Jigsaw XYZ is committed to protecting your personal information.
Who we are
We are Jigsaw XYZ
Information we collect and use
Information about you that we collect and use includes:
Information submitted through our applications or the website.
This is mainly personal information such as your name, email address, CV, etc.
Information connected to your product or service with us
Our specific products and services will require different pieces of information such as your bank account details.
Information you give us to access from external sources.
Instead of asking you to provide us with all your information we can take this from third party providers with your permission.
Information about your contact with us
Any correspondence you have with Jigsaw XYZ will be collected e.g. meetings, phone calls, emails / letters
How we collect your information
We may collect your personal information directly from you or from a variety of sources, including:
An application form for a product or service
Phone, email or written conversations with us
Our online services such as websites, social media and mobile device application ('Apps').
Third Party providers who allow us to have your information with your consent
We may also collect personal information on you from places such as business directories and other commercially or publicly available sources e.g. to check or improve the information we hold (like your address) or to give better contact information if we are unable to contact you directly.
What use your information for
We take your privacy seriously and we will only ever collect and use information which is personal to you where it is necessary, fair and lawful to do so. We will collect and use your information only where:
You have given us your consent to send you information about products and services offered by Jigsaw XYZ
It’s necessary to provide the product or service you have requested
It’s necessary for us to meet our legal or regulatory standards
If you do not wish us to collect and use your personal information in these ways, it may mean that we will be unable to provide you with our products or services.
We sometimes use systems to make automated decisions based on personal information we have - or are allowed to collect and use from others – about you. These automated decisions can affect the products, services or features we offer you now or in the future.
Who we may share your information with
We may share your information with:
Anyone who works for us when they need it to do their job
Any organisation which supports any of our services you use, when they need it to offer those services.
Our regulators and Supervisory Authority, the Financial Conduct Authority (FCA), the Information Commissioner’s Office for the UK (the ICO), Law enforcement, credit and identity check agencies for the prevention and detection of crime HM Revenue & Customs (HMRC).
We will never sell your details to someone else. Whenever we share your personal information, we will do so in line with our obligations to keep your information safe and secure and only after obtaining your consent.
Where your information is processed
The majority of your information is processed in the UK and European Economic Area (EEA).
However, some of your information may be processed by us or the third parties we work with outside of the EEA, including countries such as the United States, New Zealand and India.
Where your information is being processed outside of the EEA, we take additional steps to ensure that your information is protected to at least an equivalent level as would be applied by UK / EEA data privacy laws e.g. we will put in place legal agreements with our third party suppliers and do regular checks to ensure they meet these obligations.
How we protect your information
We take information and system security very seriously and we strive to comply with our obligations at all times. Any personal information which is collected, recorded or used in any way, whether on paper, online or any other media, will have appropriate safeguards applied in line with our data protection obligations.
How long we keep your information
We will keep your personal information only where it is necessary to provide you with our products or services while you are a customer.
We may also keep your information after this period but only where required to meet our legal or regulatory obligations. The length of time we keep your information for these purposes will vary depending on the obligations we need to meet, but the maximum length of time is usually 7 years.
Your individual rights
You have several rights in relation to your data:
The right of access to your personal information. If you wish to receive a copy of the personal information, we hold on you, you may make a data subject access request (DSAR).
The right to request that your personal information be rectified if your personal information is inaccurate or incomplete, you can request that it is corrected.
The right to request erasure if there is not a compelling reason for Jigsaw XYZ to continue to have it.
The right to restrict processing and so asking that we block or suppress the processing of your personal information for certain reasons. This means that we are still permitted to keep your information – but only to ensure we don’t use it in the future for those reasons you have restricted.
The right to data portability for your own purposes to use across different services. In certain circumstances, you may move, copy or transfer the personal information we hold to another company in a safe and secure way. For example, if you were moving your pension to another pension provider.
The right to object to Jigsaw XYZ processing your personal information where: it’s based on our legitimate interests (including profiling); for direct marketing (including profiling); and if we were using it for scientific/historical research and statistics
The right related to automatic decision-making including profiling. You have the right to ask Jigsaw XYZ to give you information about its processing of your personal information, request human intervention or challenge a decision where processing is done solely by automated processes and to carry out regular checks to make sure that our automated decision making and profiling processes are working as they should.
To request any of the above rights, please contact us by emailing firstname.lastname@example.org
How to make a complaint