The Second Desk respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry or use our virtual assistant and administrative support services.

1. Who We Are

The Second Desk provides virtual assistant, administrative and practical support services to businesses and private individuals.

For the purposes of applicable UK data protection law, The Second Desk may act as a data controller when we collect and use information about our own clients, prospective clients and website visitors.

In some circumstances, we may also act as a data processor when handling personal information on behalf of a client as part of the services we provide.

Contact details:
The Second Desk
Email: info@the2nddesk.com

2. Information We May Collect

Depending on how you interact with us and the services you ask us to provide, we may collect and process information including:

• Your name
• Email address
• Telephone number
• Business or organisation details
• Billing and invoicing information
• Correspondence and communications
• Appointment and diary information
• Information contained within documents you provide to us
• Information required to complete administrative tasks on your behalf
• Details relating to bookings, events, travel or household administration
• Information you provide when making an enquiry
• Technical information relating to your use of our website, where applicable

When providing virtual assistant services, we may also have access to personal information relating to your customers, employees, suppliers, guests, family members or other individuals.

We will only access and use information that is reasonably necessary to provide the services you have requested.

3. How We Collect Personal Information

• Directly from you by email, telephone, forms or other communications.
• When you engage us to provide services.
• When you provide access to documents, accounts, systems or software.
• Through our website.
• From third parties where you have authorised them to provide information to us.
• From publicly available sources where reasonably necessary for an agreed task.

4. How We Use Your Information

• Respond to enquiries.
• Provide quotations and discuss potential work.
• Deliver our virtual assistant and administrative services.
• Manage appointments, bookings and correspondence.
• Carry out bookkeeping and financial administration.
• Coordinate projects, events and suppliers.
• Provide household, lifestyle and holiday-let administration.
• Communicate with you about ongoing work.
• Issue invoices and maintain business records.
• Manage our relationship with you.
• Improve our services and website.
• Meet our legal, regulatory, tax and accounting obligations.
• Establish, exercise or defend legal claims where necessary.

We will not use personal information for purposes that are incompatible with the reason it was originally collected unless permitted or required by law.

5. Our Lawful Basis for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely upon:

Contract — where processing is necessary to provide services you have requested or to take steps before entering into a contract.

Legitimate interests — where processing is reasonably necessary for the operation and administration of our business and those interests are not overridden by your rights.

Legal obligation — where we are required to process or retain information to comply with the law.

Consent — where you have specifically agreed to particular processing. Where we rely on consent, you may withdraw it at any time.

6. Information We Process on Behalf of Clients

As a virtual assistant business, we may sometimes process personal information on behalf of our clients.

For example, a client may authorise us to access or manage:

• Email inboxes
• Diaries and calendars
• Customer or supplier information
• Contact lists
• Booking information
• Invoices and financial records
• Holiday-let or guest information
• Project and event information
• Household or personal administration

In these circumstances, the client will generally determine why and how the information is processed, and The Second Desk will process it only as necessary to provide the agreed services and in accordance with the client's lawful instructions.

Where required, appropriate data-processing terms or agreements will be put in place.

7. Confidentiality

We understand that our work can involve access to sensitive and confidential business and personal information.

We take confidentiality seriously and will only access information required to carry out the agreed work.

We will not intentionally disclose confidential or personal information to third parties except where:

• You have authorised us to do so.
• It is necessary to provide an agreed service.
• A suitable service provider is being used to support our business.
• We are required to do so by law.

8. Sharing Personal Information

We do not sell your personal information.

We may share information with trusted third parties where reasonably necessary, including:

• Accountants or professional advisers.
• IT, website, email or cloud-storage providers.
• Payment or accounting service providers.
• Suppliers or service providers involved in carrying out work you have requested.
• Government, regulatory or law-enforcement authorities where legally required.

Where appropriate, we take reasonable steps to ensure third parties handle personal information securely and in accordance with applicable data protection requirements.

9. International Transfers

Some technology, software or cloud service providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that suitable safeguards are in place where required by UK data protection law.

10. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Measures may include appropriate password protection, secure devices, access controls, reputable software and cloud services, and limiting access to information to those who need it.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

11. How Long We Keep Your Information

We will only keep personal information for as long as reasonably necessary for the purpose for which it was collected, including providing services and meeting legal, accounting or reporting requirements.

Retention periods may vary depending on the type of information and the reason it is held.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• Ask for access to personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your personal information in certain circumstances.
• Ask us to restrict the way we use your information.
• Object to certain processing.
• Ask for certain information to be transferred to you or another organisation.
• Withdraw consent where we rely upon consent to process your information.

These rights are subject to certain legal conditions and exemptions.

To exercise any of these rights, please contact us at info@the2nddesk.com.

13. Marketing

We will only send electronic marketing communications where we have an appropriate lawful basis to do so.

You can ask us to stop sending marketing communications at any time.

We will not sell your personal information to third parties for marketing purposes.

14. Cookies and Our Website

Our website may use cookies and similar technologies.

Further information about the cookies we use and your choices is available in our Cookie Policy.

15. Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices of third-party websites and recommend reviewing their privacy policies before providing personal information.

16. Children's Information

Our services are not generally directed at children.

Where information relating to a child is provided to us as part of an authorised administrative task, we will only process that information where reasonably necessary to provide the agreed service and in accordance with applicable data protection requirements.

17. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, working practices or legal requirements.

The latest version will be published on our website with the updated date shown at the top of this policy.

19. Contact Us

If you have any questions about this Privacy Policy or how we handle personal information, please contact:

The Second Desk
Email: info@the2nddesk.com