes to this policy

We may from time to time review and amend this Privacy Policy to take into account changes in law, technology and our operations. We will post any changes to this Privacy Policy on the Website from time to time. Please periodically review this Privacy Policy before using the Website as continued use of the Website shall indicate your acceptance of any changes. All personal information held by us will be governed by the most recent Privacy Policy posted on the Website.

14. Contact us

If you have any questions or comments about this Privacy Policy, including requests to access or modify the user of your personal data, you can contact us by calling us on 07xxxxxxxxx or emailing data@hasanit.co.uk.