SEARAH LIMITED UK (“SEARAH LIMITED”, “Data Controller”, “we”, “our”, “us”) is committed to protecting and respecting your privacy.
As required by the UK General Data Protection Regulation, as incorporated into the law of the United Kingdom under the European Union (Withdrawal) Act 2018 and the Data Protection Act (“UK GDPR”), this SEARAH LIMITED Privacy Statement (“Privacy Statement”) explains what personal data we collect about you, when and why we collect it, how we use it, the conditions under which we may disclose it to others, your rights to your personal data and how we keep it secure. This Privacy Statement describes our online processing activities, specifically personal data that we collect through our website WWW.SEARAH.COM.
Please read this Privacy Statement carefully to understand our views and practices regarding your personal data.
Data Controller
The Data Controller is Searah Limited UK, company with its registered address at Holbein Gardens, 7 Holbein Place, London, SW1W 8NR (Company number: 17027115).
A. Types of Personal Data Collected and How we collect it
We will collect and process all or some of the personal data as follows.
- Personal data that you provide to us, such as when using the contact form on our website, providing feedback;
- We may collect personal data including your name (including any prefix or title), contact information (such as your address, email address, telephone number).
- Website and Online communication usage.
- Details of your visits to our website including, but not limited to, your log-in information, IP address and domain name, your browser version and operating system, information about your device, traffic data, location data, web logs and other communication data, and the resources that you access.
- If any part of our website links you to external websites, those websites do not operate under this Privacy Statement and we do not accept any responsibility or liability arising from those websites. We recommend that you read the privacy/personal data protection statement/policy posted on those external websites in order to understand their procedures for collecting, processing, using and disclosing personal data and before submitting your personal data to those websites.
- We may also collect information you provide in completing online subscriptions or registration and any online forms or when you report a problem, raise a query or provide feedback on our online services.
B. Purposes and legal basis for processing Personal Data
We may use personal data that we obtain for any of the following purposes:
- To communicate effectively with you and conduct our business — processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) UK GDPR);
- To conduct our business, including to respond to your queries or resolve any disputes, which may arise in connection with any dealings with us, to otherwise communicate with you, or to carry out our legal obligations arising from any agreements entered into between you and us, or to maintain and update internal contact lists to effectively communicate with you.
- To re-organise or make changes to our business — processing necessary for the purposes of the legitimate interests pursued by the Controller or third parties (Art. 6(1)(f) UK GDPR).
- In the event that we: (i) are subject to negotiations for the sale of our business or part thereof to a third party; (ii) are sold to a third party; or (iii) undergo a re-organisation, we may need to transfer some or all of your personal data to the relevant third party (and its advisors) as part of any due diligence process for the purpose of analysing any proposed sale or re-organisation. We may also need to transfer your personal data to that re-organised entity or third party after the sale or reorganisation for them to use for the same purposes as set out in this Privacy Statement.
- In connection with legal or regulatory obligations — processing necessary for compliance with a legal obligation (Art. 6(1)(c) UK GDPR).
- We may process your personal data to comply with our regulatory requirements or dialogue with regulators as applicable which may include disclosing your personal data to third parties, the court service and/or regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so. Where permitted, we will generally direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime.
Where we collect personal data from you, we will only do so for fulfilment of the purposes set out above. Failure to provide your personal data may mean that we are not able to effectively provide you with our products and/or services or to carry out any of the abovementioned purposes, if at all.
Information Sharing
We may share the personal data that you provide to us to other entities in the SEARAH LIMITED group for the purposes described above. Information may also be shared with our service providers or third parties, in each case to the extent necessary for the purposes described above. Such third-party who we reasonably believe need to have access to your information to provide you with the information or services you request from us may include:
- our approved sub-contractors, business partners, suppliers, or other third-party organizations providing administrative, IT or other services to SEARAH LIMITED or any member of the SEARAH LIMITED group of companies;
- third parties in connection with the transfer of all or any part of our business or assets;
- our auditors, consultants, lawyers, accountants or other financial or professional advisers appointed in connection with our business on a strictly confidential basis, appointed by us to provide services to us;
- any party in relation to legal proceedings or prospective legal proceedings; or
- government agencies, law enforcement agencies, courts, tribunals, regulatory/professional bodies, industry regulators, ministries, and/or statutory agencies or bodies, offices or municipality in any jurisdiction, if required or authorized to do so, to satisfy any applicable law, regulation, order or judgment of a court or tribunal or queries from the relevant authorities.
