ICO Data Protection Fee letter

[Noob Business Girl]

Hi,

I received a letter from ico today asking me to pay a data protection fee.

I run an online ecommerce business. I store my customer's details on shopify only.

Do I need to pay this fee?

Thank you!

 

[fisicx]

Have you completed the assessment? The link is on the letter. You probably don’t have to pay but best to make sure. Once you have done the assessment make sure you tell them. If not they will keep writing to you.

 

[Paul - Siteflight Video]

I received the same and emailed them, including all of the reference numbers that are generated, saying that I only used the data for invoicing purposes. The ICO kindly replied that the application was now closed. Result!

 

[WaveJumper]

As above use the self assessment link they have on the website only takes a few minutes

 

[Noob Business Girl]

I received the same and emailed them, including all of the reference numbers that are generated, saying that I only used the data for invoicing purposes. The ICO kindly replied that the application was now closed. Result!

Thanks for your reply. Do you send marketing emails to customers who have subscribed to your mailing list?

 

[fisicx]

Thanks for your reply. Do you send marketing emails to customers who have subscribed to your mailing list?

I don’t. But if you do then you probably need to pay the annual fee. Have you done the assessment?

 

[WaveJumper]

"if you have information about people for any business or other non-household purpose. The law applies to any ‘processing of personal data’, and will catch most businesses and organisations, whatever their size".

As above do the assessment

 

[Noob Business Girl]

Yes, I've done the assessment and since I send out marketing, it says I need to.

Yet on this website https://www.businessreviewed.com/knowledge-centre/do-i-need-to-register-with-the-ico

It says:

There are some exemptions to the rules. You are not required to register with the ICO and pay a fee if you are only processing personal data for staff administration, accounts and records, not-for-profit reasons, personal or family affairs, and advertising, marketing and public relations purposes.

 

[fisicx]

Do you want to take the chance of a fine from the ICO? If the assessment says you need to pay then I'd do just that rather than rely on advice from a third party website.

 

[WaveJumper]

https://ico.org.uk/for-organisations/sme-web-hub/frequently-asked-questions/marketing-and-consent/

 

[Rob-Ed]

Hi guys. I went through the self assessment when I received the first letter and came to the conclusion no fee was due, I didn't realise we have to tell them there was no fee due and they've sent another letter!
I've gone through the assessment again but the very last line is an ambiguous statement:

• "advertising, marketing and public relations (in connection with your own business activity).

You only hold the personal information of the people you need to for your own advertising, marketing and public relations – for example information about past, existing or present customers or suppliers

The information is restricted to what is necessary for your advertising, marketing and public relations – for example, names, addresses and other identifiers

You only advertise and market your own goods and services"

My Limited company is a reseller. The goods I sell are not produced by us, technically I think they are someone else's goods, i.e. the manufacturer who produced them. Common sense says that we've purchased the goods to sell and therefore they are 'our own' goods but I expect a good legal could argue otherwise.
Any thoughts please??

 

[Rana2006]

We are running a travel agency.Our business website has an online booking option which is disabled and client should call us to make booking and purchase. We keep our client personal details(required for traveling) and travel document etc for our record and share same with other suppliers for ticketing and hotel booking.This data is not publicaly available and we don't share. Do we need to pay ICO fee too?
Any thoughts please.

 

[WaveJumper]

My advice to anyone is to do the self-assessment it only takes a few minutes:

https://ico.org.uk/for-organisations/data-protection-fee/self-assessment/