DPA 2018 & GDPR
A plain-language summary of how personal information should be handled.
Purpose
This notice explains the principles used when YLM UK collects and uses personal information in connection with enquiries, marketing and customer or supplier relationships.
Information that may be collected
- Identity and contact information, such as name, address, email and telephone number.
- Information relevant to an enquiry, such as property, insurance, vehicle or household-service details.
- Business information where the interaction is with a supplier or business contact.
Why information is used
Information should only be used where there is an appropriate legal basis, such as consent, performance of a contract, compliance with a legal obligation or a legitimate interest that does not override your rights.
Storage and security
Access should be limited to people with a legitimate need to know, with appropriate security, backup and breach-response procedures. Retention should be no longer than necessary for the stated purpose and applicable legal requirements.
Your rights
- Access to personal information held about you.
- Correction of inaccurate information.
- Erasure or restriction in appropriate circumstances.
- Objection to certain processing, including direct marketing.
- Withdrawal of consent where consent is the legal basis.
- Data portability where the legal conditions apply.
For privacy questions, contact compliance@ylmuk.com.