We respect your privacy and understand that privacy is important to you and that you care about how information about you is used, so this privacy notice sets out details about what data we collect and how we use it. It also explains how we’ll store and handle that data, and how we keep it safe.
It is likely that we’ll need to update this Privacy Notice in the future.
The most up to date version will always be available on our website at www.bbdperfectstorm.com/privacy
We are BBD Perfect Storm (London) Limited, a UK Limited Company number 8434065. Our Registered Office is at Parkway House, 26 Avenue Road, Bournemouth BH2 5SL.
When you engage with us as a third party we may collect information including, but not limited to your name, gender, occupation, employer name and address, email and telephone number.
If you are engaged directly with us as an employee we may collect additional information including, but limited to, your home address, personal email and personal telephone number, National Insurance number, previous employment details and next-of-kin details.
Where we collect personal data via our website, we will be upfront about it and it will be obvious to you that you’re providing personal data and how we will be using it.
Should you contact our offices by phone any data collected will stored and processed in line with this Privacy Notice.
Should you contact us by email your email will be stored on Microsoft’s servers and will only be accessible to our employees and our IT support partners. All emails are subject to virus scanning and junk mail filtering.
We retain customer data sufficient and necessary for the ongoing efficient provision of our services to our clients. The provision of our services may include communication with our customers, invoicing, and for contractual and legal purposes. Customer data is stored both locally and on cloud-based systems and is generally stored for six years following the cessation of trade with a customer.
Employee data sufficient for the lawful conduct of our business is collected directly from employees, and occasionally provided by third parties (for example from tax authorities or where we have received a reference as part of a recruitment process). Data is stored in both local and third-party cloud-based systems.
As part of our recruitment processes we will collect personal data relevant only to employment opportunities. Data is collected either directly from applicants or from third-party recruitment businesses. Data is stored both locally and on cloud-based systems and is retained for no longer than for six months from receipt.
Whenever we collect or process your data, we will only store the data for as long as is necessary for the purpose for which it was collected or as long as it is lawful for us to do so (for example this may be for as long as you are a customer or because of a legal obligation to retain the information, whichever is the longest).
We use a number of third-party cloud-based services for the purposes of effectively running our business and providing our services to you. We also use a number of third-party organisations, e.g. accountants, HR support, etc.
In all cases where we are using a third-party service or company, we will only provide the minimal amount of information for the purposes of delivering the service to us and to meet our requirements.
We always carry out due diligence against all our third-party suppliers for the purposes of ensuring their compliance with data protection, maintaining adequate security of your data and ensuring they apply adequate data protection principles to the processing of the data we supply.
Sometimes we will need to share your personal data with third parties outside the European Economic Area (EEA).
The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. We may transfer personal data that we collect from you to third-party data processors in countries that are outside the EEA.
If we do this, we have procedures in place to ensure your data receives the same protection as if it were being processed inside the EEA.
Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.
Under current data protection legislation in the UK, you have rights as an individual which you can exercise in relation to the data we store and process about you. You can find more information about your rights on the Information Commissioner’s website: https://ico.org.uk/for-the-public/
We do not share any personal data with any third parties unless it is lawful for us to do so, if required by law to do so or if you provide us with permission to do so.
For more information about your data rights and privacy or data protection in general visit the Information Commissioner’s Office website: https://ico.org.uk
If you have any questions about how we collect and use your information not covered in this privacy notice, or if you wish to speak to someone about our approach to data protection and privacy, please contact:
call: 020 3198 4329
|V1.0||24/04/2018||Rob Headlam||First version|