At Lexington, we are committed to protecting and respecting your privacy and safeguarding any personal data that you give to us. We are transparent about the processing of your personal data and this notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
We are a joint controller under the UK GDPR and the Data Protection Act 2018 for the processing of your personal data with Northstone.
Lexington North Ltd
3rd Floor Queens House
Tel: 0333 358 0502
What kind of personal data do we collect and process when you provide feedback?
When you give us feedback, we need your name, phone number, email and your comments. We take your postcode as well as this indicates if you live in the local area.
We will use your data to:
What is our legal basis to use your personal data?
Our legal basis at the start of the feedback process is consent, as you voluntarily submit your details.
We will ask you on the form if you consent to the following:
We will share your data with Northstone as this is a legitimate interest of theirs.
Who do we share your data with?
How long do we keep your data?
We hold your data and any other correspondence under legitimate interest as we need to keep a record of all feedback on a project for one year after the project has ended.
What security procedures do we use?
We have procedures in place to prevent unauthorised access to, and the misuse of, personal data. We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.
Do we transfer data out of the UK?
We endeavour to hold most of your data in the UK, but we do have some service providers who are based outside of the UK. Several of these providers are based in countries that are adequate for data transfer; for countries that are not, we use approved Standard Contractual Clauses as our data transfer safeguard.
What are your rights regarding your personal data?
You have the right:
If you want to exercise any of these rights, please contact us.
If you have a concern about the way we are collecting or using your personal data, please raise your concern with us in the first instance. You may also contact the Information Commissioner’s Office at https://ico.org.uk/concerns/.