2.2 Suppliers and subcontractors
2.2.1 Collection of personal data
Our policy is to only collect personal data that is necessary for us to manage the relationship and contract with the supplier (including subcontractors and individuals associated with our suppliers and subcontractors), to receive services and, where relevant, to provide professional services to our clients. We only use personal information for the purposes for which we collect it.
We may process the following data:
- Contact details
- Business activities
- Bank details
- Qualifications, CV’s and experience
2.2.2 Use of personal data
We use personal data for the following purposes:
Managing our business operations
We process personal data in order to manage our business and services, and maintain and manage our IT systems.
Receiving services from you
We keep details of your organisation as well as contacts, notes of conversations, emails and meeting minutes. We believe this falls within our legitimate interest in receiving services from you.
Providing professional services to clients
We process your personal data where it relates to us delivering professional services to our clients.
Providing information about us
Unless we are asked not to, we may use client contact details to provide information to you that we think will be relevant and of interest.
Complying with law and regulations
In line with our legal, regulatory and professional obligations, we may need to keep certain records to demonstrate that our services are provided in compliance with our obligations.
2.2.3 Data retention
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected. In the absence the specific legal or contractual requirements, our baseline retention period for personal data in relation to our suppliers is five years.
We may hold some personal data for longer periods where extended retention periods are required by law or regulation.