Privacy policy.
Viger Assist Ltd
1. Introduction
Viger Assist Ltd ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Our Role as Data Controller and Owner
Viger Assist Ltd is the data controller and owner of the personal data we collect. We determine the purposes and means of processing your data and are responsible for ensuring compliance with data protection laws.
3. Information We Collect
Contact Information: Name, email address, phone number, postal address.
Identification Information.
Service-Related Data: Information related to the services we provide.
Communication Data: Information provided when you contact us.
Website Usage Data: IP address, browser type, etc.
Sensitive/Special Category Data:
For bill management, login credentials and account details (with explicit consent).
For event planning, detailed information about personal, family, and friend networks (with explicit consent).
4. Legal Basis for Processing
Performance of a Contract: To provide our services.
Consent: For marketing, sensitive data processing, and certain tracking activities.
Legal Obligation: To comply with legal requirements.
Legitimate Interests: For improving customer service and other legitimate business purposes, where these interests are not overridden by your rights.
Vital Interests: In rare cases where necessary to protect someone's life.
We process your sensitive data related to bill management and event planning with your explicit consent, which you can withdraw at any time.
5. How We Use Your Information
Provide and maintain our services.
Communicate with you.
Improve our services.
Send marketing communications (with consent).
Comply with legal obligations.
Provide bill management and event planning services.
6. Sharing Your Information
Third-party service providers (with contractual data protection obligations).
Legal authorities.
Professional advisors.
7. Data Storage and Customer Control
We use Google's secure systems and Google Drive for data storage.
Customers have access to their data in Google Drive and can add or remove data at any time.
While we utilize google drive, we remain the data controller, and are responsible for the protection of your data. Google are data processors, and are subject to data processing agreements.
8. Sensitive Data Handling
We implement enhanced security measures, including encryption and access controls, to protect sensitive data.
We only collect necessary sensitive data.
We maintain detailed consent records.
9. Data Security
We implement technical and organizational security measures.
All staff are thoroughly vetted and subject to strict NDAs, including clauses relating to the UK GDPR and the Data Protection Act 2018. Breaches will result in dismissal and financial penalties.
10. International Data Transfers
As we utilize third-party applications and technologies, your personal data may be transferred and processed in countries outside the UK and the European Economic Area (EEA), including the United States.
Where such transfers occur, we implement appropriate safeguards to ensure your data is protected to the standards required by UK GDPR.
Specifically, where we transfer data to the US, we rely on the UK extension to the EU-US Data Privacy Framework. This framework has been deemed to provide an adequate level of protection for personal data transferred from the UK to participating US organizations.
We ensure that all third-party providers have appropriate data processing agreements in place, that meet UK GDPR standerds.
If we were to transfer data to countries without adequacy decisions, we will use standard contractual clauses or other approved mechanisms to ensure adequate protection.
11. Children's Privacy
General Policy:
Our services are primarily intended for adults. We do not knowingly target or solicit personal data from children under the age of 13 for direct marketing or independent service use.
If we become aware that we have collected personal data from a child under 13 without verifiable parental consent in a way that is not covered by the family services exception below, we will take steps to delete that information as quickly as possible.
Family Services Exception:
In the context of providing personal assistant services to families, we may process children's personal data (e.g., name, date of birth, medical appointments, activity club information, school information) when it is necessary for the parent(s) to effectively utilize our services for family event planning and scheduling.
We will only process such data with the explicit consent of each parent or legal guardian. During the sign-up process, we will clearly explain the types of children's data we may process and the purposes for which it will be used.
When planning events such as birthday parties or gatherings involving children outside the immediate family, we will obtain consent from the parents or legal guardians of those children before processing their personal data.
To reduce the risk of complex data handling, we will steer away from storing highly personalised invitations, or storing large amounts of data on children outside of our clients family group.
Transparency and Accessibility:
If we were to collect data from children in a more direct manor, we would gain verifiable parental consent, and create a specialised section regarding childrens privacy, that would be very easy to understand by the child, and the parent.
We are committed to ensuring that parents are aware of how their children's data is being used.
12. Cookies and Tracking Technologies
Our website, hosted by Squarespace, uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content.
Squarespace Cookies:
We utilize Squarespace's cookie implementation, which includes essential cookies for website functionality, analytics and performance cookies, and functional cookies. For in depth information please see squarespace's cookie policy.
Third-Party Tracking:
We also use Google Analytics, Facebook Pixel, and X Pixel to track user behavior and measure the effectiveness of our marketing campaigns. These tools use cookies to collect data about your interactions with our website.
Google Analytics collects data on website traffic, user behavior, and demographics.
Facebook Pixel and X Pixel track user activity for targeted advertising and campaign measurement.
We provide a cookie banner on our website that allows you to manage your cookie preferences.
Our cookie policy provides detailed information about the types of cookies we use, their purpose, and how you can control them. This policy is available on our website.
13. Data Retention
We retain data only as long as necessary.
Data is deleted or anonymized when no longer needed.
14. Your Rights
Access your data.
Rectify inaccuracies.
Erase your data.
Restrict processing.
Data portability.
Object to processing.
Withdraw consent.
Lodge a complaint with the ICO.
To exercise any of your rights, please contact our Data Protection Officer at the contact details provided below. We will respond to your request within one month, or as otherwise required by law.
If you wish to complain to the ICO, you can do so through their website (ico.org.uk) or by calling their helpline.
15. Data Protection Officer
Andrew Purchase, Managing Director.
Email: support@vigerassist.com
Address: 56 Newhall Street, Birmingham, B3 3RJ.
16. Changes to This Policy
We may update this policy.
Changes will be posted on our website.