Privacy policy

Myth Digital Ltd is registered with the Information Commissioner's Office (ICO) as a Data Controller for the personal data we hold and process. Our registered address is First Floor, 58 Howard Street, Belfast, BT1 6PJ. Our ICO registration number is ZA898501 and our Data Protection Lead is James Nesbitt, who can be contacted at hello@mythdigital.co.

When you deal with us you can trust us with your information. We will do nothing that infringes your rights or undermines that trust. This notice describes the information we collect about you, how it is used and shared, and your rights regarding it.

Most of the information we hold about you is provided by you when you enquire about or use our services, or when you work for us. We will tell you why we need the information and how we will use it.

Personal data is any information that can identify an individual, on its own or with other information. Its processing is governed by the UK General Data Protection Regulation and the Data Protection Act 2018. We collect and process both personal data and special categories of personal data, including:

• Names, dates of birth and contact details;
• National Insurance details;
• Financial details such as financial status and bank details;
• Records of goods and services relevant to the business;
• Records of education, training and employment;
• Photographs;
• Device IP address.

Special category data we may hold about employees includes information about health, including medical conditions and sickness records, and nationality contained within a passport.

We collect data when we run a recruitment exercise, during employment, when you request a quote or information, when you place an order for our services, and when you complete surveys or give feedback. Website usage information is collected using cookies, described below. We may also obtain information from third parties such as recruitment agencies and referees.

We meet our obligations under the GDPR by collecting and retaining only the data necessary to pursue our legitimate business interests, by keeping appropriate technical measures in place to protect it, by keeping it up to date, and by storing and destroying it securely.

We use your information to:

• Process information necessary for employment;
• Provide products, services, quotations and information;
• Process or support payments for products and services;
• Improve our products and services;
• Maintain the safety, security and integrity of our services;
• Direct your enquiries to the right people;
• Investigate and address your concerns;
• Communicate with you about products, services, news, updates and events;
• Make statutory returns and comply with health and safety obligations;
• Respond to requests for references;
• Do anything else required or permitted by law.

We do not use automated decision-making in the processing of your personal data.

The GDPR requires every organisation that processes personal data to have a lawful basis for doing so. Ours are the performance of a contract, legitimate interest and consent.

Contract. We process personal information to enter into and fulfil contracts for services and employment.

Legitimate interest. We rely on our legitimate interest when processing information for the management, administration and operation of the company, for business development and marketing, to carry out employment functions, and to comply with regulatory requirements.

Consent. On occasion we rely on your consent, particularly for marketing and for the analytics and marketing cookies on this website. You can withdraw consent at any time. Withdrawing it does not affect the lawfulness of processing carried out before you did so.

Special category data. Where we process special categories of data, such as employee medical records or passport details, we do so where it is necessary for employment law and to support individuals with a disability or medical condition, or with your consent.

We may share your personal data with:

• Third-party providers for employment purposes, such as payroll and pension providers;
• Third-party service providers such as our accountants and our hosting and infrastructure providers, including Microsoft Azure;
• The providers of the analytics and marketing tools described in the cookies section below;
• Business partners;
• Our legal advisors in the event of a dispute or other legal matter;
• Law enforcement, government authorities or other third parties to meet our legal obligations;
• Any other party where we ask you and you consent.

Where we transfer personal data outside the UK, including to the EEA and to providers based in the United States, we do so under the safeguards required by the UK GDPR, including adequacy regulations and standard contractual clauses.

We retain your personal data while you remain an employee, client, prospective employee or prospective client, unless you ask us to delete it. Our Retention and Disposal Policy, available on request, sets out how long we hold data and how we dispose of it. We will delete or anonymise your information at your request unless there is an unresolved issue such as a claim or dispute, we are legally required to keep it, or there are overriding legitimate business interests such as fraud prevention and protecting customers' safety and security.

The GDPR gives you specific rights over your personal data. You have the right to be informed about the information we hold and what we use it for, to ask for a copy of it, to ask us to correct inaccuracies, to ask us to stop sending you marketing, and in some circumstances to ask us to stop processing your details. If we do something irregular or improper with your personal data you can seek compensation for distress or loss.

To access, correct or request a copy of your information, contact us at hello@mythdigital.co. You can opt out of marketing emails using the instructions in those messages. You can find out more, and complain if you are unhappy with how we deal with you, at the ICO: ico.org.uk/your-data-matters.