Privacy notice

BAO Agency Ltd. is the controller responsible for your personal data. We collect and process your personal data when you visit our website, sign up for a newsletter, or contact us for any other reason

‍

Who this notice is addressed to

This notice describes how we use the personal data of:

(a) Clients and/or prospective clients; and

(b) Owners, officers, employees, contractors and/or other representatives of clients,

This notice is relevant to data relating to natural persons (including sole traders and partnerships) but not corporate entities (though other laws such as confidentiality may apply in respect of such information).

We are a controller (and therefore responsible for the security of) your personal data if you fall into one the above categories. We process your personal data fairly, lawfully, and in a transparent manner and in accordance with UK data protection laws (the "DPA").

‍

The data we collect about you and on what basis we process it

We may collect, use, store and transfer your business contact data when you engage us to provide you with services. We process this data for our legitimate interests (e.g., in order to discuss potential engagements with you) prior to entering into a contract with you, and to fulfil our contractual obligations (i.e., to provide you with our services) once we have entered into a contract with you.

‍

How we use your personal data

We will only use your personal data for the purpose for which we collected it which includes the following:

• To discuss the potential engagement by you of our services
• To process and respond to any requests for information
• To manage your relationship with us
• To enter into a contract for services with you
• To provide you with our services
• To recommend services which may be of interest to you.

‍

How we share your personal data

We may share your personal data within our organisation but only for the purposes set out above; we do not share your data with third parties. We may also share your information with the following categories of third parties:

• our advisors and consultants including lawyers, accountants and financial advisors in order for them to advise us in relation to our business;
• marketing services providers who send marketing on our behalf;
• law enforcement and regulatory agencies, including HMRC, in connection with any investigation or as otherwise required by law;
• prospective and actual buyers and funders of our business; and
• a third party who acquires our business, assets or a part of them which requires the transfer of personal data for its continued operation;

‍

International transfers

We do not transfer, store and process your personal data outside the UK.

‍

Protecting your data

We implement appropriate technical and organisational measures to protect your personal data, including:

• we store your data on encrypted volumes;
• we apply security and permissions in respect of access to your data to specific individuals allocated to your account.

‍

Your legal rights

Your rights under the DPA in respect of the ways in which we process your personal data are set out below. You can exercise these rights by contacting us via the details set out in the 'Contact details' section of this notice – if we are unable to carry out your request, we will explain to you why this is the case.

1. You have the right to request access to your personal data

You have the right to request confirmation that your personal data is being processed, access to your personal data (through us providing a copy) and other information about how we process your personal data.

2.  You have the right to ask us to rectify your personal data

You have the right to request that we rectify your personal data if it is not accurate or not complete.

3.  You have the right to ask us to erase your personal data

You have the right to ask us to erase or delete your personal data where there is no reason for us to continue to process your personal data.  This right would apply if we no longer need to use your personal data to provide the debt management services to you, where you withdraw your consent for us to process special categories of your personal data, or where you object to the way we process your personal data (see right 6 below).

4.  You have the right to ask us to restrict or block the processing of your personal data

You have the right to ask us to restrict or block the processing of your personal data that we hold about you.  This right applies where you believe the personal data is not accurate, you would rather we block the processing of your personal data rather than erase your personal data, where we do not need to use your personal data for the purpose we collected it for but you may require it to establish, exercise or defend legal claims.

5.  You have the right to port your personal data

You have the right to obtain and reuse your personal data from us to reuse for your own purposes across different services.  This allows you to move personal data easily to another organisation, or to request us to do this for you.

6.  You have the right to object to our processing of your personal data

You have the right to object to our processing of your personal data on the basis of our legitimate business interests, unless we are able to demonstrate that, on balance, our legitimate interests override your rights or we need to continue processing your personal data for the establishment, exercise or defence of legal claims.

7.  You have the right not to be subject to automated decisions

You have the right to object to any automated decision making, including profiling, where the decision has a legal or significant impact on you.

8.  You have the right to withdraw your consent

You have the right to withdraw your consent where we are relying on it to use your personal data.

For details of your rights under data protection laws, including the right to receive a copy of the personal data we hold about you and the right to make a complaint at any time to the Information Commissioner's Office, the UK regulator for data protection issues (www.ico.org.uk), please see our website privacy policy.

‍

Cookies

We use cookies on our website – details can be found futher down this page of our website.

‍

Contact details

If you have any questions about this privacy notice or our data protection practices please contact us at  info@bao.agency or via our website contact form.

‍

‍