Privacy notice

Data collection and processing

Controller

Makkaru Ltd
2a Station Yard, Haddington. EH41 3PP.

Data Protection Manager

Bryan Gullan. Contact via phone or email.

When you contact Makkaru

You may choose to contact Makkaru by phone or email.

We'll use your information just as you would expect: to have a conversation with you about your enquiry.

We'll delete Personal Data collected in this way as soon as it is clear that there is no need for further communication.

When you use this website

The only Personally Identifiable Information (as defined under GDPR) collected by this website is your IP address.

Your IP address will be stored in server logs for the purposes of detecting and preventing fraud and unauthorised system access, and ensuring the security of our systems; the lawful basis for this is Legitimate Interest.

IP addresses identified as the source of unauthorised access attempts will be retained indefinitely, for the purpose of blocking access and, if appropriate, to provide to law enforcement agencies.

Where legal proceedings require the retention of logs, the logs will be retained for as long as is required by those proceedings. Otherwise, logs are deleted after 12 weeks.

When we have a business relationship

The nature of the data being processed will depend on the services being provided, but generally will be limited to no more than your name and contact information, in order to be able to work with you to fulfil the contract. Anything beyond this will be set out in our Agreement.

Your rights

The law gives you various rights with regard to your data. You can:

• Request access to receive a copy of information held about you.
• Request correction of any incomplete or inaccurate data.
• Request erasure of your data where there is no overriding reason for us to continue processing it. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of responding to your request.
• Object to processing, where we are relying on a legitimate interest basis and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of your personal data to you or to a third party, where the data is being processed by automated means, which does not apply to our data processing.
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

You also have the right to make a data protection complaint directly to us. Should you do so, we will:

• acknowledge receipt of your complaint within 30 days of receiving it;
• without undue delay, take appropriate steps to respond, including making appropriate enquiries, and keep you informed; and
• without undue delay, tell you the outcome of your complaint.

Please call or email us to make any such data protection reqeusts.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. We would, however, appreciate the chance to discuss your questions or concerns before you approach the ICO.