This Privacy Policy is effective as of 1st January 2023
Prescott Data (“us”, “we”, or “our”) operates the www.prescottdata.io website (the “website”). We understand that you care about how we use the information you gave to us and appreciate your trust. At Prescott Data, we recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws in all countries in which Prescott Data operates. This Privacy Policy describes our general privacy practices that apply to personal information we collect, use, share and protect. This Privacy Policy does not apply to the extent Prescott Data processes personal information on behalf of clients for their benefit and under their control (as a “processor”), such as Cloud Services or applications (“apps”). It may apply to the collection of information related to authorized users of such services to the extent Prescott Data processes this information for its interests (as “controller”). By using our website, you accept this Privacy Policy and give us your consent to the processing of your personal data described herein.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. When visiting the website and (or) using other services provided by Prescott Data on which a link to this Privacy Policy is displayed, and all other communications with you through written or oral means, such as email or phone, you accept and give your consent to the practices described in this Privacy Policy notice.
Who are we? For the purposes of the data protection legislation, the data controller is Prescott Data, a company registered in Kenya, having its registered office in Nairobi and its affiliated companies (hereunder referred to as “Prescott Data”).
What data do we collect? We may have access to/collect the data that is essential for giving visitors the maximum benefit from our website and that you voluntarily give us via email or other direct contact from you.
We collect the following data during your website session:
In the course of our marketing and recruitment activities, for communicating our services and business development, we may collect the following data:
Prescott Data DOES NOT intentionally collect any data that is, by its nature, particularly sensitive. Under particularly sensitive, we mean genetic data, biometric data, data revealing racial or ethnic origin, information about political opinions, sex life, sexual orientation, religion or other beliefs, data concerning health, trade union membership, or other sensitive information.
How do we process this data? We will only process your data in the following manner:
Lawfully, fairly and transparently;
Only for the purpose stated at the time of collection;
Only personal data that is adequate, relevant and limited to what is necessary for the stated purpose will be collected;
It is your responsibility to ensure that any personal data you provide is accurate at the time of collection and if there are changes to the personal data, and we will take every reasonable action to ensure the data remains accurate;
Your personal data will not be kept longer than necessary for the stated purpose except for statistical reasons, in which case appropriate technical and organizational measures will be implemented to safeguard your data;
We will process your data in a manner that ensures security using appropriate technical or organizational measures. We will use your data on the following legal basis:
Legitimate interest;
Consent;
Another legal basis, e.g. to enter a contract with you. Personal data processed by Prescott Data is not subject to profiling and automated decision-making.
How long will we retain your data? We will retain your data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. In order to ensure compliance with this principle, we define the retention periods applicable to each processing operation. The following elements are considered when determining the retention period:
Who will we share your data with? We may disclose your data to our affiliates or subsidiaries, which may help us to process it, as well as we may disclose your data to third-party vendors, service providers, contractors, employees or agents who perform functions on our behalf, such as website management, hosting, technical support and marketing analytics. We will make sure that they treat it as protective as we do. We also may disclose your data to legal authorities in order to comply with the law, a judicial proceeding, a court order, or another legal process.
What are your rights? The various rights are not absolute and each is subject to certain exceptions or qualifications. We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Policy is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.
In certain circumstances, you have the following data protection rights:
Where is your data processed? Your personal data may be processed in various locations in and outside of the African Union with each having different data protection standards. Under data protection laws, we can transfer your personal data to third countries on the basis of an adequacy regulation or, where such is not available, under legally-approved standard data protection clauses recognized or issued under the applicable data protection laws. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time we will not transfer your personal data to third countries unless we can do so on the basis of an alternative mechanism permitted by data protection authorities.
By using our website, you consent to the transfer of information that we collect about you, including personal information, to any country in which we or our service providers are located.
Processing personal data of job applicants As part of any recruitment process, Prescott Data collects and processes personal data provided directly by job applicants, their referees, and recruitment companies working on our behalf. We are committed to being transparent about how the data is collected and used in compliance with our data protection obligations.
