INTRODUCTION

This Privacy Notice sets out how Hiizzy Enterprises Limited ("Hiizzy", “we”, “us” or “our”) uses and protects any information that you give us when you access or use our www.hiizzy.com website (“Website”). We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this Website, you can be assured that it will only be used in accordance with this Privacy Notice. We may change this Privacy Notice from time to time by updating this page. You should check this page regularly to ensure that you are happy with any changes.

DEFINITIONS

Personal Data means any information that can identify, directly or indirectly, a living individual.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the purposes of this Privacy Notice, Hiizzy is the Controller.

Processing means any operation or set of operations which is performed on Personal Data or on sets of Personal Data.

WHAT WE COLLECT

We may collect and process any of the following information:

· Your name;

· Your contact information including your email address;

· Your demographic information such as postcode;

· Your preferences and/or interests;

· Your other information relevant to customer surveys and/or offers;

· Your information that you provide to us when you use the Website;

· Your client login credentials (username and password); and/or

· Your IP address used at the time of access.

If you have provided us with the Personal Data of another person, by continuing to use our Website you warrant that they consent to the processing of their Personal Data and that you have informed them of our identity as a Controller and provided them with a copy of this Privacy Notice.

If you are applying for a job with us, we might ask you to participate in aptitude tests and/or to attend an interview – or a combination of both. Information will be generated by you and by us. For example, we might take interview notes. This information will be held by Hiizzy.

WHAT WE DO WITH THE INFORMATION WE GATHER

We require this Personal Data to understand your needs and provide you with a better service, and in particular for the following purposes:

· Our internal record keeping;

· To improve our products and services;

· To periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided if you have consented to such materials being provided;

· For market research purposes;

· To process and consider any applications for employment with us;

· To customise our Website according to your interests; and/or

Under laws which are designed to protect your Personal Data, we need to have what is a called a ‘lawful basis’ or ‘ground’ each time we use, share or otherwise process your Personal Data.

We may rely on one or more of the following lawful basis’:

· If you have agreed (provided your consent) to us processing your Personal Data for the relevant purpose; and/or

· Our legitimate interest in the effective delivery of information and any services to you.

Here is a list of all the ways that we may use your Personal Data, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.

What we use your Personal Data for	Our Grounds/Reasons	Our Legitimate Interests
Internal record keeping	Our legitimate interests	Developing products and services and what we charge for them
To improve our products and services
To customise the Website according to your interests
Periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided	Our legitimate interests	Working out which of our products and services may interest you and telling you about them Defining types of customers for new products or services
From time to time we may contact you for market research purposes	Your consent
For the use of Cookies on our Website – please see ‘How we use cookies’
Progressing any employment applications from you	Your consent
Complying or fulfilling our legal and/or regulatory obligations	Our legitimate expectations	Compliance with legal and regulatory obligations

SECURITY

We are committed to ensuring that your information is secure. We protect your information by:

Offering you a secure transmission method to send us personal or company information;

Only share it with staff members and/or third parties who need to access it; and

Implementing suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

You can protect your data by:

Enabling security features on your browser; and

Monitoring the URL of the site you are visiting (secure URLs begin with https:// rather than the normal http://) along with the security symbol of the site your browser (e.g. a broken or incomplete key in your browser) to help identify when you are communicating with a secure server.

HOW WE USE COOKIES

This Website creates a number of cookies, which are referred to as ‘first party cookies’ as they are specific to the host site that created them. All the first-party cookies which are created do not store any personal or sensitive information, or anything that makes you personally identifiable to us. They are used for essential functionality such as security when processing form data or for analytics which helps us use anonymous visitor data to gain a better understanding of how people use our Website.

In addition to our first-party cookies, you may be served one or more third-party cookies during your visit to our Website. By using our Website we'll assume that you are happy to receive all cookies on our Website, but we have provided information on our dedicated cookie policy page on how you can set your browser to prevent cookies being created.

Third party cookies are cookies created by an external service when you use a page on our Website. These cookies are specific to the third-party's domain and accordingly the data held in them can be seen and managed by the third party and not by us. We control whether or not we use the third-party service with our Website, and how it is integrated and presented on our Website. We do not have control over the cookies themselves. We carefully select third party services to use on our Website; ones that are not likely to abuse your privacy according to the terms of their privacy policies.

For further information, please see our dedicated cookie policy page.

