Select Page

Privacy Policy

(website, cookies, actual and potential customers and suppliers)

Last updated: 15/01/2019


About this Notice

For all of us at NextGenAccess Limited, the protection of personal data is of paramount importance and we go to great lengths to ensure that we collect and use personal data lawfully and only for specific purposes.

This Notice applies to any personal data which we process about personnel of customers, suppliers, partners and other organisations who we work with as part of our business operations, visitors to our website and users of our products and services (each of which we refer to in this Notice as “data subject” or “you”).  This does not apply to our existing employees, directors, contractors and workers as another privacy notice which can be found on our Sharepoint applies to them.

In this Notice we explain the things which we think are important for you to know about the personal data we collect from you such as who we are, how we use your data, how we protect your data and who we may share your data with. We also explain the rights you have in relation to your personal data which we hold. Finally, there’s a bit about cookies – what they are and how to get rid of them if you don’t want them. If you have any questions relating to how we handle your personal data, please write or email us at the contact address set out below.

This Notice does not cover the links within our website linking to other websites. We encourage you to read the privacy statements of the other websites you visit.

NextGenAccess Limited is committed to keeping information provided by you confidential and we shall always be transparent with you about how we are using your details to comply with the GDPR (General Data Protection Regulation).

Who collects the information

NextGenAccess Limited (‘NGA’) is a limited company established in England. Our registered address is at 80 Clifton Street, Shoreditch, London EC2A 4HB,  United Kingdom.

NGA is a ‘data controller’ and gathers and uses certain information about you. This information is also used by our parent company, NextGenAccess Holdco Limited (our ‘group company’) and so, in this notice, references to ‘we’ or ‘us’ mean NGA and our group company.

Where we process personal data on behalf of another company or organisation, we will be doing so as a data processor and our processing will be governed by a contract which we will have with the data controller who will have their own separate privacy notice which will apply.

Data protection principles

We will comply with the data protection principles when gathering and using personal information, as set out in our Data Privacy Standard.

About the information we collect and hold

The table set out in the Schedule summarises the information we collect and hold, how and why we do so and how we use it.

Who we share the information with

We may share the information with:

  • Service providers acting as processors based within or outside the EEA who provide IT and system administration services such as DocuSign, Microsoft 365, Sharepoint.
  • External contractors and professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in the EEA who provide consultancy, banking, legal, insurance, accounting or operational services, such as Juniper Bridge, Barclays Bank, .
  • HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom
  • Service providers who provide us with market research services or marketing services
  • Third parties who own the safety in relation to a particular project or on whose infrastructure NGA is working, such as Openreach and local authorities
  • Potential purchasers of some or all of our business or on a re-structuring.

Usually, information will be anonymised but this may not always be possible. The recipient of the information will be bound by confidentiality obligations. We may also be required to share some personal information with our regulators or as required to comply with the law.

We seek to ensure that our information collection and processing is always proportionate. We will notify you of any changes to information we collect or to the purposes for which we collect and process it.

Where information may be held

Information may be held at our offices and those of our group company, and third party agencies, service providers, representatives and agents as described above. We currently store your personal details on our servers in the United Kingdom but information may be transferred internationally to countries around the world, including countries that do not have data protection laws equivalent to those in the UK, for the reasons described above. We have security measures in place to seek to ensure that there is appropriate security for information we holdincluding those measures detailed in the NGA Information Security Policy available on Sharepoint.

How long we keep your information

We keep your information for no longer than is necessary for the purposes for which the personal information is processed. Further details on this are available in the NGA Records Management and Retention Policy.

Cookies

What is a cookie? A cookie is a text string of information that a website transfers to the cookie file of the browser on your device so that the website can remember who you are.  You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

For more information about the cookies we use, please see here.

For further information on cookies generally, visit www.aboutcookies.org or www.allaboutcookies.org.

Your rights to correct and access your information and to ask for it to be erased, and other rights

Please contact our data privacy manager by email at privacy@nextgenaccess.com if (in accordance with applicable law) you would like to correct or request access to information that we hold relating to you or if you have any questions about this notice. You also have the right to ask our data privacy manager for some but not all of the information we hold and process to be erased (the ‘right to be forgotten’) in certain circumstances.  Our data privacy manager will provide you with further information about the right to be forgotten, if you ask for it.

As a data subject,  as per the law, you also have the right to request the stopping of the processing of your personal data for certain purposes such as direct marketing.  You will have the option to “opt out” or “unsubscribe” of receiving newsletters, marketing or promotional materials and other communications at any time and each time you receive electronic marketing information from us, you have the option to decline to receive further information from us.  Communications frequently include essential information regarding your service and updates that are needed in order to use the product to its fullest capacity.

