Privacy Policy | Green Jellyfish

How will we collect information from you?  

We obtain most of your personal information when you initially contact us to receive services from us or provide services on our behalf. It is your responsibility to inform us of any changes so that we can keep the information we collect from you up to date and accurate. We will practice ‘safer recruitment’ checks for those who undertake work for us. 

What type of information will we collect from you?

• The right to be informed
  We will inform you what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties. This information will be communicated concisely and in plain language. 
• The right of access
  Individuals can submit subject access requests, which obliges us to provide a copy of any personal data we hold concerning you, the individual. The regulations give us one month to produce this information, although there are exceptions for requests that are manifestly unfounded, repetitive or we believe are excessive. 
• The right to rectification
  If you discover that the data we hold about you is inaccurate or incomplete, you can request that we update it. As with the right of access, we have one month to do this, and the same exceptions (as at point 2) apply. 
• The right to erasure
  Individuals can request that we erase their data in certain circumstances, such as when the data is no longer necessary, the data was unlawfully processed or it no longer meets the lawful ground for which it was collected. This includes instances where the individual withdraws consent. The right to erasure is also known as ‘the right to be forgotten’. We cannot erase information about any individual where there are legislative or regulatory reasons for us to keep the data we hold. \we will inform you of any such data and the legal or regulatory reason that we cannot erase it. 
• The right to restrict processing
  You can request that we limit the way we use your personal data. It’s an alternative to requesting the erasure of data. 
• The right to data portability
  You are permitted to obtain and reuse your personal data for your own purposes across different services. This right only applies to personal data that an individual has provided to us by way of a contract or consent. 
• The right to object
  You can object to the processing of personal data that is collected on the grounds of legitimate interests or the performance of a task in the interest/exercise of official authority. We will stop processing information unless we can demonstrate compelling legitimate grounds for the processing that overrides the interests, rights and freedoms of the data subject or if the processing is for the establishment or exercise of defence of legal claims. 
• Rights related to automated decision making including profiling
  The GDPR includes provisions for decisions made with no human involvement, such as profiling, which uses personal data to make calculated assumptions about people. There are strict rules about this kind of processing, and you are permitted to challenge and request a review of the processing if you believe the rules aren’t being followed.