Privacy Policy
Mercury (London) Ltd is committed to protecting the privacy of our users and customers. This privacy policy is intended to inform you on how we gather, define, and utilise your Information (as defined below).
- It applies to Information collected by us or provided by you over our website. It is also intended to assist you in making informed decisions when using our website and services. Please spare a moment to read and understand the policy.
- All your personal Information shall be held and used in accordance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and national laws implementing GDPR and any legislation that replaces it in whole or in part and any other legislation relating to the protection of personal data. If you want to know what information we collect and hold about you, or to exercise any of your rights as set out in section below, please write to us at the below address or via email at k.haider@mercurylondon .com Mercury (London) Ltd 14 Old Queen Street London SW1H 9HP
- Mercury (London) Ltd is the controller of your Information for the purposes of the GDPR and is a company registered with ICO under number ZB537677.
Information We Collect
When you visit our website, you may provide us with personal information such as name, email address and telephone number. You may provide us with Information in a number of ways.
- by supplying us with the Information as listed above, on an individual basis by subscribing to our email database to receive information about our products and services.
- by filling in the contact form on our website
- by corresponding with us by email, in which case we may retain the content of your email messages together with your email address and our response.
- we may collect Information about your computer, including where available your IP address, operating system, browser type and the geographical location of your computer, for system administration purposes.
How we use your Information
We will hold, use and disclose your Information for our legitimate business purposes including:
- to keep you up to date about important changes to our business.
- to direct-market products and services, advise you of news and industry updates, events and other information.
- to answer your enquiries.
- to release Information to regulatory or law enforcement agencies, if we are required or permitted to do so.
The legal basis for processing your information.
Under GDPR, the main grounds that we rely upon in order to process your Information are the following:
- Necessary for compliance with a legal obligation – we are subject to certain legal requirements which may require us to process your Information. We may also be obliged by law to disclose your Information to a regulatory body or law enforcement agency.
- Necessary for the purposes of legitimate interests – either we, or a third party, will need to process your Information for the purposes of our (or a third party’s) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your Information protected. Our legitimate interests include responding to requests and enquiries from you or a third party, optimising our website and customer experience, informing you about our products and services.
- Consent – in some circumstances, we may ask for your consent to process your Information in a particular way.
How long we hold your Information.
We will only retain your Information for as long as is necessary for the purpose or purposes for which we have collected it. The criteria that we use to determine retention periods will be determined by the nature of the data and the purposes for which it is kept. For example, if we receive your Information when you sign up to procure our services, we will retain your data up to 3 years post completion or expiry of the contract or as long as necessary to maintain your account. In certain circumstances, once we have deleted or anonymised your data, we may need to retain parts of it (for example, your email address), in order to comply with our obligations under GDPR or other legislation, or for fraud detection purposes.
Your rights
You have a number of “Data Subject Rights”, we have explained below what they are and how you can exercise them. You can read more about these rights on the Information Commissioner’s Office website at www.ico.org.uk.
- Right of access –You have the right to request a copy of the personal information that we hold about you.
- Right to rectification –If you think any of your personal information that we hold is inaccurate, you have the right to request it is updated. We may ask you for evidence to show it is inaccurate.
- Right to erasure – (also known as the Right to be Forgotten) – You have the right to request that we delete your personal information that we hold.
- Right to restriction of processing – You have the right to request we restrict or suppress the personal data we hold about you.
- Right to data portability – You have the right to ask us to electronically transfer your personal information to another organisation in certain circumstances.
- Rights with regards to automated decision making, including profiling –We sometimes use your personal information to make decisions. This involves us analysing your account activity including applications, contracts and payments etc. We do this to confirm your identity, prevent and detect crime.
- Right to withdraw Consent – Where we are relying on your consent for processing you can withdraw or change your consent at any time.
The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.
If you have any general questions or want to exercise any of your rights, please contact k.haider@mercurylondon.com for other ways to contact us. In order to maintain the security of our customers’ personal details, we may need to request proof of identity before we disclose personal information to you in response to any request.
We encourage you to get in touch if you have any concerns with how we collect or use your personal information. You have the right to lodge a complaint directly with the Information Commissioner’s Office, the data protection regulator in the UK, you can do this by visiting the ICO website:https://ico.org.uk/make-a-complaint/
