We aim to collect personal data only to the extent necessary for us to provide our services to our clients and audited entities and for other agreed purposes. Where personal data is required for us to provide services to our clients and audited entities, we request that our clients and audited entities provide all necessary information to relevant individuals (known as “data subjects”) about our use of personal data or we procure this from third parties such as transaction counterparties acting on our client’s or audited entities instructions. Our clients may therefore refer data subjects to this Privacy Notice.
We provide a range of services to clients and audit services to our audited entities and in doing so may process personal data that relates to third parties with a business connection to our clients and audited entities, such as other advisers, suppliers, transaction counterparties etc. The personal data we process may include contact details, details of business activities, information relating to management and employees, payroll details, and financial information such as details of income, taxation, financial interests and investments.
We may use such personal data concerning such individuals for the following purposes:
Where we process personal data for the above purposes, we rely on the following lawful bases:
1. Where it is necessary for performance of contractual obligations;
2. Where it is necessary for our performance of legal obligations;
3. Where it is in our, or a third party’s, legitimate interests, provided that:
i. the processing is necessary to pursue the legitimate interests;
ii. the data subject’s interests do not override the legitimate interests; and
iii. the data subjects have the right to:
a. request deletion of their personal data, provided they object to our processing and their interests override our own or a third party’s;
b. restrict processing of their personal data, provided they object to the necessity of the processing. In such circumstances, processing may be restricted for such time as to allow us to investigate their objections; and
c. object to the processing of their personal data in circumstances where such processing is necessary for a legitimate interest, or where processing is used for marketing purposes.