Privacy Notice
We take the privacy of personal information seriously. This notice tells you what to expect us to do with your personal information.
Controller’s contact details
Telegraphy Ltd is registered with the Information Commissioner’s Office (“ICO”) as a data controller under registration number ZA826442.
You can contact us by email, post and phone. More details can be seen here.
Our email address:
Our postal address:
Telegraphy Ltd
10 Bailie Close
ABINGDON
OX14 5RF
Our telephone number:
+44 75 3492 0095
Changes to this privacy notice
We keep our privacy notice under regular review to make sure it is up to date and accurate.
August 2021 - Privacy notice amended to show the proper name of Squarespace, Inc.
December 2020 - Privacy notice amended to include ICO registration details and remove reference to Privacy Shield following the recent ruling of the European Court of Justice invalidating that framework.
November 2020 - Privacy notice posted.
The personal information we collect
We currently collect and process the following information:
Personal identifiers, contacts and characteristics (for example, name and contact details)
IP addresses, location information and other electronic identifiers
How we get personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
Names, dates of birth, and contact details provided to us to maintain necessary business records, for example for contacting you to discuss commercial engagements or for maintaining accounting records;
Other personal information such as IP addresses, location information and other electronic identifiers in connection with you contacting us via our website, email and other electronic means, as detailed below.
We also receive personal information indirectly, from the following sources in the following scenarios:
From information held by clients for their own legitimate purposes, and properly disclosed to us, for example as necessary background relating to the subjects of a forensic investigation;
From public sources, for example public registers, relating to the subjects of a forensic investigation;
From information that comes to light in the course of the forensic investigation of legitimately acquired evidence, for example from a personal computer of mobile phone which may contain personal information.
We use this information to analyse and report on the behavour of the subjects of forensic investigations, for example in explaining the operation of a fraud or the evidence of unauthorised access to an information system.
We may share this information with our clients and their professional advisors in the conduct of our work for them, with our own professional advisors where required for the conduct of litigation or arbitration, where necessary with appropriate law enforcement agencies and for other purposes required by law.
Under the General Data Protection Regulation (GDPR), the lawful bases for processing this information are as follows:
For information you provide to us in the course of commercial transactions with us, we rely on your consent under Article 6(1)(a) of the GDPR. You are able to remove your consent at any time. You can do this by contacting info@telegraphy.co.uk. We may also rely on having a legitimate interest under Article 6(1)(f), for example where it is necessary for us to collect the information for the proper operation of our electronic systems or for the prevention and detection of crime.
For information about third parties obtained from public record, client disclosure or forensic examination, we rely on having a legitimate interest under Article 6(1)(f) of the GDPR, for example where it is necessary to process this information for the detection and prevention of crimes such as fraud.
How we store your personal information
Your information is securely stored at our registered offices or, encrypted, on appropriate Cloud storage platforms.
We keep personal information for whichever is the longer:
the minimum time required by law or applicable regulation;
the minimum time required by our contractual obligations to clients; or
the minimum time required for the conduct of any legal matters relying on the information.
We will then dispose of your information by securely deleting it from the device(s) on which it was stored.
Contacting us
Calling us
When you call us, we collect Calling Line Identification (CLI) information. This is the phone number you are calling from (if it’s not withheld). We hold a log of the phone number, date, time and duration of the call, but do not audio record the call itself. We hold this information for 90 days.
We use this information to understand the demand for our services and to improve how we operate. We may also use the number to call you back if you have asked us to do so, if your call drops, or if there is a problem with the line. We may also use it to check how many calls we have received from it.
We don’t audio record any calls, but we might make notes to help us answer your query.
We also hold statistical information about the calls we receive for a number of years, but this does not contain any personal data.
Social media
We use several social-media platforms to interact with our clients and potential clients. If you send a message via social media that needs a response from us, we may process it as an enquiry or a complaint. When contacting us through a social media platform, we suggest you also familiarise yourself with the privacy information of that platform.
Emailing us
We use encryption to protect email traffic in line with good practice on email security.
We also monitor any emails sent to us, including file attachments, to ensure the proper operation of our systems and for the prevention and detection of crime. You must ensure that any email you send to us is within the bounds of the law.
Visiting our website
Analytics
When you visit our website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behavior patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
If we do collect personal data through our website, we’ll be upfront about this. We’ll make it clear when we collect personal information and we’ll explain what we intend to do with it.
Cookies
Our website, like most websites, uses cookies to improve user experience.
A cookie is information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Cookies enable a computer to ‘remember’ a visitor’s preferences etc, either for the duration of a particular visit (using a ‘session cookie’), or repeat visits (using a ‘persistent cookie’).
We use cookies to help us identify and track visitors, their usage of our website, and their website access preferences. It is possible for you to block some or all cookies, or even to delete cookies that have already been set; but you should be aware that some feautures of the website may not perform as expected without the use of cookies.
We ask for your consent for the optional cookies we use.
Website
We host our website with Squarespace, Inc. in the US and we rely on standard contractual clauses to protect any information we need to transfer to and from Squarespace’s servers. We keep traffic information for 12 months.
Sharing your information
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
In some circumstances we are legally obliged to share information. For example under a court order. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making.
We may also share your information in the event of the non-payment of a commercial debt to us. If the debt remains outstanding after the specified timeframe for payment, we may initiate formal proceedings to recover the full amount of the unpaid debt. As a result we will share personal data with the litigation and recovery specialists we instruct in order for them to identify assets and undertake recovery action through the courts.
Links to other websites
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.
Children’s information
We do not provide services directly to children or proactively collect their personal information. However, we are sometimes given information about children while handling a complaint or conducting an investigation. The information in the relevant parts of this notice applies to children as well as adults.
Your data protection rights
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You can read more about this right here.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. You can read more about this right here.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances. You can read more about this right here.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances. You can read more about this right here.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests. You can read more about this right here.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about this right here.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Please contact us at info@telegraphy.co.uk if you wish to make a request.
Your right to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns about our use of your personal information, you can complain to us at info@telegraphy.co.uk.
If you are unhappy with how we deal with your complaint, you can complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
This privacy notice contains public sector information licensed under the Open Government Licence v3.0.