Privacy Policy

ITW Ltd is committed to protecting the privacy of all of our members’ personal information. This privacy policy outlines how we collect and use your personal information during and after your working relationship with us. Our practices are always carried out in accordance with the Data Protection Act (2018). It is important that you read this policy as well as any other privacy notice we may provide on specific occasions so that you are aware of how and why we are using such information.

Data Protection Principles

ITW Ltd strictly complies with data protection law. This states that any personal information we hold about you must be:

1. Used fairly, lawfully and transparently.

2. Used for specified, explicit purposes.

3. Used in a way that is adequate, relevant and limited to only what is necessary.

4. Accurate and, where necessary, kept up to date.

5. Kept for no longer than is necessary.

6. Handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage.

Consent

ITW Ltd does not need your consent in order to process your personal data when performing our contractual obligations to you. In specific circumstances, we may approach you for your written consent to allow us to process certain data or particularly sensitive data. If so, we will provide you with full details of the information we would like and why so you can make an informed decision about whether you wish to consent.

Data Sharing

ITW Ltd will share your data with third parties, including third-party service providers and other entities in the group. We require third parties to always respect the security of your data and comply with the law. We will share your personal information with third parties where required by law or where we have another legitimate interest in doing so.

Under the Data Protection Act 2018, your rights include to:

• Be informed about how your data is being used.
• Access personal data.
• Have incorrect data updated.
• Have data erased.
• Stop or restrict the processing of your data.
• Data portability (allowing you to get and reuse your data for different services).
• Object to how your data is processed in certain circumstances.