Richard Nosworthy’s Privacy Policy
Notice last updated 30/11/2023
I am committed to ensuring that your personal data and privacy is protected. I understand how important and valuable your personal data is and will only use it fairly and in ways that you would reasonably expect me to.
This Privacy Policy explains
• who I am
• what personal data I collect about you, and how I collect it
• why I collect this personal data and what I do with it
• Who I share your personal data with
• how I retain your information and keep it secure
• your rights and how to contact me
My contact details
Name: Richard Nosworthy
E-mail: helo@richardnosworthy.cymru
Web: http://www.richardnosworthy.cymru
ICO registration reference number: ZB321792
The type of personal information I collect
I currently collect and process the following information:
• Title, name and contact information
• Payment information such as banking details
• Photos, videos and audio recordings
• Other information as required to carry out my services (including information about staff, those taking part in training and details of case study subjects)
• Information sent to me by actual or potential clients
• Personal information relating to guests or suggested guests on my podcast
• IP addresses, cookies and traffic/query data relating to my website, podcast and social media
How I get the personal information and why I have it
The personal information I process is provided to me for the following reasons:
• To enquire about, or commission, my services
• For the purposes of taking part directly in my podcast
• To carry out training services (such as information on colleagues taking part in media training)
• To create or edit written or audio-visual content for a client (such as to arrange filming or interviews for a case study, or to edit copy, images or video provided by them)
• To carry out communication reviews or audits (such as feedback or data on an organisation’s website or other communications)
• Suggestions and recommendations sent to me (including suggestions for podcast guests, potential clients or case study subjects)
• Emails, comments and messages sent via my website or social media
• Information found online, suggestions from others or via outreach to identify and contact potential clients in order to promote my services
• Cookies or other data collected by my website, podcast and social media to monitor performance and manage these channels.
I may also collect technical data about you:
• From automated technologies such as cookies, pixels and web beacons when you visit our website. This may include your IP address, your device type, operating system, browser type, time zone or location.
• From third parties such as social media platforms when you interact with us on social media.
• Analytics service providers (such as Google Analytics) and search engine providers.
• For more information about how I use Cookies please see my Cookie Policy
When I am acting on behalf of my clients
I may have access to your personal data when I am acting as a data processor on behalf of my clients. This would typically include your name and email address, or photos or images of you, for example if you are featured as part of a case study. In these circumstances I am acting on the instructions of my clients and will only use your personal data as instructed – e.g. to create web content, co-ordinate workshops or training, or to liaise with you as part of project delivery.
Why I collect your personal data and what I do with it
I will only use your personal data for the purposes that we have collected it and in accordance with data protection law. This will be to:
• When I have a legitimate business reason for doing so, such as to manage and grow my business, if you would reasonably expect me to do so and it does not impact on your rights, freedoms and interests.
• Provide a contact or service to you and manage our customer relationship
• When you have provided your consent – such as being featured as a case study or podcast guest. You have a right to withdraw this consent by emailing me at: helo@richardnosworthy.cymru
• When I have a legal obligation to do so – such as to comply with regulatory and statutory reporting
When you visit my websites
When you visit my websites http://www.richardnosworthy.cymru and http://www.richardnosworthy.wales, data including your IP address will be collected for website analytics. The purpose is to help me find out how the website is being used and develop the site and my business in future. If you send me a message via the websites, this message will reach me via email.
My lawful basis will be legitimate interest/consent.
Links to Other websites
I may have links on our site to other websites that we do not operate. If you click on a third party link, you will be taken directly to that site which is governed by its own privacy notice. I strongly encourage you to read that privacy notice. I do not control that site and assume no responsibility for the content, policies or its practices.
When you take part in my podcasts
When you agree to be a guest on my podcasts, I will collect personal information for the purposes on podcast content and to keep in touch with you, such as email address and/or phone number.
I will keep your personal information indefinitely if you have consented to it being used in the public domain. Other personal information will be kept for up to two years following our last engagement.
My lawful basis will be consent or legitimate interests.
When you request further information about my products or services
I will:
• Keep a record of and reply to your request for more information about our products or services
My lawful basis for doing this is because I have a legitimate business interest in responding to your queries and requests for information to manage and grow our business.
When you sign up to work with us and request my products or services, I will use your personal data to
• Register you as a customer,
• manage our customer relationship, respond to queries and communicate with you
• provide the products or service you have requested
• Add you to my contacts spreadsheet
• Send you an invoice/take payment for the product or service you have requested
Our lawful basis will be to perform a contract with you.
I keep client records and transaction history to comply with statutory and regulatory reporting requirements and to meet my legal requirements. My lawful basis for doing so is our legal obligation.
I use legitimate interests to manage and conduct our business, this may include marketing activities and hosting events to grow my business. I may perform due diligence checks about your business before entering in to a contract with you to provide my services.
If you have previously purchased or enquired about similar services from me and have not opted out of marketing communications, I will rely on legitimate interests to continue to send you marketing communications. You can opt out of receiving marketing communications at any time by emailing me at helo@richardnosworthy.cymru
If you have received services from me and given me feedback or a testimonial about the services I provided, I may publish this feedback on my website, in marketing literature and on my social media channels in order to provide testimonials and help grow my business.
I will not publish any identifying personal data in connection with any feedback you have provided without your consent.
Sharing your personal data – who I share it with
I may share some details of your personal data with our trusted service providers and professional advisors, such as insurers, accountants, trade union, IT/website specialists, and legal advisors only to the extent necessary for the purposes of providing professional/business advice and support, processing our company accounts, meeting our legal obligations and in the event of pursuing any insurance or legal claims or dealing with any dispute.
When doing so I expect these service providers and professional advisors to treat your personal data securely and only for the purposes intended. I will only share the minimum amount of personal data necessary in these instances.
My service providers (such as email and cloud service hosting providers, website hosting and payment processors) may have access to your personal data when it is stored on their systems.
In the unlikely event of non-payment of an invoice or legal dispute, I may share your personal data with 3rd parties in order to resolve and settle our dispute.
I may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
How I store your personal information
Your information is securely stored on a secured computer network, encrypted external hard drive and cloud based software programs. I only use mainstream software and service providers that meet GDPR requirements and have the appropriate measures and security protocols in place to comply with UK and EEA data protection laws. All devices and equipment used to access and store your personal data have appropriate data security settings in place. I have procedures in place to deal with data security breaches in accordance the UK Data Protection Act 2018.
How long I keep your data for
I only keep personal data for as long as necessary in relation to the purpose it was collected for. When it is no longer required, I will dispose of your information by securely destroying the records I hold. In some instances, I may anonymise data so that personal references are no longer kept.
• I keep details of client records for seven years in accordance with UK statutory law and regulatory reporting timescales. These include contact and transaction details.
• I keep names and email addresses for prospective clients on my database for up to two years following our last contact.
• I keep other personal information, such as details of learners and case study subjects, for up to two years following last contact.
• Personal information which we have agreed can be used in the public domain may be stored indefinitely unless you ask me to delete or remove it sooner. This includes podcasts and web content such as testimonials.
• In all cases, I will then dispose of your information by deleting the files from my local and cloud storage, and securely destroying/shredding paper records.
Your data protection rights
Under data protection law, you have rights including:
• Your right of access – You have the right to ask us for copies of your personal information.
• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
• You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact me at helo@richardnosworthy.cymru if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to me at helo@richardnosworthy.cymru
You can also complain to the ICO if you are unhappy with how I have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk