Privacy Statement

Your Odyssey takes Data Protection very seriously and this privacy statement explains why we request your data, how we use it and explains your legal right to withdraw consent at any time.

Your Odyssey is a data controller and the assigned (DPO) Data Protection Officer is Katy Andrews email: katyandrews@yourodyssey.co.uk

The purpose of us processing the data is to maintain any agreed business partner contracts in order to provide any agreed services and the law requires us to tell you how we will use your data.

The legitimate interests of the controller is to store data in order to abide by any agreed contract that is in place and this will be kept confidential and only used for its intended purpose.

You have The right to withdraw consent at any time and to do so please put your request in writing to the DPO. If you hold a business contract with us withdrawing your consent may also mean the end of your contract as we legally have to have your consent to hold and use your data.

We are obliged to share on request the category of the personal data (only for data not obtained directly from the data subject)

Or if requested Any recipient or categories of recipients of the personal data.

We are obliged to notify you of any Detailed information of any transfers to third countries and put safeguards in place to ensure confidentiality of any data.

The retention period of the data or the criteria used to determine the retention period, including details for the data disposal after the retention period will be included in any agreed business contract. You can also contact the DPO for a copy of this information in writing.

You have The right to lodge a complaint with the ICO, and request investigation via our internal complaint procedures

We are obliged to share the source of the personal data, and whether it came from publicly available sources (only for data not obtained directly from the data subject)

We are obliged to share Any existence of automated decision making, including profiling and information about how those decisions are made, their significances and consequences to the data subject

We are also obliged to explain Whether the provision of personal data is part of a statutory of contractual requirement or obligation and possible consequences for any failure to provide the data (only for data obtained directly from the data subject).