GOVERNING LAW AND JURISDICTION

This Privacy Notice is governed by and construed in accordance with Jersey law. By accessing and using the Website you agree that disputes arising in connection with this Privacy Notice shall be subject to the exclusive jurisdiction of the Jersey courts.

YOUR RIGHTS IN RELATYION TO PERSONAL DATA

You have certain rights in relation to your Personal Data. Pursuant to the applicable data protection laws, those rights will not necessarily apply in all cases or to all Personal Data which is processed by us. You have the right to request that we:

· Provide you with access to any Personal Data which we hold about you (please refer to ‘Request of Personal Information’ below);

· Update any of your Personal Data which is out of date or incorrect;

· Delete any Personal Data which we hold about you, subject to regulatory compliance which requires certain information to be kept for a defined period of time;

· Restrict the way that we process your Personal Data;

· Consider any valid objections which you have to our use of your Personal Data; and/or

· Provide some of your Personal Data to a third party provider of services (data portability) at your request.

You may choose to restrict the collection or use of your Personal Data in the following ways:

· If you have previously agreed to us using your Personal Data for direct marketing purposes, you may change your mind at any time by writing to or emailing us at the below email address; and/or

· If you would like a copy of the information held on you please write to Data Protection Officer, Hiizzy Enterprises Limited [address]

· Should you require an update or amendment to your Personal Data, please contact us by email using the details below and we shall endeavour to amend your records as soon as is practical and no later than 7 days of receipt of any update.

REQUEST OF PERSONAL INFORMATION

You are entitled to access the information held about you. Your right to access the Personal Data which we hold about you can be exercised in accordance with the Data Protection (Jersey) Law 2018. In order to assist us in processing your request, please can you contact [email protected]

SHARING OF DATA

We may disclose your Personal Data to any member of our Group.

We may disclose your Personal Data to third parties in the following circumstances:

· If we, or substantially all of our assets are acquired by a third party, in which case Personal Data held about our customers or visitors to our Website will be one of the transferred assets;

· If we are under a duty to disclose or share your Personal Data in order to comply with any legal or regulatory obligation;

· In order to enforce or apply the terms of this Privacy Notice or any other agreements;

· To protect the rights, property or safety of us, our customers or others; and/or

· Where we have received your permission for us to do so.

 We will not share your data with third parties for marketing purposes unless we have procured your express consent to do so.

OPTING IN AND OUT OF PROMOTIONAL COMMUNICATIONS

Upon agreeing to this Privacy Notice and opting into our communications you agree for us to send you marketing and promotional material. This includes both online communications and other communications such as e-mail. If at any time you wish to opt-out you can do so by e-mailing the Data Protection Officer whose contact details are provided below. Opt-out can also be undertaken utilising the link provided on each promotional communication.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

When we transfer any part of your Personal Data outside Jersey or adequate jurisdictions (such as the EEA) we will take reasonable steps to ensure that it is treated as securely as it is within Jersey or adequate jurisdictions. These steps include but are not limited to the following:

· Binding corporate rules;

· Model contracts; or

· Any other method deemed appropriate by the Isle of Man Data Protection legislation, or the European GDPR.

For the avoidance of doubt, we only transfer your Personal Data within our wider Group of companies who are subjected to Jersey’s Data Protection (Jersey) Law 2018 (or equivalent legislation such as the EU General Data Protection Regulation). Any further international transfers will not be undertaken unless we have procured your express consent.

LINKS TO OTHER WEBSITES

Our Website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Notice. You should exercise caution and look at the privacy statements applicable to the website in question.

RETENTION

We retain Personal Data for as long as we reasonably require it for legal or business purposes. In determining data retention periods, we take into consideration local laws, contractual obligations, and the expectations and requirements of our customers and website visitors. When we no longer need Personal Data, we securely delete or destroy it.

If you have applied for employment with us and were unsuccessful for the position you have applied for, we may ask if you would like your details to be retained in our talent pool for a period of six months. If you say yes, we would proactively contact you should any further suitable vacancies arise. 

CONTACT US

If you have any questions, comments or requests regarding the protection of your Personal Data please contact the Data Protection Officer by email on [email protected].

COMPLAINTS

If you are not satisfied with the above or the way we process your Personal Data you have the right to make a complaint. We hope that you will raise any complaints or concerns with us in the first instance, but if not, or if you are not satisfied with our initial response, you can contact our supervisory authority for data protection related matters using the contact details below:

The supervisory authority for Hiizzy Enterprises Limited is the Jersey Office of the Information Commissioner who can be contacted via the following link: www.jerseyoic.org