individual privacy judgement
Your opportunity to influence your customers
and their data-sharing decisions
Individual Privacy Judgement
It became clear to us some time ago that some managers and data controllers don't attach much importance to their published privacy information. So we developed Individual Privacy Judgement as an awareness and training tool. See what you think.
Managers don't understand the job that privacy information has to do - it is there to inform people.
They have a right to be informed, it's in the GDPR. Data controllers are responsible for upholding these rights.
Providing useful, easy to read privacy information about what you plan to do with someone's personal data can make the difference between someone sharing their data with your business, or not. Making a sale, or not. Finding a customer, or not.
Your privacy information is often the only part of all your data protection and privacy effort people can actually see. All the other work remains hidden. They can't see your data mapping, risk assessments, vendor controlsand internal policies.
Then only thing they can see is your published privacy information.
If they want to know if sharing their personal data with you is a good idea or will be dangerous - the only way you can influence their decision is by giving them a powerful argument to do so.
Which most privacy policies utterly fail to do.
Here are the reasons why
The decision to share or not to share personal data.
It is unique to the individual and the circumstances in which they are being asked to share their personal information.
A positive decision is more valuable to both the collecting and the sharing parties.
A positive decision can form the basis of a longer customer/vendor relationship.
It is an indicator of trust being present.
It is informed by a mixture of experience and information
A negative decision is simply the decision not to share. Perhaps just not at that moment in time (in other words, "not this, not now") or perhaps it is a permanent decision ("not ever").
Negative decisions happen when trust is not present.
The suspension of individual privacy judgement allows for low trust/low value data sharing. "You haven't given me enough reason to trust you but I still want what you're offering, so I'll share the bare minimum with you in order to get it."
Suspension of individual privacy judgement can be caused by a lack of adequate information, inaccessible information, a lack of relevance or a sense of urgency. It allows the limited and short term flow of personal information in exchange for limited value to both parties.
When suspended, privacy is not enough of an issue to prevent the exchange of personal information - and neither is the value in the exchange.
There is much more to Individual Privacy Judgement. If you would like to discuss what it can mean for your efforts to convince people that you are a safe pair of hands for their personal data, you can book a quick chat using the calendar below. This one is free.
Why we need some information from you
You want to arrange an appointment for a chat to discuss your situation. We are looking forward to meeting you but we need to arrange that appointment time and date in our calendars first.
What you're being asked to provide
The calendar system will ask you to provide your name, a contact email address and your preference for the appointment date and time. You have the option to add your contact telephone number but this is not required to set up the appointment.
If you do not provide the information we ask for, we can't book the appointment.
The legal basis we will use
We will ask for your consent for us to use the information you provide, including your email address, to set up the appointment and communicate with you about your appointment only.
We will not use your contact information for any other purpose without asking you first.
You can withdraw your consent at any time by contacting us or using the "unsubscribe" link in every email we send. Note that if you withdraw consent we cannot use your email address to contact you.
Who you're giving your information to
You are giving your information to Allstrat Ltd, trading as Responsible Data Use. Allstrat Ltd is a company registered in Scotland and is also registered as a data controller with the ICO (registration number: ZA317070).
You can contact us at support@responsibledatause.uk or by calling 01786 439 566.
Where your information will go
Your information will be processed by our website and marketing system provider (Modern Ltd); and email provider (Microsoft).
Your information will be stored on systems in the EEA. However the data processor responsible for those systems (Modern Ltd) uses Google Cloud as a sub-processor which is headquartered in the USA and as such your data may be accessed by the US Government.
We have a Data Processing Agreement with Modern Ltd which contains Standard Contractual Clauses (SCCs) which provides some level of data protection and privacy. However if you do not wish your data to be accessed from the USA, you should not use this calendar. You may wish to call us instead.
How long we keep your data for
Your data will be kept for 1 year following your last contact with us. it will then be securely deleted.
Your rights, including the right to complain
You have rights over how we process the data you share with us. Including the right to complain to us and the regulator in the UK (the ICO). For details about your rights and how you can use them, see the tab below, "More Information"
More Information
For detailed information about your rights, including contact information for Allstrat Ltd and our data protection officer, please visit our Privacy Centre.
