Privacy notice

This notice explains how On Business Ltd handles personal data in connection with the On Business Audits website, onbusinessaudits.com, and the UK and US editions of it. It replaces the notice published on the previous version of the site.

Who we are

On Business Ltd is the controller of the personal data described in this notice. If you have a question about it, or want to use any of your rights, contact us:

On Business Ltd
Data protection contact: Joseph Jankinson
Email: enquiries@onbusinessaudits.com

What this website collects

Very little beyond the audit booking form. This website has no accounts, no newsletter sign-up, no analytics and no advertising. Its fonts are served from our own hosting, not from Google or another font service.

• Cookies. Our own script sets two cookies, ob_region and ob_banner, to remember which edition of the site (UK or US) you chose and whether you closed the banner suggesting the other edition. Each is kept for one year. They hold no personal information and are not used to track you. See the cookies page.
• Your country. When you visit, our hosting looks up the country your connection comes from, so the site can suggest the right edition. That country is used for that page view and is not stored.
• Delivering pages. Like every website, ours receives your IP address and basic details of your browser so that it can send you the pages you ask for. We have not turned on visitor logging, so we do not keep a record of visits.

Booking an audit

When you book an audit, survey or verification with the booking form, we collect:

• about you: your name, job title, organisation, work email and phone number;
• about your client: the company’s name and number, the name, email and phone number of the person we should contact there, and the address where an on-site visit would take place;
• about the work: the kind of audit, the facility, dates, and anything you choose to tell us about the client.

The form is emailed straight to our audits team, through Postmark, our email provider. It is not stored on this website. Our hosting keeps a short technical log that a booking was sent, but not what it said. That log is deleted after three months.

We use these details to arrange and carry out the work you asked for, and to invoice for it. For you, our lawful basis is taking steps at your request before a contract, and then performing it. For your client’s contact, it is our legitimate interest, and yours, in arranging an audit under your facility with them. Please tell your client contact that you are passing their details to us. We keep booking details for as long as we need them for the audit, its report and our accounts, then delete them.

Demos of Audits Hub are booked on our separate booking site, book.onbusinessaudits.com, which has its own privacy notice.

Enquiries

If you email or phone us, we hold what you tell us: usually your name, your organisation, your contact details and what you would like to discuss. We use it to reply and, if you go ahead, to arrange our audits, surveys and verifications. Our lawful bases are our legitimate interests in answering enquiries and running our business, and taking steps at your request before entering into a contract. We keep it for as long as needed to deal with the enquiry and any business that follows, then delete it.

We do not sell your personal data, and we do not use it for automated decision-making.

Who handles it for us

This website is hosted by Amazon Web Services (AWS). Its files are stored in AWS’s London region and delivered through CloudFront, AWS’s worldwide content delivery network, which processes your IP address to send pages to you from a location near you. The booking form is handled in AWS’s London region and emailed through Postmark. AWS and Postmark act on our instructions as our processors.

International transfers

Because CloudFront delivers pages from locations around the world, your IP address may be processed outside the UK when you visit. Postmark is based in the United States, so a booking is processed there on its way to us. Both AWS and Postmark protect such transfers with contractual safeguards, including standard contractual clauses and the UK International Data Transfer Addendum.

Other websites

This site links to other websites, including Audits Hub (receivablesfinanceaudits.com and app.receivablesfinanceaudits.com), On Business Training (onbusinesstraining.com), LinkedIn and our booking site. Each has its own privacy notice and terms. Audits Hub and the learning platform are covered by their own terms and privacy notices, not by this one.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct it;
• ask us to delete it;
• ask us to restrict how we use it;
• object to our using it, including for direct marketing;
• ask us to transfer it to you or to another organisation.

To use any of these rights, contact us using the details above. There is normally no fee, and we will reply within one month.

Complaints

You can complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before you do.

Changes to this notice

We will update this notice when the website or how we use personal data changes, and show the date it was last updated at the top.