At Lexington, we are committed to protecting and respecting your privacy and safeguarding any personal data that you give to us.  We are transparent about the processing of your personal data and this notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

We are a joint controller under the UK GDPR and the Data Protection Act 2018 for the processing of your personal data with Northstone.

We are:

Lexington North Ltd
3^rd Floor Queens House
Queen Street
Manchester
M2 5HT

Tel: 0333 358 0502

Email: katy@havingyoursay.co.uk

What kind of personal data do we collect and process when you provide feedback?

When you give us feedback, we need your name, phone number, email and your comments. We take your postcode as well as this indicates if you live in the local area.

We will use your data to:

• Send your comments to the Local Planning Authority to register your views on the planning application. The Local Planning Authority’s privacy policy can be found here.
• Send you updates about the project if you requested this.
• Contact you to ask about the comments you’ve made if you have consented.
• Share your data with Northstone.

What is our legal basis to use your personal data?

Our legal basis at the start of the feedback process is consent, as you voluntarily submit your details.   

We will ask you on the form if you consent to the following:

• Send you updates about the project [by email]
• Contact you to ask about your comments

We will share your data with Northstone as this is a legitimate interest of theirs.

Who do we share your data with?

• We share your named data with the Local Planning Authority in line with your consent.
• We share data with our client, Northstone.
• We share your personal data with our service providers, insurers, legal and other advisors, if required.  All parties are required to continue to adequately safeguard your personal data.

How long do we keep your data?

We hold your data and any other correspondence under legitimate interest as we need to keep a record of all feedback on a project for one year after the project has ended.

What security procedures do we use?

We have procedures in place to prevent unauthorised access to, and the misuse of, personal data. We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.

Do we transfer data out of the UK?

We endeavour to hold most of your data in the UK, but we do have some service providers who are based outside of the UK. Several of these providers are based in countries that are adequate for data transfer; for countries that are not, we use approved Standard Contractual Clauses as our data transfer safeguard.

What are your rights regarding your personal data?

You have the right:

• To access your personal data and information about our processing of it. You also have the right to request a copy of your personal data (but we will need to remove information about other people).
• To rectify incorrect personal data that we are processing.
• To request that we erase your personal data if:
  • we no longer need it;
  • if we are processing your personal data by consent and you withdraw that consent;
  • if we no longer have a legitimate ground to process your personal data; or
  • we are processing your personal data unlawfully
• To object to our processing if it is by legitimate interest.
• To restrict our processing if it was by legitimate interest.
• To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out by automated

If you want to exercise any of these rights, please contact us.

If you have a concern about the way we are collecting or using your personal data, please raise your concern with us in the first instance.  You may also contact the Information Commissioner’s Office at https://ico.org.uk/concerns/.