Privacy Notice
Taproot collects personal data from people we work with in the course of our work. Personal data is information about a living person that can be used to identify them. We are the controller for any data we have collected directly from our clients when we work with them. On occasions we are the processor for data shared with us by our clients in order to complete a contract. Taproot also holds data about associates- people who work for us on a sub-contracted basis.
What data is being collected?
The data we control is typically name, e-mail address, phone number and postal address. We hold bank details of associates who we pay by bank transfer.
If we are processing data for one of our clients, it will be whatever data they have shared with us in order for us to complete a specific task with the data.
What is the legal basis for processing the data?
We process contact details for our clients and associates to enable us to fulfil our contract with them.
The legal basis for any processing we do as part of contract with the controller is defined by the controller in a written data sharing agreement. Again, this is processed in order to fulfil our contract with our client.
Information gathered about your use of this website is collected for…
- Responding to communications.
Will the data be shared with any third parties?
Personal data is not shared with third parties without their explicit and informed consent. Bank details for our associates are shared with our bank and held securely in our online banking account.
How long will the data be stored for?
Data controlled by taproot is held for 2 years after the completion of a contract. This is to ensure that we have information to our annual audit and respond to any queries from HMRC.
Data shared with us by a controller is stored for the period of time specified in the data sharing agreement.
Your rights
Any data subject of taproot has the following rights:
- You have the right to be told how we are dealing with your data
- You have the right to have access to your data and to be told how it is being used in detail
- You have the right to challenge the accuracy of the data and ask to have it corrected
- You have the right to ask us to have your data deleted
- You have the right to limit or restrict how the data is used
- You have the right to have the data given to you in an accessible way
- You have the right to object to how your data is being used
- You have the right to have decisions about your data made by humans, not computers
- You have the right to ask for information from public bodies
- You have the right to raise a concern about how we use your data
Got any questions or concerns?
To raise a concern or ask a question contact [email protected]
If you feel that we have not met our responsibilities under data protection legislation, you have a right to request an independent assessment from the Information Commissioner’s Office (ICO). You can find details on their website.
We are registered with the ICO, and our registration number is ZA434117.