WEBSITE TERMS AND CONDITIONS for www.haigh-cs.co.uk

These terms of use govern your use of our site. Please read these terms in full before you use this Website. If you do not accept these terms of use, please do not use this Website. Your continued use of this site confirms your acceptance of these terms.

WEB SITE ACCESS 

1.1    It is not necessary to register with us in order to use this Website.

USE OF WEBSITE

1.2    This Website may be used for your own private purposes and in accordance with these terms of use. 

1.3    You may print and download material from this Website provided that you do not modify or reproduce any content without our prior written consent. 

SITE UPTIME

1.4    All reasonable measures are taken by us to ensure that this Website is operational al day, every day. However, occasionally technical issues may result in some downtime and accordingly we will not be liable if this website is unavailable at any time.

VISITOR PROVIDED MATERIAL

1.5    Any material that a visitor to this Website sends or posts to this Website shall be considered non-proprietary and non-confidential. We shall be entitled to copy, disclose, distribute or use for such other purpose as we deem appropriate all material provided to us, with the exception of personal information, the use of which is covered under our Privacy Policy.

1.6    When using this website you shall not post or send to or from this Website any material:(a)    for which you have not obtained all necessary consents;

(a)    for which you have not obtained all necessary consents;

(b)    that is discriminatory, obscene, pornographic, defamatory, liable to incite racial hatred, in breach of confidentiality or privacy, which may cause annoyance or inconvenience to others, which encourages or constitutes conduct that would be deemed a criminal offence, give rise to a civil liability, or otherwise is contrary to the law in the United Kingdom;

(c)    which is harmful in nature including, and without limitation, computer viruses, Trojan horses, corrupted data, or other potentially harmful software or data.

LINKS TO AND FROM OTHER WEBSITES

1.7    Throughout this Website you may find links to third party websites. The provision of a link to such a website does not mean that we endorse that website.  If you visit any website via a link on this Website you do so at your own risk.

1.8    Any party wishing to link to this website is entitled to do so provided that the conditions below are observed:

(a)    you do not seek to imply that we are endorsing the services or products of another party unless this has been agreed with us in writing;

(b)    you do not misrepresent your relationship with this website; and 

(c)    the website from which you link to this Website does not contain offensive or otherwise  controversial content or, content that infringes any intellectual property rights or other rights of a third party.

1.9    By linking to this Website in breach of clause 5.2 you shall indemnify us for any loss or damage suffered to this Website as a result of such linking. 

DISCLAIMER

1.10    Whilst we do take all reasonable steps to make sure that the information on this website is up to date and accurate at all times we do not guarantee that all material is accurate and ,or up to date. 

1.11    All material contained on this Website is provided without any or warranty of any kind. You use the material on this Website at your own discretion.

EXCLUSION OF LIABILITY

1.12    We do not accept liability for any loss or damage that you suffer as a result of using this Website. 

1.13    Nothing in these Terms of Use shall exclude or limit liability for death or personal injury caused by negligence which cannot be excluded or under the law of the United Kingdom.

LAW AND JURISDICTION

These terms of use are governed by English law. Any dispute arising in connection with these terms of use shall be subject to the exclusive jurisdiction of the Courts of England and Wales.

OUR DETAILS

Haigh Consultancy Ltd is a company registered in England and Wales with company number 3509045. Registered Office: West Walk Building, 110 Regent Road, Leicester, LE1 7LT.

Data Policy

This policy describes the information that we process to support the storage and delivery of documents within the Aurora Archive and Retrieval system, The Data Workflow Manager System and other products or services provided by Haigh Consultancy Services Ltd. (HCS).

Privacy, Cookie Law and Security

At HCS we are committed to protecting your privacy and we comply with the data protection laws applicable to the UK. This Privacy Policy outlines how your personal information is treated and forms part of our Terms and Conditions.

For the purposes of the General Data Protection Regulation (the “Act”), both the data controller is and the data processor is Haigh Consultancy Services Ltd, West Walk Building, 110 Regent Road, Leicester, LE1 7LT.

A “Controller” determines the purposes and means of processing personal data.
A “Processor” is responsible for processing personal data on behalf of a controller.

We may monitor visitors on our websites and mobile apps and may use this data to improve our website performance and your experience with personalised content, promotions and campaigns, both on the website and through triggered email, SMS and direct mail (but only where you have agreed to these channels).

We may collect information about your IP address which may be used to detect the organisation or ISP connecting to the site and an approximate geographic location. This is done to help us identify unauthorised attempts at accessing the system.

If you are a customer or known contact you may be identified as having visited the site by virtue of either clicking through on emails, logging in or registering to use the website.

What Information do we collect?

We collect directly:

• Your company, name, address, telephone and email details
• Any other information relevant to access to our systems including cookie data

Indirectly we may record:

•  Which pages on the site you visit
• Which emails you respond to
• Data supplied to us by our clients for the purpose of data processing and or archive and retrieval

Use of cookies by the Haigh Consultancy Services website.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

The list below explains the cookies we use and why.

COOKIE 1: Has_js
DESCRIPTION: Some browsers are unable to display all of the site content. We use this cookie so that the site knows when not to display a page containing any JavaScript code.

COOKIE 2: HCS_COOKIE_POLICY
DESCRIPTION: This cookie remembers whether you have accepted our cookie policy or not.

COOKIE 3: Drupal.toolbar.collapsed
DESCRIPTION: This cookie configures whether the toolbar is visible or not when using the administrative site.

COOKIE 4: Sess*
DESCRIPTION: This is a session cookie which is used to maintain the user session while logged into the administrative site.

How we collect information

We collect information in two ways.

