Privacy Policy – Unique Minds

Privacy & Data Protection Policy

Uniqueminds is a trading name of DM Professional Services.

At Uniqueminds we adhere to a strict privacy policy in line with the principles of the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
Uniqueminds needs to gather and use certain information about individuals. These can be enquirers, customers, suppliers, business contacts, employees and other people we have a relationship with or may need to contact.
This policy describes how this personal data will be collected, handled and stored to meet our standards and comply with the law.

Use of data
We use any personal data we collect for lawful business purposes only. For example, we use data we collect from website contact forms just to respond to enquiries, provide quotes, prepare proposals and arrange new assignments.

Data storage & security
Uniqueminds utilise Dropbox For Business, Microsoft SharePoint and OneDrive under Office 365 for file management and data storage, which are all highly secure and GDPR compliant.
Personal data collected through Uniqueminds’s business activities resides securely on these Cloud-based storage entities for a reasonable time period only, before being deleted.
Microsoft OneDrive is compliant with ISO 27001, an industry standard that pretty much defines the policies of most tech and IT departments. The platform encrypts the data from client to server via SSL and data at rest is encrypted using AES 256-bit encryption keys.
Dropbox’s security practices also adhere to the most widely accepted security and privacy standards in the world. These include ISO 27001/2, ISO27018/17 and SOC 2.
In addition, within the Uniqueminds office, all our computers have firewalls, up to date virus, malware and ransomware protection and the latest Microsoft operating system security updates.
We will keep your data for the minimum statutory period and as long as you wish to receive our newsletter.

Data protection
Uniqueminds adhere to the ‘data protection principles’ of the Data Protection Act 2018, whereby data is:

used fairly, lawfully and transparently
used for specified, explicit purposes
used in a way that is adequate, relevant and limited to only what is necessary
accurate and, where necessary, kept up to date
kept for no longer than is necessary
handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

Uniqueminds abides by the following Data Protection practices:-

we do not use personal data for direct marketing purposes without receiving express prior consent to do so.
we do not share or sell personal data to third parties. Exceptions to this include the sharing of some personal data with our trusted trainers. In addition, certain projects necessitate the sharing of personal data with our printing and logistics company and (in the case of psychometric testing) the test providers.
Uniqueminds collect personal data solely for our specified and lawful purpose or purposes. We do not further process data in any manner incompatible with that purpose or purposes.
we do not keep personal data for longer than we deem reasonably necessary for the intended business purpose.

Uniqueminds process personal data in accordance with the rights of data subjects under the Data Protection Act 2018.

Your rights
Under the GDPR, you have various rights with respect to our use of your personal data:

Right to Access – You have the right to request a copy of the personal data that we hold about you by contacting us at the email address given below. Please include with your request information that will enable us to verify your identity. We will respond within 1 month of request. Please note that there are exceptions to this right. We may be unable to make all information available to you if, for example, making the information available to you would reveal personal data about another person, if we are legally prevented from disclosing such information, or if there is no basis for your request, or if it is excessive.
Right to rectification – We aim to keep your personal data accurate and complete. We encourage you to contact us using the contact details provided below to let us know if any of your personal data is not accurate or changes, so that we can keep your personal data up-to-date.
Right to erasure – You have the right to request the deletion of your personal data where, for example, the personal data are no longer necessary for the purposes for which they were collected, where you withdraw your consent to processing, where there is no overriding legitimate interest for us to continue to process your personal data, or your personal data has been unlawfully processed. If you would like to request that your personal data is erased, please contact us using the contact details provided below.
Right to object – In certain circumstances, you have the right to object to the processing of your personal data where, for example, your personal data is being processed on the basis of legitimate interests and there is no overriding legitimate interest for us to continue to process your personal data, or if your data is being processed for direct marketing purposes. If you would like to object to the processing of your personal data, please contact us using the contact details provided below.
Right to restrict processing – In certain circumstances, you have the right to request that we restrict the further processing of your personal data. This right arises where, for example, you have queried the accuracy of the personal data we hold about you and we are verifying the information, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests, or the processing is unlawful and you elect that processing is restricted rather than deleted. Please contact us using the contact details provided below.
Right to data portability – In certain circumstances, you have the right to request that some of your personal data is provided to you, or to another data controller, in a commonly used, machine-readable format. This right arises where you have provided your personal data to us, the processing is based on consent or the performance of a contract, and processing is carried out by automated means. If you would like to request make such request, please contact us using the contact details provided below.

Please note that the GDPR sets out exceptions to these rights. If we are unable to comply with your request due to an exception we will explain this to you in our response.

What Personal Data do we collect?
If you are making an enquiry through our contact forms on our websites, we will collect all information that you provide which will be, at minimum, your name and email address and, at most, your contact telephone number and postal address as well. If you make an enquiry via telephone we will ask to collect, again at minimum, your name and email address. We may also ask to collect your telephone number to ensure that contact is able to be maintained.

Psychometric testing and assessment services
As part of our psychometric testing and assessment services, we receive the personal data of candidates. This includes candidate name, sex and email address/es.
We do not use candidate personal data for marketing purposes, nor share it with any third party companies (other than the test provider for the purposes of setting up the psychometric test/s or assessment/s). We store candidate data in accordance with “Data storage & security” (above).

Contact
If you have any queries about this Policy, the way in which qualityculture processes personal data, or about exercising any of your rights, you can contact our Privacy Representative by sending an email to enquiries@uniqueminds.co.uk

Complaints
If you believe that your data protection rights may have been breached, and we have been unable to resolve your concern, you may lodge a complaint the applicable supervisory authority or to seek a remedy through the courts. Please visit https://ico.org.uk/concerns/ for more information on how to report a concern to the UK Information Commissioner’s Office.

Changes to our Policy
Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Policy.