You also have the right to (i) receive your personal data in a commonly used machine-readable format or have this data sent to your designated recipient; and (ii) to object to automatic decision making and profiling based on your personal data. Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.

To request a copy of your personal data or to make any other request outlined above, please contact our Data Privacy Manager by emailing us at privacy@nextgenaccess.com or by post at the contact details given above. To safeguard the personal data we hold, we need to confirm your identity before we can take action following a request made under this section.

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. These measures include restricting physical access to our premises where personal data is held and using access controls and firewalls to prevent unauthorised access to our systems.

We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We recommend that you also take steps to safeguard your personal data against the risk of unauthorised access or accidental loss or corruption by backing up your personal data. Where we provide you with password-restricted access to our website, software and/or services, it is your responsibility to use a strong password and to keep it private.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Changes to This Privacy Notice

This Privacy Notice is effective as of 15/01/2019 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. We reserve the right to update or change our Privacy Notice at any time and you should check this Privacy Notice periodically. Your continued use of the service after we post any modifications to the Privacy Notice on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Notice. If we make any material changes to this Privacy Notice, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

How to complainWe hope that our data privacy manager can resolve any query or concern you raise about our use of your information. If not, contact the Information Commissioner at ico.org.uk/concerns/ or telephone: 0303 123 1113 for further information about your rights and how to make a formal complaint.

 

The information we collectHow we collect the informationWhy we collect the informationHow we use the information

Prospective Customer Personnel

your name, the name and address of the company you work for, your business telephone number, your mobile telephone number and your email address.

From you or from marketing events, sales opportunities or in response to requests for information which you have made to us.Legitimate interest: to market our new products or services which we believe may be of interest to the Customerto correspond with you in connection with our prospective provision of products and/or services to the organisation you work for or represent

Customer  Personnel

 your name, the name and address of the company you work for, your business telephone number, your mobile telephone number and your email address.

From you or from the company you work for or represent

To enter into/ perform the contract with the Customer

Legitimate interests: to market our new products or services which we believe may be of interest to the Customer

to comply with a legal obligation to which we are subject, to maintain appropriate business records, to comply with lawful requests by courts and regulatory authorities and for us to comply with applicable laws and regulations.

to correspond with you in the course of business conducted between us and the organisation you work for or represent. This may include notifying you about existing products and services which we provide to your organisation or informing you about new products and services which we think your organisation may be interested in.

to contact you with newsletters, marketing or promotional materials and other information via email (email newsletters) or other methods.

Supplier Personnel

your name, the name and address of the company you work for, your business telephone number, your mobile telephone number and your email address.

From you or the company you work for or represent

Necessary for our legitimate interest

To enter into/ perform the contract with the Supplier

to comply with a legal obligation to which we are subject, to maintain appropriate business records, to comply with lawful requests by courts and regulatory authorities and for us to comply with applicable laws and regulations.

to correspond with you in the course of business conducted or to be conducted between us and the organisation you work for or represent. This may include contacting you in connection with existing products and services which your organisation provides to us, for billing and payment and in response to your enquiries.

to contact you with newsletters, marketing or promotional materials and other information via email (email newsletters) or other methods.

Supplier’s personnel involved on the operational side: Copy of NASRA (New Street Works Act) card, containing photo, DOB, qualification and registration number;  Drug and alcohol testing report/information; qualificationsFrom youTo comply with our legal obligations and for occupational medical reasonTo carry out works and deliver services to our customers

Users of our products and services

your name, job title, email address and the information contained in any correspondence with you.

From you or the company you work for or represent

necessary for the purposes of our legitimate interests in providing our products and/or services to you.

necessary for us to comply with a legal obligation to which we are subject, to maintain appropriate business records,

to comply with lawful requests by courts and regulatory authorities and for us to comply with applicable laws and regulations.

necessary for the performance of our contract with you in relation to our products/services.

To provide you with our products and/or services, to improve our products/services, to provide customer service and support to you and as part of our collection of customer feedback, where applicable for billing and payment purposes and in response to your enquiries.

to contact you with newsletters, marketing or promotional materials and other information via email (email newsletters) or other methods.

Visitors to our website

your name, job title, email address and the information contained in any correspondence with you.

From you

necessary for the purposes of our legitimate interests

necessary for the performance of our contract with you (where we have one)

To communicate with you in response to your enquiries.

To provide you with information relating to our products or services, via the website or newsletters or emails.

To provide information on other products and services which we feel may be of legitimate interest to you via the website or newsletters or emails

To notify you about any changes to our website, such as improvements or service/product changes, that may affect the service we provide.

to contact you with newsletters, marketing or promotional materials and other information via email (email newsletters) or other methods.

To meet our contractual commitments to you.