Effective Date: 3 February 2020

Under the EU’s General Data Protection Regulation (EU) 2016/679 (“GDPR”) personal data is defined as: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

This Privacy Policy tells you how Rodwell Dallow Advisory Ltd (“RDA”) collects and uses your personal data.

Why does RDA collect and store personal data?

RDA collects personal data to provide you with a service and / or the best experience on our website. RDA is committed to ensuring that the information that it collects is appropriate for those purposes.

Will my personal data be shared with anyone else?

RDA may pass your personal data on to third party service providers in the course of dealing with you. Any third parties with which we share your data are obliged to keep your details securely, and to use them only to fulfil their service they provide you on our behalf. If we wish to pass on your sensitive data to a third party, we will only do so: (i) with your consent; or (ii) if we are legally required to.

How will RDA use the personal data it collects?

RDA will process (collect, store and use) the information you provide in a manner compatible with GDPR. RDA will endeavour to keep your information accurate and up to date, and not keep that information longer than is necessary. RDA is required to retain information needed for tax and audit purposes. How long certain kinds of personal data should be kept may also be governed by specific business requirements and agreed practices. Personal data may be held in addition to these periods depending on individual business needs.

Under what circumstances will RDA contact me?

RDA will only contact you for legitimate business purposes.

Can I find out the personal data that RDA holds about me?

RDA, at your request, can confirm what information it holds about you and how it is processed. If RDA holds information about you, you can request the following information:

• identity and the contact details of the person or organisation that has determined how and why to process your data;

• the purpose of the processing, as well as the legal basis for processing;

• if the processing is based on the legitimate interests of RDA of a third party, information about those interests;

• the categories of personal data collected, stored and processed;

• recipient(s) or categories of recipients that the data is or will be disclosed to;

• how long that data will be stored;

• details of your rights to correct, erase, restrict or object to such processing;

• information about your right to withdraw consent at any time;

• how to lodge a complaint with the supervisory authority; and

• the source of personal data if it was not collected directly from you.

RDA’s legal obligations

RDA will share specific and relevant information with law enforcement and government agencies or public bodies where it is legally required to do so. This may include:

• the prevention and detection of crime and fraud;

• the apprehension or prosecution of offenders;

• the assessment or collection of tax or duty owed to customs and excise; or

• sharing in connection with legal proceedings.

Keeping your information secure

RDA stores personal information both electronically and in paper form. RDA implements security policies, processes and technical security solutions to protect the personal information it hold from:

• unauthorised access;

• improper use or disclosure;

• unauthorised modification; and

• unlawful destruction or accidental loss.

When you contact RDA, we may ask you to provide us with information in order to confirm your identity. Members or employees of RDA who have access to, or are associated with the processing of, this personal information are required to ensure compliance with GDPR and the Data Protection Act and make reasonable efforts to safeguard that information.

The RDA website

When accessing the RDA website, RDA may collect standard internet log information for statistical purposes and to provide you with the best experience of the site. For example: RDA uses cookies to collect information in an anonymous way, including information as to the number of visitors to the site, where visitors have come from to visit the site and the pages they visit.

Our website may also contain links to other third party sites. RDA is not responsible for the content or privacy practices of any external websites that are linked from the RDA site.

Marketing

RDA may use your personal data to form a view on what it thinks you want or need, and what may be of interest to you. You will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with details when registering for an event, and in each case you have not opted out of receiving that marketing.

Contacting us

If you have any question about this Privacy Policy, the practices of the RDA website, or your own dealings with this website, please contact RDA (contact@rd-a.co.uk)

We may update this Privacy Policy from time to time. When changes are made, the ‘Effective Date’ at the top of this policy will be amended accordingly.