How we handle personal data.

Our contact details

Name: Alvermere Limited
Address: Zenith House, Highlands Road, Shirley, Solihull B90 4PD
E-mail: privacy@alvermere.com

Alvermere Limited is registered in England and Wales, company number 17077390, and is registered with the Information Commissioner’s Office under registration ZC193771. We are the controller of the personal data described below.

What type of personal information we collect

We currently collect and process the following information:

• name, job title and employer
• work email address and work telephone number
• the published source of each detail we hold
• correspondence with us

How we get the personal information and why we have it

Most of the personal information we hold about prospective clients is obtained indirectly, from published professional sources:

• an organisation’s own website, including team, leadership, press and contact pages
• statutory and regulatory registers and filings, for example Companies House and the Financial Conduct Authority register
• professional-body listings, and conference or event materials
• press reports

We record the source of every detail we hold, and we will tell you what it was if you ask. We do not buy contact lists, and we do not use data brokers or data-enrichment services.

We also receive information directly from you when you contact us or when we work with you.

We use the information that we hold in order to:

• introduce our advisory services to senior people at organisations whose work is relevant to ours
• provide advisory services to our clients and manage those relationships
• meet our legal and regulatory obligations

We share this information only with service providers who process it on our instructions, including our IT, hosting and business software providers, and with our professional advisers where necessary. We do not sell or trade personal data.

Under the UK General Data Protection Regulation (UK GDPR), and the EU GDPR where it applies, the lawful bases we rely on are:

(b) Contract. Where we are providing advisory services to you or your organisation.

(c) Legal obligation. Where we are required to keep records, for example for accounting and tax.

(f) Legitimate interests. For introducing our services to senior people at relevant organisations. Our legitimate interest is promoting a professional advisory service to businesses that face the risks we advise on. We have carried out an assessment of this interest against your rights, and a copy is available on request.

How we store your personal information

Your information is stored securely by our IT and hosting providers. Some of them process data outside the United Kingdom, including in the European Economic Area and the United States; where that happens, the transfer is protected by safeguards recognised under UK law, and you can ask us for details.

We keep prospect contact records for up to 12 months and then review them; records we have not acted on are deleted. Details we have not confirmed are deleted after 30 days. Client engagement records are kept for six years from the end of the engagement, then deleted.

If you ask us to stop contacting you, we delete your details and keep only the minimum needed to make sure we do not contact you again.

Your data protection rights

Under data protection law, you have rights including:

Your right of access You have the right to ask us for copies of your personal information.

Your right to rectification You have the right to ask us to correct personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing You have the right to object to the processing of your personal information where we are relying on legitimate interests. Where we are processing your information for direct marketing, we will always stop.

Your right to data portability You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at privacy@alvermere.com if you wish to make a request.

If you are outside the United Kingdom

We work with clients and contacts in the United Kingdom, