Kite's Data Subjects' Rights

1. The right to be informed

At the time of collecting the customer's data we provide them with information including: the purposes for processing their personal data, the retention periods for that personal data, and who it will be shared with. We call this ‘privacy information’.

The information we provide to people is concise, transparent, intelligible, easily accessible and in clear and plain language.

2. The right of access

Our customers can ask for access to their personal data so that they are aware of and can verify the lawfulness of the processing of their data, in other words the handling, use and storage of their data. The request can be made verbally (on the phone) or in writing (email or letter). A record of all requests will be kept.

Kite will provide the requested information without delay and latest within one month of the request. The information will be provided free of charge in either electronic format or a letter.

3. The right to rectification

Our customers have the right to have inaccurate personal data rectified or completed if it is incomplete. The request can be made verbally (on the phone) or in writing (email or letter). A record of all requests will be kept.

Kite will respond to a request without delay and latest within one month of the request. The information will be provided free of charge in either electronic format or a letter.

4. The right to erasure

Our customers have the right to withdraw their consent for us handling, using and storing their data. They can ask to have all their details deleted and ‘be forgotten’. The request can be made verbally (on the phone) or in writing (email or letter). An anonymised record of all requests will be kept.

Kite will act upon a request free of charge and without delay and latest within one month of the request.

5. The right to restrict processing

Our customers have the right to ask us to restrict processing their data. This would apply to customers who want to keep their data but do not wish to be contacted by us. The request can be made verbally (on the phone) or in writing (email or letter).

Kite will act upon a request without delay and latest within one month after request. A record of all requests will be kept.

6. The right to data portability

Kite customers have the right to obtain and reuse their personal data for their own purposes across different services. The request can be made verbally (on the phone) or in writing (email or letter). If the client requests it, we will transmit the data directly to another organisation if this is technically feasible.

We will provide the personal data in a structured, commonly used and machine readable form such as a CSV file.
Kite will provide the data without undue delay and latest within one month and the information will be provided free of charge.

7. The right to object

Kite customers have the right to object to their personal data being processed for direct marketing purposes and legitimate business interests of Kite.

Individuals will be informed of their right to object “at the point of first communication” (submission of their enquiry) and in our privacy notice. This information will be presented clearly and separately from any other information.

The request can be made verbally (on the phone) or in writing (email or letter).

Kite will stop processing the personal data free of charge and without delay but latest within one month. A record of all requests will be kept.

Document Details:

Date First Published: 23/05/18
Current Version: 1.0