Blackpark LTD is dedicated to protecting the confidentiality and privacy of information entrusted to us in accordance with the UK Data Protection Act 2018 including its applied GDPR provisions (DPA 2018). Please read this Privacy Notice to learn about your rights, what information we collect, how we use and protect it.
This Privacy Notice applies to Blackpark LTD (“Blackpark LTD”, “we” or “us”), is a private English company limited by shares with the registration number 15585991 and operating as public accountant with certificate of practice from Association of International Accountants (AIA) in the United Kingdom.
Direct: We obtain personal data directly from individuals in a variety of ways, including obtaining personal data from individuals who provide us with their businesscard(s), complete our online forms, subscribe to our newsletters and preferencecentre, register for webinars, attend meetings or events we host, visit ouroffices or for recruitment purposes. We may also obtain personal data directly when, for example, we are establishing a business relationship, performing professional services through a contract, or through our hosted software applications.
Indirect: We obtain personal data indirectly about individuals from a variety of sources,including recruitment services and our clients.
Publicsources: Personal data may be obtained from public registers (such as CompaniesHouse), news articles, sanctions lists, government intelligence and crimeprevention agencies and internet searches.
Social and professional networking sites: If you register or login to our websites usingsocial media (e.g., LinkedIn, Google, or Twitter) to authenticate your identityand connect your social media login information with us, we will collect information or content needed for the registration or login that you permittedyour social media provider to share with us. That information may include yourname and email address and depending on your privacy settings, additionaldetails about you, so please review the privacy controls on the applicable service to set how much information you want shared with us.
Business clients: Our business clients may engageus to perform professional services which involves sharing personal data theycontrol as part of that engagement. For example, we will review payroll data aspart of an audit, and we often need to use personal data to provide global mobility and pension services. Our services may also include processing personal data under our clients’ control on our hosted software applications,which may be governed by different privacy terms, policies, and notices.
Recruitment services: We may obtain personal data about candidates from an employment agency, and other parties including former employers, and credit reference agencies.
Datasubscription services: We may obtain business personal data from external data providers to reach out to prospective new clients.
We may obtain the following categories of personal data about individuals through direct interactions with us, or from information provided through client engagements, from applicants, our suppliers and through other situations including those described in this Privacy Notice.
Personaldata: Here is a listof personal data we commonly collect to conduct our business activities.
· Contact details (e.g., name, company name, job title,work and mobile telephone numbers, work and personal email and postal address).
· Professional details (e.g., job and career history,educational background, and professional memberships, published articles).
· Family and beneficiary details for insurance and pensionplanning services (e.g., names and dates of birth).
· Financial information (e.g., taxes, payroll, investmentinterests, pensions, assets, bank details, insolvency records).
· CCTV at our sites may collect images of visitors. Ourpolicy is to automatically overwrite CCTV footage within 30 days.
We typically do not collect special categories of personal data about individuals other than our own employees. In some circumstances it is necessary for Blackpark to process special categories of personal data of our employees and other third parties. Other than where such personal data is made public by the individual themselves, such processing would only be undertaken as necessary for Blackpark to exercise its rights and obligations as an employer (including for occupational health purposes), protect the vital interests of individuals,establish, or defend legal claims or with the explicit consent of the individual(s) concerned. Examples of special categories of personal data we may obtain, or otherwise hold, include:
· Personal identification documents that may reveal race,religion or ethnic origin, possibly biometric data of private individuals,beneficial owners of corporate entities, or applicants.
· Expense receipts submitted for individual tax oraccounting advice that reveal affiliations with trade unions or politicalopinions.
· Adverse information about potential or existing clientsand applicants that may reveal criminal convictions or offences information.
· Information provided to us by our clients in the courseof a professional engagement.
· Diversity and equal opportunity information volunteeredby participants in certain Blackpark professional empowerment programmes (e.g.,Connect On Board) and recruitment processes.
· Health data where the processing is necessary to assess,monitor and control spread of infectious diseases and to provide a safeenvironment for our employees, clients and suppliers.
Childdata: Our sites are not intentionally designed for or directed at children under the age of 13. It is our policy never to knowingly collect or maintain information about anyone under the age of 13, except as part of an engagement to provide professional services. Although we do not intentionally collect information from individuals under 13 years of age, we may occasionally receive details about children attending performances and other events we host with their parents or guardians.
