LIME ONCALL PRIVACY POLICY

International transfers of your personal data

Some of our external third-party suppliers are based outside the UK, so their processing of your personal data will involve transferring your personal data outside the UK.

Where we share your personal data with third-parties who are based outside the UK, we try to ensure a similar degree of protection is afforded to it by making sure one of the following mechanisms is implemented:

• Transfers to territories with an adequacy decision. We may transfer your personal data to countries or territories whose laws have been deemed to provide an adequate level of protection for personal data by the UK Government (from time to time).

• Transfers to territories without an adequacy decision. We may transfer your personal data to countries or territories whose laws have not been deemed to provide an adequate level of protection for personal data by the UK Government. However, in these cases:

  • We may use specific appropriate safeguards, approved by the UK Information Commissioner’s Office and/or the UK Government, which are designed to give your personal data the same protection it has in the UK – for example, requiring the recipient to enter into the relevant form of the so-called ‘International Data Transfer Agreement’ or ‘Standard Contractual Clauses’ issued or approved from time to time; or

  • In limited circumstances, we may rely on an exception or ‘derogation’ which permits us to transfer your personal data to such country despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer.

    Should you wish to find out more about these controls and safeguards, please contact us.

 

How we keep your personal data secure

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

​

We limit access to your personal data to those employees and other staff who have a business need to have such access. All such people are subject to a contractual duty of confidentiality.

​

We have put in place procedures to deal with any actual or suspected personal data breach. In the event of any such breach, we have systems in place to work with applicable regulators. In addition, in certain circumstances (including where we are legally required to do so), we may notify you of breaches affecting your personal data.

​

How long we store your personal data

We retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.

​

To determine the appropriate retention period for your personal data, we consider the amount, nature and sensitivity of the relevant data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

​

Your rights relating to your personal data

By law you have the right to:

• Request access to your personal data. This enables you to receive a copy of the personal data we hold about you, and to check that we are lawfully processing it.

• Request the correction of your personal data. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request the erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. This may not always be available.

• Object to our processing of your personal data. This right exists where we are relying on Legitimate Interest as the legal basis for our processing, and there is something about your particular situation which makes you want to object to our processing on this ground.

• Request the restriction of our processing of your personal data. This enables you to ask us to temporarily suspend the processing of your personal data, for example if you want us to establish its accuracy or our reason for processing it.

• Request the transfer of your personal data. This enables you to ask us to provide to you, or a third- party you have chosen, your personal data in a structured, machine-readable format.

• Withdraw consent. This enables you to withdraw your consent. This right only exists where we are relying on Consent as our lawful basis to process your personal data.

 

How to exercise your rights

Please contact us in order to exercise any of the rights listed above. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that your personal data is not disclosed to any person who has no right to receive it.

​

Typically, you will not have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may also refuse to comply with your request in limited circumstances.

​

We try to respond to all legitimate requests within a month. It may take us longer than a month if your request is particularly complex or you have made a number of requests; in this case, we will notify you and keep you updated.

​

Please note that applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

​

Complaints

If you would like to make a complaint regarding this Privacy Policy or our practices in relation to your personal data, please contact us. We will reply to your complaint as soon as we can.

​

If you feel that your complaint has not been adequately resolved, please note that applicable privacy law gives you the right to contact your local data protection supervisory authority, which for the UK is the Information Commissioner’s Office.

​

Our policy on children

Our website is not intended for children below the age of 16, and we do not knowingly collect data relating to such children.

​

Third-party links

Our website may include links to third-party websites and/or content. Clicking on those links or enabling those connections may allow third-parties to collect or share your personal data. We do not control these third- party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every site you visit.