We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to only those employees, contractors or agents who have a legitimate business need to have access to that data. The employees, contractors or agents will process your personal data in accordance with our instructions. They will be subject to a duty of confidentiality and due care with respect to handling the personal data. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. Whateley Capital’s employees are trained on data security and information protection. Relevant areas of Whateley Capital’s website will employ encryption technology to enhance data privacy and help prevent loss, misuse, or alteration of the information collected and retained by Whateley Capital.
Whateley Capital collects and maintains a variety of personally identifiable information, including names, email addresses, phone numbers, payment information, business addresses, information such as the local authority area or industry sector of the business and details of services the users may be interested in. Whateley Capital collects information directly from individuals or from the parent businesses of the individuals. The information could be collected through e-mails, phone calls, online registration forms, event registration forms and face to face meetings. Whateley Capital does not collect personal data about individuals except when there is a legitimate business requirement.
The personal data collected is used by Whateley Capital to evaluate potential investments, to give you information relating to its services, customer relationship management and to process and respond to queries received from the public or other relevant stakeholders, to contact you to seek your views or comments on emerging issues and to send marketing communications. The personal data held by Whateley Capital may also be used on an aggregate basis without any personal identifiers to provide third parties with information, such as the pipeline composition and number of deals, and to help us develop new services and products, improve the features and content of the website or other marketing material, and to provide others with aggregate information about our website users and their usage patterns in relation to services and/or the website.
If you have previously given us your contact details in relation to a possible acquisition or investment, you can choose to opt in or out of further contact with us.
Personal data collected from individuals and their parent businesses is used to administer the accounts of subscribers and customers and to deliver our services. We will not pass personal data on to any third party to allow them to contact individuals for marketing purposes without the consent of the individual concerned. The data will not be transferred to any agency located outside the EU.
Personal data is retained to keep a record of service provisions and enable the relationship management for the period of service provision. Contact details are retained for a period of three years.
Whateley Capital. for its legitimate business interests, must maintain contact information on its subscribers and the wider business community to communicate information on its products or services. Whateley Capital also sends promotional material promoting its events, services, and other relevant offerings. From time to time, Whateley Capital may collaborate with other relevant organisations and businesses to promote other programmes that may be of interest to the wider business community. In such cases, Whateley Capital does not provide these organisations with any personally identifiable information but may distribute the organisation’s information on their behalf to those who may legitimately be benefiting from receiving such information or have elected to receive such information. If you do not wish to receive marketing material, you may opt out. Every marketing e-mail will include an ‘unsubscribe’ link at the bottom. You may also notify Whateley Capital in writing as set out below.
Third Party Marketing and Surveying Tools
We may use third party provided tools to manage our social media interactions, email distribution tools to dispatch email marketing campaigns and survey tools to collect survey response data. Personal email data may be stored by these tools for this purpose, and any direct messages sent to Whateley Capital social media accounts may be stored. This data will not be shared with other organisations.
Links to Third Party Sites
Access, Review and Correction
The General Data Protection Regulation gives you the right to access your personal data held by us (“subject access request”). Subject access requests must be made in writing to the details below. We will endeavour to respond to the request within 30 days as required by the GDPR.
It is important that the personal data we hold about you is accurate and current. We will take all reasonable measures to ensure that the personal data we hold about you is accurate. When you make a request to access or review the personal data we hold about you, we will request you to verify your identity before the request can be fulfilled.
In addition to the rights of access, you have the right to object to your personal data being processed for any particular purpose, or to request that we stop using your information. If you wish to exercise these rights, please e-mail firstname.lastname@example.org or send a letter marked “Data Protection Officer” to 14 Coombes Lane, Birmingham B31 4QW. If you have further concerns about how we use your personal data, you also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the data protection authority for the UK.