PAUL INDONESIA LIMITED PRIVACY POLICY

PAUL UK Limited is committed to protecting your privacy. Please read this privacy policy to understand how we use and protect the information that you provide us with.

Introduction
PAUL UK Ltd. registered address is The Broadgate Tower, 3rd floor, 20 Primrose St, London, EC2A 2RS with registration number 03839415

Privacy Statement
This privacy statement sets out how personal data is stored and processed in accordance with GDPR legislation (2018). Personal data refers to anything that may identify you as an individual including name, contact details, position, and salary. This statement will be regularly reviewed and updated as required by the GDPR.

Purpose of collecting and processing data
Your personal data is used solely for Marketing purposes. The data enables us to make an informed decision as to whether your profile makes you a suitable candidate for a potential assignment. Without consent to share your personal data we are unable to put you forward for any position of employment.

What information do we collect about you?
Upon your consent, we may collect the following personal data from you

• Title
• Name and surname
• Gender
• Date of Birth
• Email address
• Memorable name
• Postal address
• Phone number
• Contact method
• Age

We do not share sensitive or special category data such as information relating to age, gender, marital status, pregnancy, disability, and ethnic origin in accordance with the Equality Act (2010).

This information is collected and processed orally by telephone, electronically by email and SMS, as well as in writing. This data is portable between electronic devices.

Your information is retained for as long as there is a potential relationship between you and PAUL UK and we’ll endeavour to keep it for as little as possible once this relationship is over or immediately after your request unless there is a legal reason why it has to be kept longer.

Where is your information storage?
To avoid risk of data loss, electronic data is password protected and stored in multiple locations including OneDrive, iCloud, Dropbox and Interxion Data Centre as well as with Micronet online and cloud backup solution, all of which have individual Privacy Policies.

Written data is stored in a secure filing system for a period of 6 years. Any loss of data or breach of data protection will be reported to the ICO.

Who do we share data with?
We may share your information with our partners in order to operate our business. A list of our main partners would include:

• Micronet (Main IT partner for IT support)
• Mailchimp (CRM, email & newsletter partner)
• Yoyo Wallet (Loyalty App platform)
• Best Response Media (Main Web developer for our Website &
• Ecommerce business)
• Magento (Website platform)
• Wireless Social (Wifi service)
• FeedItBack
• Shortstack
• Social Media Management platforms

These companies may store personal information on our behalf. We may employ third-party companies and individuals on our website or platforms– for example, analytics providers and content partners. These third parties have access to your personal information only to perform specific tasks on our behalf, and are obligated not to disclose or use it for any other purpose.

We do not share or sell personal data to third parties for marketing purposes. We do not share any personal data with any party not related to our business.

Links to Other Sites
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites (including social network sites, Book A Table, Design My Night, City Pantry, UberEats), and cannot assume responsibility for their treatment of your personal information. This privacy policy only covers our website and privacy practices. You should contact the operators of those websites directly if you wish to enquire about their privacy practices and policy before providing your personal information to any third party.

Individual rights
At any time

• Right of access – An individual can request, in writing, to review their personal data.
• Right to rectification – An individual can request to rectify/update their personal data.
• Right to erasure – An individual can request, in writing, to have their personal data deleted.
• Right to restrict processing – An individual can request, in writing, that their personal information be no longer processed but retained for the future.
• Right to Object – Any objection as well as any query related to an individual’s data can be directed to the Data Protection Team on
• DataProtection@paul-uk.com
  Right to withdrawal – An individual has the right to withdrawal consent at any time, and the Data Protection Team. DataProtection@paul-uk.com would be the most appropriate point of contact to communicate the withdrawal as this is the team that would ultimately liaise with the request.
• Right to complaint – Any individual has the right to lodge a complaint with a supervisory authority, complaints should be directed to the ICO https://ico.org.uk/make-a-complaint/

Automated decision making, no automated decision-making or processing tools will be used. It is important we have your consent to store and process your personal data.

Information we collect from you and how we use it
When you sign up to receive our e-newsletter or register with us to place orders, you may be asked to provide certain information about yourself. This may include (but is not limited to) your name, contact details and credit or debit card details. This information will allow us to process and fulfil your transactions. Should you enter a competition or promotional feature, take part in a survey, or request a brochure or any other information from us, we will also ask for your details if required.

From time to time we may also collect information about your usage of our website, as well as information about you from messages you post to the website and e-mails or letters you send to us. This information will enable us to provide you with access to all parts of our website and to supply the goods or services you have requested. We will also use and analyse the collected information to administer, support, improve and develop our business.

We may use other companies to provide services on our behalf, such as, processing payments, delivering orders, analysing data or carrying out market research. We will only disclose your information to the extent needed to deliver the services required.

Other ways we may collect data from you:

• When you register to use out wifi in stores
• Interacting with our social media/network sites and/or entering our competitions/ prize draws
• Sending us feedback or using other interactive features of our website or app
• Using our online delivery services or using 3rd party delivery services to order from us, such as postal address and phone number.

We may use your information to contact you for your views on our services, as well as to occasionally notify you about important changes or developments to our site or services. Furthermore, we may also use your information to let you know about our other products and services which may be of interest to you. Depending on your elected means of communication, we may contact you by post, telephone or e-mail. If you decide that you do not want to receive any further communications from PAUL UK Limited, please let us know by sending an e-mail to marketing@paul-uk.com.

Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.

How we secure customer information
The PAUL UK Limited website complies with the terms of the Data Protection Act. We make every effort to secure your information and maintain your confidentiality, including using Secure Socket Server and encrypting all entered data.

Online payments via the PAUL UK Limited website are protected by various levels of security technology. We employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage.

Registering
You can browse the PAUL UK Limited website without registering. However, you need to register if you wish to place an online order. Registration is free. You do not need to enter your credit card details to register – credit card details will only be asked for when you make your payment. To register, you will be asked to enter your name, address and a few other personal details.

You only need to enter your full details when you are registering. Completing the registration process only takes a few minutes and creates your personal account.

Once you have registered, you can use your e-mail address and chosen password to identify yourself to the site, or ‘log in’. Each time you visit the PAUL UK Limited website, you can enter these two pieces of information to access your user details. Any personal information or account details you give us will be securely protected.

In addition, the use of our website or app means we may obtain information about your computer system or mobile device, mobile operating system, browser type, IP (Internet Protocol) address, linked sites; and applications or social media where you share Online Services content. This information collected is for administrative purposes.

Cookies
Cookies are small amounts of information which are automatically set by our website on your computer. They are generally used to remember the choices you make while on the site and are harmless to your computer system.

Unless you have specifically refused to accept cookies when disclosing your details to us, our system will automatically issue one or more cookies to your computer when you log on and use this website. Should you elect to set your computer not to accept cookies, you may not be able to use certain features on this website.

Viewing your information
You are entitled to see the information we hold about you and you may request that we make any necessary changes to ensure that it is accurate and kept up to date. If you wish to do this, please contact us by emailing marketing@paul-uk.com

Changes to our privacy policy
Any changes to our privacy policy will be added to this website and will immediately supersede any previously posted information. Please refer to this page to keep updated on any changes. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

Contact
All comments, queries and requests relating to our use of your information are welcomed, and should be emailed to marketing@paul-uk.com

PLEASE PRINT THIS PRIVACY POLICY FOR YOUR RECORDS