Clark & Company Privacy Notice

Summary

If you want to get in touch, or have a question about how we use your data, you can email [email protected] or contact 07720641550.
When you use Clark & Company Information Governance Services, we won’t collect any more personal data than we need to as part of our engagement with you.
When we work on an engagement with you, we are Processors, we won’t do anything with the personal data that you send to us, other then what you ask us to do in writing.
You have rights about how your personal data is used.
Your data is kept securely and won’t be shared with anyone other than when the law requires us to share it.
Our ICO registration number is ZA775179.

What personal data is collected?

The personal data we collect depends on the advice or service we are being asked to provide. Commonly collected personal data includes:

Names and contact information.
Details of a question, or information relating to an engagement.
Personal data held in any documents that we receive for review or edit.
Personal data submitted as evidence in any audit or analysis work (although we will ensure this is minimised as much as practical)

Purposes for Processing and our Lawful Basis

The purpose for which we use personal data and the lawful basis we rely on to process it will depend on why you contacted Clark & Company.

Enquiries: If you have made an enquiry using a contact us form or via email, your data will only be used to answer your query. Our lawful basis for this is Legitimate Interest.

Invoicing: A contact name, email address and phone number will be used as part of the invoicing process. Our lawful basis for this is the performance of a contract.

Providing Services: Some of our work will require us to collect data from you about other people such as staff, visitors or other people associated with your business. What we collect and how we use it will depend on the engagement but it will never be used for any purpose outside of the engagement. Our lawful basis for provision of service is the performance of a contract.

Your Information Rights

When Clark & Company process your personal data, you have rights about how it is managed. Your rights are:

A right of access to your personal data held by or on behalf of Clark & Company.
A right to rectify any personal data held by Clark & Company that you believe is incorrect.
A right to erase any personal data that Clark & Company no longer has a legitimate purpose to process.
A right to data portability.
Alright to object to Clark & Company processing any of your data that it does not have a legal or contractual obligation to process.
A right to prevent any wholly automated decisions involving your data – we do not do this in any case.
You also have the right to complain to the Information Commissioner’s Office if you believe that we have mishandled your personal data in any way.

To exercise any of these rights, please contact [email protected].

Records Retention

Unless there is a law that says we have to keep data for a specific period of time, we will keep all data (personal or company data) provided by our clients for the purpose of an engagement for a period of 1 year after the conclusion of the engagement.

We will keep a copy of all work provided by Clark & Company to you as a Client for a minimum of 6 years, after which time we will review to determine if it is still relevant.