Who we are

Our website address is: https://www.workspend.co.uk.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Industry regulatory disclosure requirements

General Principles

As an ethical business, we do not use cookies, or capture your movements on our website for purposes of personalization. We encourage site visitors to use our data capture forms to reach out to us. If you do use our data capture forms, we ask you to proactively inform us of how you want us to manage your data to respect your data rights.

When you leave comments on our website

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Media

We do not provide any facility for you to upload media.

Contact forms

Cookies

Cookies are a mechanism used to capture data on site visitors. For ethical reasons, we do not use cookies.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We integrate our website with third-party tools from Google and other companies that provide insights on anonymous visitor activities. We will from time-to-time use this information to determine how best to market our business.

Who we share your data with

As a general principle we do not share data with third-party organizations. When running webinars and events, it may be necessary for you to register using a data capture form. When you do, we will forward your request to register to a third-party data processing provider. While our third-party provider offers data processing services to us, and will save your data on their web server for the duration of the webinar for the purposes of event coordination and communications. We delete all records of participants from this service no later than 14-days following each webinar or event. Should we wish to retain your information there-after, then we will ask your permission to do so.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

What rights you have over your data

We practice ‘privacy by design’ and, consistent to that ethos, if you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service. Additionally, we hold data on webinar and event attendees for the duration of the event for the purposes of event coordination and communications. All retained data is removed after 14-days of any event.

Your contact information

Consistent to our ‘privacy by design’ ethos, we will only save information on our servers:

  1. When we have requested to save your contact data for purposes of providing knowledge, education, and to support the promotion and marketing of our products and services to you.
  2. To facilitate webinars and events you choose to participate in, although this information is deleted after 14-days of an event.

Additional information

How we protect your data

Whenever we save your data, we retain it on a secure web server hosted by our hosting provider. The site is protected by authenticated permissions. As a general rule, we maintain a limited number of administrators to the site (no more than five employees) for purposes of business continuity and site maintenance. Each Administrator is a senior manager of our company. The site is reviewed from time-to-time by our appointed Data Security Officer to ensure it fully satisfies our data security policies.

What data breach procedures we have in place (and how we report it)

In the event of a data breach, we have a documented breach reporting process that we follow to notify partners, appropriate authorities and anyone specifically effected. This forms part of our data protection policies, which you can request.

What third-parties we receive data from

We do not receive any additional data from third-parties relating to you as an individual.

What automated decision making and/or profiling we do with user data

We do not automate any decision-making process as the result of any data collected about individuals from our website.

For further information on our Privacy Policy, please reach out to our Data Protection Officer by including in the subject line of your message ‘For the attention of the DPO’ on the following general email address: marketing@workspend.com.