Privacy Notice
Last Updated 18/07/2023
Table of Contents
- How we use your personal information
- Data protection law and you
- How we collect your information
- Categories of People about whom we hold information
- Categories of Personal Information we process
- What we use your personal information for
- Who we share your information with
- How long we keep your information for
- Your rights as an individual
- Cookies
- How to contact us
How we use your personal information
Your information will be held by Dovetail. This privacy notice is to let you know how we look after your personal information. This includes what you tell us about yourself, what we learn by having you as a customer, and the choices you give us about what communications we may send to you. This notice also tells you about your privacy rights and how the law protects you.
Data protection law and you
The General Data Protection Regulation (GDPR) exists to ensure that we process your information in a manner that is lawful, only if we have a proper reason to do so, and that we keep you informed of what we do with your information.
If we have a business reason to process your information, to offer you goods or services this is referred to as Legitimate Interest. We also have certain legal obligations where we must process your information and where neither of these apply we will ask your permission (consent) to collect the information and inform you how it will be used. We can also process your information under any contractual obligation if a formal contract exists.
How we collect your information
We collect your information from various sources, including our website, third parties that we engage with to offer services, paper forms, correspondence, telephone and email.
We collect your information when you contact us, apply for a service or enter a contract with Dovetail.
Categories of people about whom we hold information
We hold information about many different categories of person, to enable Dovetail to offer the full range of services to our customers. These types of people can be seen in the table below.
| Type of Person | Definition |
| Customer | A person that is receiving goods or services from Dovetail |
| Business Contact | A person that is a business contact e.g. IT Vendor, Contractor, Prospect, Client Partners |
| Employee | An Employee of Dovetail |
Categories of personal information we process
This explains what all the different categories of personal information mean, that are covered by data protection law.
We use many kinds of personal information to enable us to deliver our services. They are grouped together as follows so that you can see what we may know about you. We don’t use all this data in the same way. Some of it is useful for monitoring and improving our services, or for providing services to you. But some of it is private and sensitive and we treat it accordingly.
| Type of Information | Definition |
| Contact | Your name, where you live or correspond from, and how to contact you |
| Financial | Your financial details such as bank details |
| Transactional | Details about payments to and from your accounts with us |
| Contractual | Details about the products or services we provide to you |
| Technical | Details on the devices and technology you use |
| Communications | Letters and emails you write to us, and conversations between us |
| Documentary Data | Details about you that are stored in documents in different formats, or copies of them |
What we use your personal information for
The core functions and activities are detailed below so you can see what we do with your information.
| Function | Core Activities |
| Recruitment | · Identify suitably qualified candidates to fulfil vacant roles |
| Job Management |
· Project planning · Project execution · Financial management |
| Employee Management |
· Remuneration · Training and development · Pensions · Benefits · Absence management |
| Support and Admin |
· IT Support · Customer Services · Financial management |
| Vendor Management | · Vendor management |
Who we share your information with
To enable Dovetail to offer services and abide by laws and regulations that apply, we have a need to share certain information with outside organisations. We will always do so in an appropriate manner, and ensure adequate measures are put in place to protect your information.
Below is a list of the types of organisation that we may share your personal information with, and examples of these organisations where appropriate.
| Type of Third Party | Reasons | Examples |
| Contractor | · Manage sub contracted work | Medical Writers, Logistic Agencies, Project Managers |
| Vendor | · Provision and support of IT Systems | Estimation, project planning, email, file storage, pensions, mobile device management, certification |
How long we keep your information for
We will keep your personal information as per our records retention policy. The reasons we keep your information for are:
- To offer our goods and services to you
- To respond to a question or complaint
- To respond to a warranty or service query
- To analyse the quality of the services we offer
- To obey rules and legal obligations that apply to us about keeping records
We may also keep your data for longer than stated if we cannot delete it for legal, regulatory or technical reasons.
Your rights as an individual
Under the General Data Protection Regulation, you have certain rights as an individual. Details of your rights can be found below. In all cases see the How to Contact Us section at the bottom of this page to enact the relevant right.
Identification Requirements
For all the rights below and fraud prevention, the first check we must make is to satisfy ourselves that you are who you say you are. Dovetail will take necessary steps on a case by case basis to ensure we have obtained necessary identification before proceeding with any request.
Right to complain
You have a right to complain in relation to data privacy, if you are not happy with how we have processed your information. You also have the right to lodge a complaint with the regulator. In the UK the regulator is the Information Commissioner’s Office and you can report a concern with them here: https://ico.org.uk/concerns/
Right to Access
You have a right to request a copy of the information that we hold about you.
Right to Portability
You have a right to request a copy of your information in a format that can be taken to a supplier that is offering related services to Dovetail to enable you to switch to them as a service provider where applicable.
Right to Withdraw Consent
Where we have asked, and you have given consent, you have at any time the right to withdraw consent.
Right to Rectification
If your information is incorrect, you have a right to request that we correct this in our systems.
Right to Erasure
If Dovetail do not have a Legal Basis, obligation or purpose to keep your information, you will have a right to ask us to delete the information we hold about you.
Right to Object or Restrict Processing
If you believe the information we hold about you is incorrect, or we are making automated decisions using your information, you have the right to object to the processing until any concerns have been addressed.
Cookies
Cookies are small computer files that get sent down to your PC, tablet or mobile phone by websites when you visit them. They stay on your device and get sent back to the website they came from, when you go there again. Cookies store information about your visits to that website, such as your choices and other details. Some of this data does not contain personal details about you or your business, but it is still protected by this Privacy notice.
Cookies that we use are;
_ga2 years Used to distinguish users._gid24 hours Used to distinguish users._gat1 minute Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named_dc_gtm_<property-id>.AMP_TOKEN 30 seconds to 1 year Contains a token that can be used to retrieve a Client ID from AMP Client ID service.
Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service._gac_<property-id>90 days Contains campaign related information for the user.
If you have linked your Google Analytics and AdWords accounts, AdWords website conversion tags will read this cookie unless you opt-out. Learn more.
How to contact us
Dovetail can be contacted in relation to any of the above. You can also write to us at the details below.
DPO Email: claire@dovetailstrategies.com