We will not otherwise use, share, disseminate, publish or disclose your personal data except as may be required in response to litigation, investigations or other legally required disclosures or to protect our rights, property or safety or of our customers, or others.
Transfer of personal data outside UK
As part of the services offered to you either through the website or otherwise, the personal data which you provide to us may in some instances be transferred to countries outside of the UK. The data protection laws in such third countries may not provide the same level of protection for your personal data as provided for under UK data protection laws. However, when we transfer your information outside of the UK, we take steps to ensure that appropriate safeguards, required by law, and all contractual measures suitable are taken with the aim of ensuring that a suitable level of protection of the personal data, and that your privacy rights continue to be protected as outlined in this Privacy Statement. You can obtain further details about the transfer safeguards we use by contacting us at the contact details set out below.
If we transfer your personal data, we will always do so under strict conditions of confidentiality and similar levels of security safeguards.
Where we store your personal data and means of the processing
All information you provide to us is stored on our secure servers or on the servers of third party IT service providers. We maintain appropriate administrative, technical and physical safeguards to protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of the personal data you provide to us in accordance with UK GDPR and any other applicable laws.
We may transfer your personal data to, or store it in, a destination outside of the jurisdiction of the entity to which you provided it. This is because SEARAH LIMITED is a global business, with operations located in various jurisdictions, which uses third party service providers based in a number of locations worldwide.
Where we have to transfer your personal data to third countries, we will use appropriate approved safeguards in accordance with UK GDPR, as stated in the paragraph above.
Period for which we store your personal data
We will store your personal data for no longer than is necessary for the purposes for which it was collected or provided to us (unless a legal or insurance obligation requires us to keep it for longer period such as operational, legal, regulatory, tax or accounting requirements).
Your rights to your personal data
Where applicable and within the limits set by the UK GDPR, please note that you have the following rights:
- Access. You may contact us at any time in order to request access to the personal data we hold about you. We will confirm whether we are processing your personal data, and, where that is the case, provide access to the information listed in article 15 UK GDPR.
- Rectification. In accordance with article 16 UK GDPR, you can ask us to correct or complete your personal data by contacting us at any time. To the extent reasonably possible, we will inform anyone who has received your personal data of any corrections we make to it.
- Restriction. In the cases listed in article 18 UK GDPR, it may be possible to require us to limit the way in which we process your personal data (i.e. require us to continue to store your personal data, but not otherwise process it without your consent).
- Erasure. Where one of the grounds listed in article 17 UK GDPR applies, you may ask to have the information on your account deleted or removed. We will try to do so promptly, and, to the extent reasonably possible, we will inform anyone who has received your personal data of your request. However, we must keep track of certain transaction information, such as past purchases and similar information, for legal or tax compliance purposes, to satisfy insurance obligations or in the event of legal claims, so we may not be able to fully delete your information in certain circumstances.
- Receiving/transferring your personal data. In accordance with article 20 UK GDPR — where we process your data based on consent or pursuant to a contract with you, and the processing is carried out by automated means — you may ask us to send you the personal data we hold on you in an electronic, structured and user-friendly format, or you may ask us to send this data to another entity.
- Object. In accordance with article 21 UK GDPR, where we are processing your personal data without your consent to pursue our legitimate interests, you may object to us processing your personal data.
- Automated decision-making. In accordance with article 21 UK GDPR, you have the right to be informed of any automated decision-making, including profiling, used in connection with your personal data, and we will provide information about the logic we apply, as well as the significance and consequences of such processing.
- Complaints. Without prejudice to your right to initiate other administrative or judicial proceedings, you have the right to lodge a complaint with the competent supervisory authority. We encourage you to contact us before making such complaint to the relevant authorities, so that we can try to resolve any concerns you have.
These rights may be exercised by mailing the following address: Holbein Gardens, 7 Holbein Place, London, SW1W 8NR.
Security
We have security measures in place to help protect against the loss, misuse and alteration of the information under our control. While we cannot guarantee that loss, misuse or alteration to data will not occur, we ensure that our systems adhere to market security standard so as to help safeguard against such occurrences.
Changes to our Privacy Statement
Any changes we make to our Privacy Statement in the future will be posted on this page. Please check back frequently to see any updates or changes to our Privacy Statement.
Contact details
If you have any questions, comments or request regarding this Privacy Statement or your personal data, or if you wish to contact a data protection officer, you may reach out to us at Holbein Gardens, 7 Holbein Place, London, SW1W 8NR.