Our Privacy Statement
Why we collect your personal information
We Protect your personal information
Higher Heights maintains reasonable safeguards to protect the confidentiality, security and integrity of your personal information, as your personal information will generally be stored in Higher Heights database. In addition to technical security, we also implement organizational and physical security measures that are designed to protect your information from unauthorized or fraudulent access, alteration, disclosure, misuse, and other unlawful activities. Although we could not guarantee absolute protection we will employ all legal and permissible means to protect your Data.
Retention
We keep your information only for as long as necessary for us to: (a) provide the products and services that you avail from us, (b) for our legitimate business purposes, (c) to comply with pertinent laws, and (d) for special cases that will require the exercise or defense of legal claims.
What are your Rights as Data Subject
You should be provided with the following information prior to your personal information being added to a processing system or at the next practical opportunity: (i) a description of the personal information to be entered into the system; (ii) the purposes of processing; (iii) the scope and method of the personal information processing; (iv) the recipients; (v) automatic means to access the personal information; (vi) the identity and contact details of the personal information controller or its representative; (vii) the period for which the information will be stored; (viii) the existence of their rights; and (ix) the basis of processing.
Rights to access information
As data subject, you entitled to reasonable access to: (i) the contents of the personal information that was processed; (ii) the sources of the personal information; (iii) the names and addresses of recipients; (iv) the manner by which the personal information was processed; (v) the reasons for the disclosure of the personal information to recipients; (vi) information on automated decision processes; (vii) the date when his or her personal information concerning the data subject was last accessed and modified; and (viii) the designation, name or identity and address of the personal information controller.
Rights to data portability
Where your personal information is processed by electronic means and in a structured and commonly used format, you have the right to obtain the personal information in that format.
Right to be forgotten
Under the Data Privacy Act and the IRR, data subjects have the right to erasure and blocking. You, therefore, have the right to suspend, withdraw, order the blocking, removal or destruction of your personal information from our Personal Information Controller’s filing system.
Objection to direct marketing and profiling
The Data Privacy Act defines direct marketing as communication by whatever means of any advertising or marketing material which is directed to particular individuals. The IRR explicitly states that the data subject has the right to object to the processing of his or her personal data, including processing for direct marketing, automated processing or profiling. The data subject shall be notified and given an opportunity to withhold consent to the processing in case of changes or any amendment to the information supplied or declared data.
Other rights
The data subject is also entitled to object to unauthorised use of their personal information and to have inaccurate or incorrect personal information corrected in some cases.
The rights of the data subject are transmissible to their heirs and assigns at any time after the death of the data subject or when the data subject is incapacitated or incapable of exercising his rights.