This policy explains how we collect information, what we do with it and what controls you have over your personal information.

Your Personal Information

We aim to comply with data protections legislation and this policy explains how we collect, manage, use and protect your personal information.

We may change this document from time to time to reflect the latest view of what we do with your information. Please check back occasionally; you will be able to see if changes have been made by the date it was last updated at the end of the document.

Refer to the sections below for more details on how and why we use your personal information:

  1. Who are we?
  2. What personal information we collect and how we use it
  3. Legitimate interests
  4. Sharing your information
  5. Retaining your information
  6. Your details on the web
  7. What are your rights?
  8. How to contact us
  1. Who are we?

GDPR Advisors is a trading name of Audit and Risk Professionals LLP (which is a registered company in England and Wales, OC393687). In this policy references to GDPR Advisors, or to ‘we’ or ‘us’ are a reference to the trading name.

  1. What personal information we collect and how we use it

What we need

GDPR Advisors is what’s known as the ‘Data Controller’ of the personal information you provide to us. If you submit a comment or contact form through the website then we will usually only have your name and email address. If we work together, then we will collect contact information in order to be able to provide you with services, this may include your name, postal address, telephone number, email address and your method of payment if you are purchasing from us. When you complete an enquiry form or book an introductory call, we will only use your personal information to respond to your query.

Why we need it

We collect your personal information in connection with specific activities, such as newsletter requests, helpline support, registration for compliance packs, product purchases, feedback and contact forms.

The information is either needed to fulfil your request or to enable us to provide you with the services you have requested. There is no obligation to disclose any information to browse our site. However, there are situations when,  if you choose to withhold requested information, we may not be able to provide you with certain services.

Our marketing

As we are a business to business provider, we aim to give you information which helps you. Sometimes, with your consent, we will process your personal information to provide you with information about our work or our activities that you have requested or are expecting.

If you are a client or have purchased from us, you may receive regular updates and news, you can choose to unsubscribe from these at any time, using the unsubscribe option on each email.

On other occasions, we may process personal information when we need to do this to fulfil a contract (for example, if you have purchased something from our learning platform) or where we are required to do this by law or other regulations.

How we obtain your details

We usually obtain your personal information because you have provided it to us directly.

Anything else?

Wherever possible we ensure that all the personal information we process is processed within the UK or EEA, or the assured territories. If personal information is transferred outside these areas, additional controls such as an International Data Transfer Agreement (IDTA) or Standard Contractual Clauses will be used to protect the rights of the individual.  This will be undertaken in accordance with guidance issued by the Information Commissioner’s Office.

  1. Legitimate interests

We have a number of lawful reasons that mean we can use your personal information. One of these is something called ‘legitimate interests’. Broadly speaking Legitimate Interests means we can process your personal information if:

We have a genuine and legitimate reason.

and

We are not harming any of your rights and interests.

An example of our use of the legitimate interest lawful basis would be providing you with additional information or offers when you have been a client or have purchased a course or template from us. You will be given the option to unsubscribe in each email.

  1. Sharing your information

We will never sell or rent your personal information to other organisations.

Other than in the following circumstances, we do not share your information with any other organisations or individuals:

  • Unless we are obliged to by law, for purposes of national security, taxation or criminal investigations.
  • Where we are working with other organisations to provide our business services and we have a contract in place with that organisation which ensures the security of the information and the rights of the individual.
  • If you have agreed that we may do so.
  • If we sell the business – the new owner may obtain subscriber and past client and participant information. This information would only be used for the same purposes for which it was originally obtained.
  • If we run an event in partnership with other named organisations, your details may need to be shared. We will be very clear what will happen to your personal information when you register.
  1. Retaining your information

We hold your information only as long as necessary for each reason that we use it. We have provided some examples of the time we will keep your information in this paragraph but you can contact us for more information.

If decide you don’t want to hear from GDPR Advisors any more or request that we have no further contact with you, we will keep some basic information in order to avoid sending you unwanted materials in the future and to ensure that we don’t accidentally duplicate information.

If you make a purchase from us, we will keep the purchase information for a period of seven years for accounting purposes.

  1. Our Cookie Policy

Cookies and how they benefit you

We have a small number of cookies active on our website, as almost all websites do, to help provide you with the best experience we can. Cookies are small text files that are placed on your computer or mobile phone when you browse websites.

Our cookies help us:

  • Make our website work as you’d expect.
  • Improve the speed/security of the site.

Should you wish to remove or not use cookies from our site you can learn how to do this below, however doing so will likely mean that our site will not work as you would expect.

Turning cookies off

You can usually switch cookies off by adjusting your browser settings to stop it from accepting cookies. Doing so, however, will likely limit the functionality of ours and a large proportion of the world’s websites as cookies are a standard part of most modern websites.

  1. What are your rights?

You have a number of rights about how the personal information you provide can be used. These are:

  • Transparency over how we use your personal information (right to be informed).
  • The ability to request a copy of the information we hold about you, which will be provided to you within one month (right of access).
  • Update or amend the information we hold about you if it is wrong (right of rectification).
  • Ask us to stop using your information (right to restrict processing).
  • Ask us to remove your personal information from our records (right to be ‘forgotten’).
  • Object to the processing of your information for marketing purposes (right to object).
  • Obtain and reuse your personal information for your own purposes (right to data portability).
  • Not be subject to a decision when it is based on automated processing (automated decision making and profiling).

If you would like to know more about your rights under the data protection law, you can find out more at the Information Commissioners Office website.

Remember, you can change the way you hear from us or withdraw your permission for us to process your personal information at any time by using the form on our ‘Contact Us’ page or by emailing us at [email protected].

  1. How to contact us

If you wish to talk through anything in our privacy policy, find out more about your rights or obtain a copy of the information we hold about you, please contact us (details at the bottom of this page), we will be happy to help.

If you wish to raise a complaint on how we have handled your personal information, please contact us so that we may investigate the matter. If you are not satisfied with our response or believe we are not processing your personal information in accordance with the law you can complain the Information Commissioner’s Office (ICO).

If you wish to talk to us about anything in the policy or the information we hold about you please contact us:

By email:

[email protected]

This document was last updated: February 2024