Sacker & Partners LLP (“We”) collect and process personal data relating to our suppliers, providers and any consultants we may use from time to time. We are a “Data Controller” and are required to comply with data protection law when handling your personal data.
What personal data do we hold about you?
If you are one of our suppliers, the personal data we hold about you will depend on the nature of your engagement with us. However, in most cases, it is likely to be fairly limited. For example, we may simply hold your name and business contact details (including your postal and email addresses and telephone number). We may also hold financial or tax information for payment purposes.
What do we use your personal data for?
We use your personal data where this is necessary so that we can use the services you provide, pay you for those services and manage our contractual or business relationship with you.
What is our legal basis for processing your personal data?
Most of the processing will be necessary for the performance of a contract between us or to take steps to enter into such a contract. However, we may also process your personal data if we have a legitimate interest in doing so for the purposes of the wider management of our business.
We may also need to process your personal data to comply with applicable legal and regulatory obligations (for example, if we need to undertake any checks before engaging your services) or to pursue or defend legal claims.
How do we collect this personal data?
Most of the personal data we hold about you will have been collected directly from you or, where applicable, from the organisation you work for or any agent or broker involved in your engagement. However, we may from time to time also obtain personal data from third parties where appropriate (such as HMRC or any person who provides a reference for you).
Who has access to your personal data?
Your personal data will be shared with personnel where this is necessary for them to perform their roles. It may also be shared with third parties that we deal with in the operation of our business from time to time. For example, organisations who provide our email, document management and time recording systems and confidential waste disposal and archiving services.
Will your personal data be shared outside the European Economic Area (EEA)?
In most circumstances your personal data will not be transferred to countries outside the European Economic Area. However, this may occur occasionally where our personnel are accessing the data outside of the EEA on company-issued or company-approved devices that have appropriate and adequate security, where this is in respect of temporary travel outside of the UK.
How do we protect your personal data?
We take the security of your personal data very seriously and have measures in place to protect it and to limit access to it. If we share your personal data externally, we will require the recipient to comply with applicable data protection requirements.
How long will we keep your personal data?
We will keep your personal data for the duration of your contract or engagement with us and for any longer period as we consider appropriate for our record keeping or management purposes. In some circumstances, you may ask us to keep your details on file for a longer period in case further opportunities arise in the future.
What rights do you have in relation to your personal data?
You can ask for a copy of the personal data we hold about you and require us to change it if it is incorrect, incomplete or out of date. In some circumstances, you can also object to processing of your personal data or ask us to restrict processing or to delete your personal data. If you would like to exercise any of these rights, please email email@example.com.
You can get more information about your rights at https://ico.org.uk.
What if you do not provide your personal data?
You may have certain obligations to provide us with personal data under the terms of your contract or engagement with us. If you do not provide your personal data, you could be in breach of those obligations and/or it could affect our ability to continue to use your services or to pay you for services you have provided.
Who can you contact if you have any questions, concerns or complaints about how we handle your personal data?
If you have any questions, concerns or complaints about how we handle your personal data please email firstname.lastname@example.org.
You can also make a complaint to the Information Commissioner using their helpline on 0303 123 1113 or through their website https://ico.org.uk.