Location-based data: We may process geographical locations you enter when seeking an office near you.
We may relyon the following lawful reasons when we collect and use personal data tooperate our business and provide our products and services:
· Contract – We may process personal data to perform our contractual obligations owed to (or to enter a contract with) the relevantindividuals.
· Consent - We may rely on your freely given consent atthe time you provided your personal data to us.
· Legitimate interests – We may rely on legitimate interests based on our evaluation that the processing is fair, reasonable, andbalanced. These may include:
· Delivering services to our clients – To deliver the professional services our clients have engaged us to provide including information on new products and services.
· Direct marketing – To conduct and analyse our marketing activities. To deliver timely market insights and speciality knowledge including tailor-made online experience we believe is welcomed by our business clients, subscribers and individuals who have interacted with us.
· Monitor our IT systems - Prevent fraud or criminal activity and protect our IT systems.
· Corporate responsibility - Comply with our corporate and corporate social responsibility commitments.
· Legal obligations – We may process personal data to meetour legal and regulatory obligations or mandates.
· Public Interest – We may process personal data toperform a specific task in the public interest or in the exercise of official authority vested in us.
· Vital Interests – We may process personal data toprotect the vital interests of the individual or another natural person.
We aspire tobe transparent when we collect and use personal data and tell you why we needit, which typically includes:
· Providing professional advice and delivering reportsrelated to our tax, advisory, audit and assurance, pension schemeadministration, mergers and acquisitions and other professional services. Ourservices may include reviewing client files for quality assurance purposes,which may involve processing personal data for the relevant client.
· Promoting our professional services, products andcapabilities to existing and prospective business clients.
· Sending invitations and providing access to guestsattending our events and webinars or our sponsored events.
· Personalising online landing pages and communications wethink would be of interest based on interactions with us and Blackpark memberfirms.
· Administering, maintaining, and ensuring the security ofour information systems, applications and websites.
· Authenticating registered users to certain areas of oursites.
· Seeking qualified candidates, and forwarding candidatecareer inquiries to our People team, which may be governed by different privacyterms and policies.
· Processing online requests, including responding tocommunications from individuals or requests for proposals and quotations.
· Contacting journalists regarding company press releases,invitations to annual press parties, highlighting messages that may be ofinterest on specific industry topics.
· Helping support clients to run a series of developmentprograms for education and learning purposes to inform leaders in thehealthcare, civil service, and other industries.
· Complying with legal and regulatory obligations relatingto anti-money laundering, terrorist financing, fraud, and other forms offinancial crime.
· Compiling health and safety data (directly orindirectly) following an incident or accident. Indirect data can take manyforms including an incident report, first aider report, witness statements andCCTV footage.
· Collecting health data to assess, monitor and controlspread of infectious diseases and to provide a safe environment for ouremployees, clients, and suppliers.
We mayoccasionally share personal data with trusted third parties to help us deliverefficient and quality services. These recipients are contractually bound tosafeguard the data we entrust to them. We may engage with several or all of thefollowing categories of recipients:
· Blackpark member firms, where necessary foradministrative purposes and to provide professional services to our clients(e.g., when providing services involving advice from Blackpark member firms indifferent territories).
· Parties that support us as we provide our services(e.g., providers of telecommunication systems, mailroom support, IT systemsupport, archiving services, document production services and cloud-basedsoftware services).
· Professional advisers, including lawyers, auditors, andinsurers.
· A potential buyer, transferee, merger partner or sellerand their advisers in connection with an actual or potential transfer or mergerof part or all of our business or assets, or any associated rights orinterests, or to acquire a business or enter into a merger with it.
· Parties that support as with anti-money laundering,client conflicts and independence checks.· Law enforcement or other government and regulatoryagencies (e.g., HMRC) or to other third parties as required by, and inaccordance with, applicable law or regulation.
· Health government bodies and external service providers(health, facilities, estate management) to assess, monitor and control thespread of infectious diseases.
· Payment, marketing, and recruitment services providers.We will not transferthe personal information you provide to any third parties for their own directmarketing use.
