2. Disclosures of your personal data and categories of recipients
We disclose personal data to the parties set out below. We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
|
Categories of Recipients
|
Purpose of the disclosure
|
Location of recipient
|
|
We share your personal data within our group of companies where they act as processors and joint controllers, to the extent systems, resources and operations are shared.
|
This is to provide you with the best service and perform contractual obligations to you, send you information about our products and services we think you’ll be interested in hearing about, or to comply with our regulatory requirements.
|
Our group companies have offices in the UK, and the Netherlands.
|
|
Government bodies, such as regulators, law enforcement authorities, competition authorities, and tax authorities, acting as processor or joint controller
|
To check your identity, protect against fraud, keep to laws (including tax laws, anti-money laundering laws, data protection or cyber security laws or any other laws), and confirm that you’re eligible to use our products and services.
|
These bodies may include HMRC (the UK Tax Authority), the FCA (the UK financial authority), the ICO (the UK data regulator) and equivalent bodies in other jurisdictions.
|
|
Professional advisors acting as processor or joint controller including lawyers, bankers, auditors and insurers.
|
To enable us to obtain consultancy, banking, legal, insurance, payroll management and accounting services.
|
The entities are located in the UK and the EEA.
|
|
Social media channels.
|
We use social media for marketing purposes, and therefore we might share your personal data (limited to only your name, email address) to check if you also hold an account with them; to send your our adverts, where we think that one of our new products or services might interest you; to send our adverts to people who have a similar profile to you.
|
The social media entities are global. The recipients can be located in the UK and the EEA.
|
|
Where you ask us to share your personal data with a third party.
|
For example, you might authorise third parties to act on your behalf (such as a courier or delivery service provider).
|
The entity would be located wherever you had sourced them.
|
|
Third parties to whom we might sell, transfer or merge parts of our business or our assets. Alternatively, we might seek to acquire other businesses or merge with them. |
As part of any financial, commercial or legal due diligence investigations and implementation of any such acquisition, sale or merger
|
|
|
IT service providers, acting as processors
|
|
These providers are based in the UK, EEA and globally.
|
|
Software application providers, acting as processors. who provide software that we use to deliver our products and services and conduct our business, such as, operations, contract management and electronic document information storage, accounting systems, managing our marketing database, internal document storage systems.
|
To fulfil contracts with you, manage our transactions, business management and record keeping and comply with legal and regulatory obligations.
|
These entities are located in the UK and EU.
|
|
Mailing service providers, acting as processors who ship our products to you.
|
To enable products to be delivered to you.
|
These are based globally as best suits the location of the recipient.
|
|
Analytics providers, and “cookies”, acting as processors.
|
They offer services such as surveys and statistical analysis. track and analyse our website users to understand how visitors interact with our site.
|
These entities are located in the UK.
|
