Associated Telecom Limited (ATL) collects business data in order to provide our services to our business customers. During the relationship there may be times when an individual’s data is shared with our partners, for instance the name of an employee of the business for contact purposes. This policy covers how we deal with personal data – which is all data relating to an identified or identifiable individual. We take data protection and complying with data protection legislation very seriously, please find below how we do this.
ATL will be the Controller of the information you provide to us, and that we collect about you, when you visit our website and when we provide you with, or answer questions about, our products and services (i.e. Business Mobile, Broadband, Managed Internet Access, Connecting Sites and VPNs, Phone lines and Systems, Mobile SIMs). Our contact details are below.
What kind of information do you collect, when and how?
We collect information about you when you:
The type of information collected depends on the purpose and we will never hold more information from you than is necessary. The following details the types of information collected:
1. When you apply for and/or purchase our products or services or contact us with queries, we will ask you to give us the following information. Your:
3. When you use ATL Business services (such as our Business Broadband, Phone lines and Systems, Mobile SIMs), we collect the following information about your use of those services:
4. From time to time, to help us provide you with improved products and services, we might ask you to fill in a questionnaire, just so you can let us know how we’re doing. When sending you a questionnaire we will ask you to provide us with the following information: name, account number, email address, telephone number.
5. From time to time we acquire personal data from marketing agencies (such as name, surname, phone number) in order to get in touch with you for special offers and promotions if you’ve agreed so.
6. Other ways we obtain information about you would include:
How will we use the information that we collect?
This section explains how we use the information we hold about you (i.e. what we do with it).
We use the information we hold about you in several ways:
Where it is necessary to perform our contract with your company
Where you have given us your consent
Please note: Where we process your information on the basis of your consent, you have the right to withdraw your consent at any time. You can do this by:
Where we have a legitimate interest and do not consider your rights will be negatively impacted
Will you disclose information about me to third parties?
This section explains who we share your information with.
We may provide information about you as follows:
How do you protect my data?
This section explains how we protect your information.
Any information sent to us is protected using robust security methods. The methods we use are industry-standard, ensuring data is safeguarded whilst being sent over unprotected communications paths such as the internet. When it reaches us, we store it securely and only provide access to those authorised. Although we safeguard your personal information once received, ATL cannot guarantee the safety of any personal information you transmit to us using online methods.
Our security measures include:
We will never ask you for your ATL Business identification, authentication passwords or PIN numbers directly associated with the services you receive from ATL and its partners in any unsolicited phone calls or unsolicited emails. In accordance with our Terms and Conditions, you are responsible for keeping your password and PIN secure and we very strongly recommend you do not disclose them to anyone (unless you wish to authorise them to access your account and potentially incur charges on your account).
ATL processes public sector customers personal data in accordance with its contractual obligations and solely for the purpose of providing the contracted services and managing and administering the contract.
Keeping your information
This section explains how long we will keep your information.
We will retain your personal information for as long as necessary to fulfil the purposes we collected it for; such as any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the following:
Typically we will not keep contract related details for longer than 6 years following the termination of a contract; unless there are compelling reasons to retain for a longer period. We keep your billing data for 7 years for tax purposes.
Afterwards the data will either be destroyed or anonymised.
What rights do I have over the information you hold on me?
This section explains the rights you have over the information we hold about you.
You have the following rights regarding your information:
3. The right to rectification – you’re entitled to have your information corrected if it’s inaccurate or incomplete.
4. The right to erasure – this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. The right to restrict processing – you have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to data portability – you have rights to obtain and reuse your personal data for your own purposes across different services. E.g. if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
7. The right to object – you have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent).
To exercise any of these rights at, any time, you can just:
If you’re not satisfied with our response to your question or concern, or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO).