Privacy

Introduction

We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.

Data controller

The data controller responsible for this website is Select Business Products Ltd, trading as Selectgroup, registered in England and Wales under company number 2436797, who can be contacted at 65 Castle Street, Hull HU1 1SD.

You can contact us about anything in this policy by emailing info@selectgroup.co.uk, by calling 01482 586 550, or by writing to us at the address above.

This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.

Lawful basis for processing

For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.

Individual rights

The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.

Data protection complaints

You have the right to complain to us, or to the Information Commissioner's Office, about our processing of your data. To make a complaint to us, contact us by any of the methods above and tell us what has gone wrong. We will respond within one month.

We are registered with the Information Commissioner's Office under reference ZA359959. That registration is held in our trading name, Selectgroup, at the address above. You can check it on the ICO's public register.

Security

The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website. Additional technical measures are described at the relevant points in this privacy policy.

Disclosures

In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.

Changes to this privacy policy

We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.

Cookies

Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site. For more information on the cookies we use, see our cookie policy.

Data collected when you contact us

Enquiry forms

When you complete a form on this site we collect your name, email address, phone number and whatever you tell us about your enquiry. We use this data to reply to you and, where you have asked about a specific service, to prepare what you have asked for. Our forms are provided by Growably, which is built on the GoHighLevel platform, and your submission is stored in our customer relationship management system.

Lawful basis for processing: Consent given by data subject
Why? We need your details in order to respond to your enquiry about our services.

Ticking a marketing box is never a condition of making an enquiry. If you do ask to hear from us, every marketing email has an unsubscribe link, and you can also ask us to stop at any time by contacting us.

If an enquiry does not lead to us working together, we keep it for 12 months and then delete it.

When you become a client

We hold the contact details of the people we deal with, records of the work we do for you, and the technical information needed to support your systems.

Lawful basis for processing: Performance of a contract
Why? We cannot support your systems without records of what we have done and who to speak to.

When you stop being a client we keep your records for six years and then delete them. Six years is how long we are required to keep accounting records, and it is also the period in which a claim could be brought about work we did, so it is the point at which we no longer need them.

Data collected by third parties on our behalf

Hosting

This site is hosted on Cloudflare Pages. Cloudflare serves our pages from data centres around the world so the site loads quickly, and logs requests in order to detect and block suspicious traffic. The log records the time of the request, your IP address, the resource requested, the referring site if your browser sends one, and your browser's user agent string. For more information on how Cloudflare handles the data it collects, see Cloudflare's privacy policy.

Lawful basis for processing: Compliance with a legal obligation
Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data

Growably

Our enquiry forms are loaded from Growably, built on the GoHighLevel platform. When a page containing a form loads, your browser connects to that provider. For more information on how they handle the data they collect, see their privacy policy.

Lawful basis for processing: Consent given by data subject
Why? We need somewhere to receive and answer your enquiry.

Other data collected by third parties

This site embeds no maps, no video players and no social media widgets, so nothing of that kind connects to a third party when you browse it. The only third-party content is the enquiry forms described above.

Microsoft 365

We run our own email and files on Microsoft 365, so anything you send us by email is processed there.

Lawful basis for processing: Legitimate interests
Why? We need somewhere to receive and keep business correspondence.

Where your data is held

Our processors hold data in the UK or the European Union. We do not transfer personal data outside those areas.

Our support and business systems

Running an IT company means holding records about the people we support. Those records sit in Jira, which we use for support tickets, SuperOps, which we use to manage and monitor client systems, and Xero, which we use for accounts. Each of those providers processes that data on our behalf and under contract.

Lawful basis for processing: Performance of a contract
Why? We cannot support your systems or invoice you for it without somewhere to keep the records.

Analytics and advertising

We do not run analytics or advertising tracking on this website. There is no Google Analytics, no Google Ads conversion tracking and no advertising pixel of any kind, so nothing here builds a profile of you or follows you to another site.

If that ever changes we will say so here and on our cookie policy before it goes live, and anything that sets a cookie will be switched off until you accept it.