Data Privacy Policy: Suppliers

What information do we collect?

It is our policy to collect only personal information that is required to enable suppliers to carry out their duties under the terms of our engagement with them. Dependent on the service for which the supplier has been engaged, we may need to collect the following information:

• Contact information
• Bank details for payment purposes
• Proof of identity
• Professional qualifications

How will we use the information?

• We use the personal information we collect about you to provide the services for which you have been engaged. We may need to process the personal data of the supplier or employees of the supplier in order to fulfil the service contract. This includes both suppliers of services to CavanaghKelly and suppliers who are engaged to allow us to fulfil our engagements with clients
• We may need to process your personal data to comply with a common law, statutory regulatory and professional obligation, for example, we need to retain records in order to demonstrate compliance with regulations
• We collect and process personal information to allow us to carry out anti-money laundering checks and fraud prevention checks
• Where is it in our legitimate business interests to do so without prejudicing your interests, or fundamental rights or freedoms:
  • the management of our relationships with suppliers, undertaking quality assessments
  • arranging relevant events
  • managing our software applications
  • ensuring the security of information, for example virus scans on emails
  • back-ups to ensure business resilience

Who will we share your data with?

We do not sell information about suppliers to third parties, nor is it our practice to disclose such information to third parties unless requested to do so by supplier.

We may share information with others to comply with common law or statutory obligation or where it is in our legitimate interests to do so. The third parties include:

• Third parties who may provide administration, application services or analytic services to us e.g. IT servers and cloud-based systems, marketing applications, web service providers

How long do we retain your personal information?

We will retain your personal information on our systems only for as long as we need it, given the purposes for which it was collected, or as required to do so by law.

Where there is no statutory legal or regulatory requirement, we will retain information for 6 years following completion of our engagement with you.