Privacy Statement
At Blades Insolvency Services (“the practice”) we understand your right to privacy and are committed to protecting your personal data. This statement applies to all occasions when the practice receives your personal data as a data controller.
A separate privacy statement exists in respect of formal insolvency appointments undertaken by persons employed by this practice when acting as insolvency practitioners in formal insolvency appointments.
This privacy statement deals with the General Data Protection Regulation (GDPR) and Data Protection Act (2018) which are designed to give persons control over their personal data and which deal with the collection, protection and management of such data.
What is personal data?
Personal data relates to information about a person that makes you identifiable. This may include:
Names, contact information, e.g. addresses, email addresses and telephone numbers
National Insurance numbers
Employment history
Payroll and accounting data
Sensitive personal data
This includes the above but may also include information pertaining to matters such as:
Medical conditions
Religious beliefs and political opinions
Racial or ethnic origin
Convictions
What are data controllers and data processors?
For GDPR purposes a data controller means the person or organisation who decides the purposes for which and the way in which any personal data is processed.
A data processor is a person or organisation which processes the personal data for the data controller.
For the purposes of GDPR the data controller is Blades Insolvency Services.
The data protection officer at Blades Insolvency Services is Julie Willetts who may be contacted at Charlotte House, 19B Market Place, Bingham, Nottingham, NG13 8AP, telephone 01949 831260, email j.willetts@bladesinsolvency.co.uk.
What information do we collect about you and how?
Personal data received in the course of providing professional services is used in order to enter into a contract with you, to perform duties under a contract with you, or for the purposes of legitimate interests pursued by us as a data controller.
When entering into a contract with us there will be correspondence about the contract and personal data about you relating to that contract such as; name, address, payment details, information in order for us to verify your identity and to allow us to carry out money laundering checks.
Other information may include additional personal data such as enquiries, comments, opinions or complaints lodged by you or against you.
We may share your data with third party service providers or agents such as:
Solicitors
Agents
Pension consultants
H M Revenue & Customs
Government departments
Any other parties that we are required to by law
We disclose to the above only that information necessary for completing the tasks required and delivering the required service. The recipients of any such information are confidentially bound to safeguard data provided to them.
Website
We record your internet protocol (IP) address so that we may receive and send information from and to you via the internet.
When you visit our website, use our services or make an enquiry you may be asked to supply some personal data such as your name, address, telephone number and email address.
We only obtain data that is provided voluntarily by visitors to our website and which is necessary in the relevant circumstances. We will use your personal data for the purpose for which it was obtained and will retain the data only for as long as is necessary to deal with your request.
We will not share your personal data with third parties without your prior consent.
Customer relationship database
We use a database to store personal data for the purpose of developing relationships with current and prospective clients and work providers. We may use your personal data, where permitted in our legitimate interest or with your prior consent, to provide you with information about our services by email, letter or telephone.
Any emails that we send of a marketing nature will always provide an unsubscribe option.
Business suppliers and advisors
If we have a business relationship with you or your organisation we may receive personal data about you from your organisation.
The personal data we collect about you may include your contact information, details of your position within your organisation and our relationship with you. This information may be collected from you or your organisation and is used for our legitimate interest in managing our relationship with your organisation.
Legal claims
Where we consider there is a risk that we may need to bring or defend legal proceedings we may retain your personal data for our legitimate interest in ensuring that we can properly bring or defend such actions. We may also need to share this information with our solicitors and insurers. The length of time that we retain this information will be determined primarily by our assessment of the risk that we will need to bring or defend a claim.
What are your data protection rights?
You have the right to request a copy of the information we hold about you. This is called a Subject Access Request (SAR). If you would like a copy of some or all of your personal information please Julie Willetts at Blades Insolvency Services, Charlotte House, 19B Market Place, Bingham, Nottingham, NG13 8AP, telephone 01949 831260, email j.willetts@bladesinsolvency.co.uk.
We wish to ensure that your information is accurate and up to date. Please ask us to correct or remove information that is not.
Where the IP acts as the data controller you have the following rights with respect to your personal data:
The right to be informed about the collection and use of your personal data.
The right to access your personal data and supplementary information.
The right to request that any personal data is corrected if it is found to be inaccurate or out of date.
The right to request that your personal data is erased when it is no longer necessary for the IP to retain such information.
The right to withdraw your consent at any time (where consent has previously been obtained) to the processing of your data.
The right to data portability which allows you to obtain and reuse your personal data for your own purposes across different services.
The right, where there is a dispute relating to the accuracy or the processing of your personal data, to request that a restriction is placed on further processing.
The right, where applicable, to object to the processing of personal data.
The right to submit a complaint to the Information Commissioner’s Office (see below).
How long will we hold your data for?
We will hold your personal data for as long as necessary to fulfil the purpose for which it is collected.
Where your information relates to a contract it will be retained for a period of up to seven years from completion of the contact in order for us to deal with any subsequent enquiries and in order to comply with tax requirements.
We take into account the following matters when considering how long it is appropriate to retain personal data:
the requirements of our business and the nature of services provided
any statutory or legal obligations the purposes for which we originally collected the personal data
the grounds on which we based our processing
the type, amount and category of personal data that we have collected
Changes to privacy policy
This privacy policy is regularly reviewed and we reserve the right to change the contents of the statement at any time without notice to you. This statement was last revised on 3 December 2018.
Complaints
If you believe that your personal data has been processed in a way that does not meet the GDPR requirements then you have a specific right to lodge a complaint with the relevant supervisory body.
The supervisory authority for the UK is the Information Commissioner’s Office (ICO), which may be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 113, email https://ico.org.uk/global/contact-us/email/.