Types of personal data we collect
Prescott Data collects a range of information about you that includes:
Purpose of processing
Given the nature of our HR and recruiting activities, we need to process data to collaborate with you on possible job opportunities. Prescott Data has a legitimate interest in processing personal data during the recruitment process and for record-keeping purposes. Processing data of job applicants allows us to manage the recruitment process, assess and confirm suitability for employment. Provided your application is unsuccessful, Prescott Data will inform you and delete your personal data from all Prescott Data storages. However, if you give separate consent, Prescott Data may keep your personal data on file for future prospective employment opportunities.
You may withdraw your consent at any time.
Recipients of personal data
For the purposes of recruitment, we may share your personal data, including the data stored in our Applicant Tracking System, with affiliates, existing and prospective clients of Prescott Data. In this case, you will be informed separately. Also, we may disclose your personal data to other third parties mentioned in this Privacy Policy.
Retention period
We will only retain your personal information for as long as necessary to fulfill the purposes it was collected for. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements. After an unsuccessful application, we will aim to keep some or all of your personal data to the extent we need to for a period of 6 months after the last activity to consider you as a potential candidate for other vacancies unless we are required to keep your data for a longer period by applicable law.
What about Cookies?
As most websites, our website uses cookies to help us provide you with the best possible browsing experience.
Cookies will typically be placed on your computer or internet-enabled device whenever you visit us online. Cookies automatically (i.e., not by registration) compile collective non-personal data (such as Internet browsers, operating systems, domain names, website visits, average visit time, pages per visit). This allows the website to remember your computer or device and serve a number of purposes.
Please refer to our Cookie Policy for more information.
Minors
No information may be submitted to Prescott Data via the website by persons who are minors under their applicable local legislation. In the event you are a minor or younger than legal age in your country, you will need consent from your parent(s) or other legal guardians before submitting any information to Prescott Data via the website, with the exception if such activities are allowed by the applicable law of your country. If Prescott Data finds out that a child’s personal data is provided to us, we’ll delete it from our databases. If you are a parent or guardian of a child and believe that we have collected such personal data, please contact us as indicated in the “Contacting Us” section below, and we’ll delete it as soon as possible.
Security
Prescott Data endeavors to use appropriate data collection, storage, and processing technical and organizational security measures to protect your personal data, which is transmitted, stored, or otherwise processed by us, from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access.
Changes to our Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our data governance practices. The revised Privacy Policy will be posted here. We encourage you to check back periodically for any changes or updates. By continuing to use our website after such revision takes effect, we consider that you have read and understand the changes.
External Links
The website may contain links to third-party sites. Since Prescott Data does not control nor is responsible for the privacy practices of those websites, we encourage you to review the privacy policies of these third-party sites. This Policy applies solely to personal data collected by our website or in the course of our business activities.
Notice For California Residents
This applies if you are a California resident. California Consumer Privacy Act (“CCPA”), which went into effect on January 1, 2020, provides specific privacy rights and provisions you need to know about processing of your personal data.
Under CCPA, you have the following rights regarding your personal information:
Right to know what personal information we collect about you and the purposes of that collection, as well as know how your personal information is used: you have the right to know what personal information about you we collect, the sources from which it is collected, and the purposes for which we collect it.
Right to know with whom we share your personal information: you have the right to know whether we share your personal data with any third parties. We may share your personal information with third parties who help us run our business.
Right to know whether any of your personal information is sold: we do not sell or rent out your personal information.
Right to “Opt-Out of Sale” of your personal data: we do not sell your personal data to third parties and therefore do not offer an “opt-out” mechanism.
Right to access, request, and receive personal information: you have the right to request which personal data was collected about you and receive a copy of such information. We will disclose and deliver the required information to you in the manner described in the CCPA after receiving a verifiable request from you.
Right to request deletion of your personal data: you have the right to request deletion of your data from our systems to the extent provided by the CCPA.
We will not discriminate against you for exercising any of your CCPA rights. Please contact us if you have any further questions regarding your rights under the CCPA (see the “Contacting Us” section for contact details). This should be a verifiable consumer request related to your personal information. The verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Contacting Us
In the event you have any questions, comments, and requests about the information set out in this Privacy Policy, please contact us via email at admin@prescotdata.io