Northcott Global Solutions is committed to protecting and respecting your privacy. This privacy notice is designed to provide information about our practices concerning the collection, use and disclosure of your personal information in the course of providing legal, advisory and/or consultancy services, carrying out marketing and recruitment activities. This privacy notice sets out how we use and protect your personal information.
Northcott Global Solutions (“we”), are the Data Controller for the purposes of data protection law in relation to any personal information we hold about you.
Northcott Global Solutions is a limited liability company registered in England and Wales with company number 7145685 and our registered office is at 22 Bevis Marks, London, EC3A 7JB, United Kingdom. We are registered with the Information Commissioner’s Office.
We are committed to maintaining high standards of confidentiality in relation to the information provided to us in the course of our business. We are certified under ISO 27001, ISO 9001 and accredited in relation to the UK Government’s Cyber Essentials security standards.
Please read this notice carefully and should you have any questions please contact us if you have any queries by emailing us at: firstname.lastname@example.org, by writing to:
Data Protection Officer
22 Bevis Marks
This privacy notice applies to everyone whose personal information we collect and process (excluding our existing or former workforce, to whom a separate HR Privacy Notice applies). This includes individuals in the categories below or who work for any of the following:
Personal data, or personal information, means any information about an individual from which that person can be identified.
In the course of our business, we will need to collect and process various types of personal information for various purposes. Given the nature of our business and the services we provide, it is impractical to list all the categories of personal information that may be collected and processed. We will however only process and collect personal information where we have a legal basis to do so.
We most commonly collect and process the following kinds of personal data about you:
We use different methods to collect personal information from and about you including:
Direct interactions: you may voluntarily provide us with your personal information, for instance when you:
Publicly available sources: we may collect personal information available publicly from the publicly accessible and online sources such as:
Third party sources: we may collect personal information from the following third party sources:
We will only use your personal information when the law allows us to do so, i.e. where we have a lawful basis for processing. Most commonly, we will use your personal information in the following circumstances:
and/or for the legitimate purposes of our clients or other third parties in receiving those services. We will only rely on this lawful basis where we consider that your interests and fundamental rights do not override such interests.
When processing your personal information we comply with the provisions of this privacy notice and, in respect of the provision of legal services we are also bound by professional obligations of confidentiality. and/or for the legitimate purposes of our clients or other third parties in receiving those services. We will only rely on this lawful basis where we consider that your interests and fundamental rights do not override such interests.
In most cases, when we only process special category data when encountered in the process of an engagement instruction from a client. Where Special Category Data is encountered, it is not stored or copied in any way.
We may process your information for the following purposes:
Emergency Response services
Where we receive personal data in connection with the provision of emergency response services, we process that data for the purposes of the provision of those services. This includes:
(a) Providing emergency response, assistance, location monitoring and alerting, and related services, such as:
When we hold and use personal information in the course of providing emergency response services to an individual client, that client is also entitled to access that personal information. They may in turn use that information in accordance with their own privacy notice or equivalent.
(b) Complying with our legal obligations or making disclosures to government, regulatory or other public bodies where in our reasonable opinion the disclosure is appropriate and permitted by law. This includes:
(c) Providing access to our files for audit, review or other quality assurance checks, by our clients, regulators, auditors, professional advisers and certification/accreditation bodies.
(d) Processing required in connection with the day to day operation of our business such as billing and payments, complaints handling and internal record keeping. For this we may use third party service providers such as IT service providers.
(e) Processing required in connection with any actual or proposed reorganisation, merger, sale, joint venture, assignment, transfer or other transaction relating to all or any portion of our business or assets.
We process personal information in connection with marketing or communications purposes, including so that we can:
We process personal information in connection with our recruitment practices for the following purposes:
For the purposes set out in the ‘How we use your personal information’ section above, we may share your personal information with the following categories of third parties, some of whom we appoint to provide services, including:
Where we share your personal information with third parties, as described above, we will only do so where in our reasonable opinion that information will be adequately protected.
Any other service providers with whom we share information are approved by us and subject to contractual obligations designed to ensure that those providers comply with data protection legislation.
We may transfer personal data outside the European Economic Area (“EEA”) where adequate protection measures are in place in compliance with data protection laws. For example, this may be in relation to an international assistance task to protect your life, render medical assistance following an incident, or where we are sharing information with our colleagues or third party service providers who operate outside the EEA in order to fulfill our obligations to protect you through emergency response.
We also use IT Service providers based outside the EEA who provide us with software, maintenance and support in order for us to better provide you with our services. We ensure that any related transfers are either subject to an adequacy decision or are protected by the Commission approved Standard Contractual Clauses.
We strive to provide you with choices around what marketing communications you receive from us. To ensure that we continue to provide you with the most relevant information, you can review and update your marketing preferences at any time by clicking ‘unsubscribe’ or ‘manage preferences’ in any of our emails.
To request that we stop processing your personal information for marketing purposes, you can opt-out of all communications at any time by clicking ‘unsubscribe’ or ‘manage preferences’ in any of our emails, or by emailing email@example.com and we shall stop processing your information for those purposes.
If you have consented to receive marketing communications from us, you can withdraw this consent at any time by clicking ‘unsubscribe’ or ‘manage preferences’ in any of our emails, or by emailing firstname.lastname@example.org, and we will stop processing your information for those purposes.
See Your Rights section below for further information about your rights to withdraw consent and opt-out.
We retain personal data in accordance with our retention and destruction policy.
If you unsubscribe from our marketing emails or withdraw your consent for us to contact you, we will store your information for a period of two years to ensure that you no longer receive emails from us.
We are strongly committed to data security and we take reasonable appropriate steps to protect the personal information we hold from unauthorised access, loss, misuse, alteration or corruption. We have put in place physical, electronic and managerial procedures to safeguard and secure that information.
We are certified under ISO 27001 and accredited in relation to the UK Government’s Cyber Essentials security standards
If we process your personal data, you have the following rights. You can exercise these rights at any time by emailing us at email@example.com or by using the other contact details given in the ‘Contact details’ section below.
You have the right:
Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting our CEO in the first instance by using the contact details below. If we are unable to resolve your concerns and you remain dissatisfied, you have the right to complain to the relevant supervisory authority, which is the Information Commissioner’s Office in the UK. The ICO’s contact details are available here: https://ico.org.uk/concerns/.
Please read this notice carefully and contact us if you have any queries by emailing us at: firstname.lastname@example.org by writing to:
Data Protection Officer
22 Bevis Marks
This privacy notice may change from time to time so we recommend that you review it periodically. This version of the privacy notice was last updated on 4th September 2020