We store personal data on servers located in the UK and EEA. We may transfer personal data to Blackpark International, Blackpark member firms, and reputable third-party organisations situated inside or outside the UK and EEA when we have a business reason to engage these organisations. Each organisation is required to safeguard personal data in accordance with our contractual obligations and data protection legislation.
Our websitesmay use cookies. Where cookies are used, a statement will be sent to yourbrowser explaining the use of cookies. To learn more, please refer to our(Cookies Notice).
Access – You can ask us to verify whetherwe are processing personal data about you, and if so, to provide more specificinformation.
Correction – You can ask us to correct ourrecords if you believe they contain incorrect or incomplete information aboutyou.
Erasure – You can ask us to erase (delete)your personal data after you withdraw your consent to processing or when we nolonger need it for the purpose it was originally collected.
Processing restrictions – You can ask usto temporarily restrict our processing of your personal data if you contest theaccuracy of your personal data, prefer to restrict its use rather than havingus erase it, or need us to preserve it for you to establish, exercise, or defenda legal claim. A temporary restriction may apply while verifying whether wehave overriding legitimate grounds to process it. You can ask us to inform youbefore we lift that temporary processing restriction.
Data portability – Insome circumstances, where you have provided personal data to us, you can ask usto transmit that personal data (in a structured, commonly used, andmachine-readable format) directly to another company if is technicallyfeasible.
Automated Individual Decision-making– You can ask us to review any decisions made about you which we made solelybased on automated processing, including profiling, that produced legal effectsconcerning you or similarly significantly affected you.
Right toObject to Direct Marketing including Profiling – You can object to our use of yourpersonal data for direct marketing purposes, including profiling. We may needto keep some minimal information to comply with your request to cease marketingto you.
Right toWithdraw Consent –You can withdraw your consent that you have previously given to one or morespecified purposes to process your personal data. This will not affect thelawfulness of any processing carried out before you withdraw your consent. Itmay mean we are not able to provide certain products or services to you and wewill advise you if this is the case.If you wouldlike to exercise your Data Subject Rights, you can email dataprivacy@Blackpark.uk.We may need to request specific information from you to help us confirm youridentity and ensure your right to access the information or to exercise any ofyour other rights. This helps us to ensure that personal data is not disclosedto any person who has no right to receive it. No fee is required to make arequest unless your request is clearly unfounded or excessive. Depending on thecircumstances, we may be unable to comply with your request based on otherlawful grounds.
We have put a ppropriate technical and organisational security policies and procedures inplace to protect personal data (including sensitive personal data) from loss,misuse, alteration, or destruction. We aim to ensure that access to yourpersonal data is limited only to those who need to access it. Those individualswho have access to the data are required to maintain the confidentiality ofsuch information. We may apply pseudonymisation, de-identification andanonymisation techniques in efforts to further protect personal data.If you haveaccess to parts of our websites or use our services, you remain responsible forkeeping your user ID and password confidential. Please be aware that thetransmission of data via the Internet is not completely secure. Whilst we doour best to try to protect the security of your personal data, we cannot ensureor guarantee the security of your data transmitted to our site; anytransmission is at your own risk.
We retainpersonal data to provide our services, stay in contact with you and to complywith applicable laws, regulations, and professional obligations that we are subject to. Unless a different time frame applies because of business need or specific legal, regulatory or contractual requirements, where we retain personal data in accordance with these purposes, we retain such personal datafor seven years.
Our websitesmay contain links to other sites, including sites maintained by other Blackpark member firms that are not governed by this Privacy Notice. Please review the destination websites’ privacy notices before submitting personal data on those sites. Whilst we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content, security, orprivacy practices employed by other sites.
If you havequestions or comments about this Privacy Notice or how we handle personal data,please direct your correspondence to dataprivacy@Blackpark.uk. We aim torespond within 30 days from the date we receive privacy-related communications.If you arenot satisfied with the response, you receive you may also contact the UKInformation Commissioner’s Office at https://ico.org.uk/concerns/handling/ toreport concerns you may have about Blackpark in the UK.
The ICO’saddress:
InformationCommissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helplinenumber: 0303 123 1113ICO website:https://www.ico.org.uk
The Firm’sMoney Laundering Privacy Statement can be found here: Money Laundering PrivacyStatement.
We regularly review this Privacy Notice and will post any updates to it on this webpage. This Privacy Notice was last updated on 01 May 2024