Directly from you:

• When you fill in or update details with the ‘Profile’ section of the Aurora application
• When you email, call or write to us for further information

Indirectly from you:

• When you visit a web facing interface for one of our applications, e.g. Aurora.
• From data supplied by our clients for the purposes of data processing and or archive and retrieval
• When you respond to one of our emails, mailings or other promotions

What is our legal basis for processing data?

To allow you to access our systems and enjoy a personalised experience when using them.

To provide you with data found in archived documents within the system. The data controller has agreed that one or more of the following statements applies:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
• processing is necessary for compliance with a legal obligation to which the controller is subject
• processing is necessary in order to protect the vital interests of the data subject or of another natural person
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
• To improve this site by determining how it is being used, and which areas are relevant or not.

How do we use this information?

We use this information to allow us to carry out tasks as defined, and on behalf of our clients. These include, but are not limited to, the creation of invoices, statements, insurance documentation, agreements and general letters.
We also use this information to allow us to correctly identify you when accessing our system to ensure a secure, personalised visit that allows access to information that you are authorised to view.

How do we share information?

We will not share your personal details such as name, address, email, telephone etc, or information about your business, with any organisation other than our own, Data Controller, parties authorised by the Data Controller or if ordered to do so by a recognised legal authority.

• to the extent that we are required to do so by law
• in connection with any legal proceedings or prospective legal proceedings
• in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
• to the purchaser (or prospective purchaser) of any business or asset which we are (or are contemplating) selling and
• to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information

Do you transfer data outside of the EEU?

HCS may transfer data to it’s sister company, UkrData located in Ukraine.  There are strict rules governing the processing of data which are detailed in a Data Protection Policy specifically written to cover the relationship.
Data will only be transferred where there is a clear need to do so and in accordance with Clauses 1 (specifically points a, b & c) of Article 49 of GDPR 2016 which states:

a.the data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards;
b. the transfer is necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject's request;
c. the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person;

Security

We will take every precaution to protect your personal information.

You must not share your password for any services or portal access. Your passwords and the answers to any secret questions are your responsibility and must not be disclosed to any third party. This is also important for your own protection. We cannot accept responsibility for any unauthorised access or loss of personal information that is beyond our control.

Our website may contain links to other websites, you should be aware that we are not responsible for the privacy practices on other sites.

Web Analytics

HCS use tools to monitor website performance.

We may also collect information about your IP address which may be used to detect the organisation or ISP connecting to the site.

If you are a known contact or customer of HCS you may be identified as having visited the site by virtue of logging in or registering to use the service.

How will we notify you of changes to this policy?

We will notify you before any changes of this policy come into effect. If you are a registered user of one of the HCS systems, this will be via email to the registered email within the system.

Data retention, account deactivation and deletion

We store data until it is no longer required to provide services to the Data Controller. This is by a client-by-client determination and will fall in line with their agreed retention period. For example, the Data Controller may have a legal requirement for us to store documents for 10 years and for them to be available for you to view for the entirety of that period. Other Data Controllers may only require us to store the data for a number of months before deleting it.

Whilst we will always undertake our obligations to delete accounts, if asked to do so, it is our recommendation that you discuss this with the Data Controller before a formal request is made. You are under no obligations to do so, however there may be consequences that HCS are unaware of and cannot therefore advise you of.

Data supplied to us via our web forms (on our website) will be stored for 2 years. You have the right for this data to be deleted

Access data stored in system logs, such as IP addresses, will be stored for 180 days for security purposes.

How can you exercise your rights under GDPR?

You have the right to see what personal data we hold about you. To obtain a copy of the personal information we hold about you, please write to us at Data Protection Office, Haigh Consultancy Services Ltd, 199 Minsthorpe Lane, South Elmsall, Pontefract, WF9 2DX or data_protection@haigh-cs.co.uk

You also have the right to inform us if any of it is inaccurate so that we can correct it, or to delete your data.

We will inform you if, by deleting your data, services that we provide to you or to the Data Controller can no longer be performed.

Facilitating Data Protection Complaints​

Complaints to HCS can be made either by email or in writing to Data Protection Office, Haigh Consultancy Services Ltd, 199 Minsthorpe Lane, South Elmsall, Pontefract, WF9 2DX or by email to data_protection@haigh-cs.co.uk.

• Information Required to Investigate a Complaint

To investigate a complaint effectively, we ask complainants to provide:

• A clear description of the issue or concern
• Relevant dates, times, and locations
• Names of individuals involved (if applicable)
• Copies of any supporting documents, emails, screenshots, or correspondence
• Details of any steps already taken to resolve the issue
• The outcome the complainant is seeking
• If the complaint relates to personal data, please specify:
• What data is involved
• How you believe it has been mishandled
• Any impact or harm experienced

• Proof of Identity Requirements

• Passport
• Driving licence
• National identity card
• Birth certificate (with proof of address)
• Recent utility bill, bank statement, or official letter (dated within the last 3 months)
• Only copies are required; originals should not be sent.

• Proof of Authority (If Acting on Behalf of Someone Else)

• A signed and dated letter of authority from the data subject
• Power of Attorney (lasting, enduring, or ordinary)
• Court appointed deputyship documents
• Written consent provided directly by the data subject to us
• Recent utility bill, bank statement, or official letter (dated within the last 3 months)

• Acknowledgement and Response times

• Acknowledgement: We will acknowledge receipt of the complaint within 30 days.
• Updates: We will keep the complainant informed of progress at appropriate stages.
• Outcome: We will provide a clear written explanation of the findings and any actions taken once the investigation is complete.

• Confidentiality and Data Handling

• Escalation