1. We are committed to respecting the privacy of all our clients.
  2. What information do we process: – as a client of ours we will ask you to provide certain information about yourself which may include name, title, postal address, telephone number and/or email address. We will also need information about your project as well as contact information for you and other parties to your project. The information that we need will be explained to you by our staff and/or be set out in our letter of engagement.
  3. We may also receive information about you from third parties related to your project. You may also provide us with additional information that you consider relevant.
  4. By signing our terms of business you consent to the processing of your personal data, to enable us to perform our contract to provide you with services in accordance with your instructions.
  5. If you are a client, processing of personal data is necessary for the performance of our contract to provide services and/or in order to take steps at your request prior to entering into such a contract. The relationship is a contractual one, and to perform our contract, it is unavoidable that this requires us to process personal data.
  6. We are permitted by law to process personal data where this is necessary to comply with our duties.
  7. How we will use your personal data – we will use your information for the specific purpose(s) for which it has been provided to or collected by us e.g.:
    1. to provide information that you may request regarding the services that we offer;
    2. to comply with our statutory requirements;
    3. to deal with your feedback, query or complaint; or
    4. to contact you for your views on our services, and also to administer, support, improve and develop our business generally and enforce our legal rights.
    5. As a controller of personal data we are under an obligation to comply with the Data Protection Act 1998 and the General Data Protection Regulation (“GDPR”) 2018 and any other regulations made under that Act. By giving us your personal information, you consent to us processing and storing your information so that we may provide you with services and generally administer and take care of our relationship with you. We may disclose your information to our third-party service providers or agents for these purposes.
    6. In services to our clients, we may need to share personal data with our staff, clients, other professionals who we instruct, third parties who are vital to a transaction, other parties with an interest in a project (and their representatives) and providers of services that are necessary to progress a project. In the case of personal data of clients, our clients may instruct us to share their personal data with third parties.
    7. Withdrawal of consent: – you have the right to withdraw your consent to our processing of your personal data at any time, without affecting the lawfulness of any processing carried out prior to the withdrawal of your consent. However, where we also rely on other bases for processing your personal data, you may not be able to prevent processing of your data on those bases.
    8. Storage of personal data: – your data will be stored on our IT equipment and in files on secure premises, or where your information is shared with a third party, at their premises or on their IT equipment.
    9. We will keep your personal data for minimum periods.
    10. All our files and other documents containing personal data are destroyed securely.
    11. Rights of access to data – You have a right of access under data protection legislation to the personal data we hold about you. Subject to certain exceptions, you may have the right, free of charge, to:
      1. access your personal data (known as a subject access request)
      2. seek rectification of any mistakes
      3. request for your personal data to be erased by us or restrict the way we process your personal data (subject to certain conditions)
      4. transfer your personal data to another provider
      5. object to us using your personal data for direct marketing. You will always have the option of unsubscribing from our emails
      6. not be subject to “automated processing” (often referred to as “profiling”).

      If you wish to exercise any of the above rights, please contact Dudley Haigh.

  8. In addition we may contact you from time to time to let you know about our services which may include sending you newsletters and news on training events or changes which may affect you. Please remember that you can elect not to receive such marketing material at any time by contacting the person responsible for your work.
  9. Where we use third party IT services (e.g. cloud-based software) we shall ensure that their data centres are either within the UK or that there are lawful safeguards in place to protect your personal data to the same standard as if it were held within the UK.
  10. Dudley Haigh is the firms compliance officer who will be responsible for the implementation of our data protection policies and procedures. For the purpose of Data Protection legislation, the data controller is Indigo Ventures Ltd.
  11. If you have a question about our use of your personal data, please contact Dudley Haigh in the first instance. You may also contact the Information Commissioner’s Office its website is its telephone number is 0303 123 1113.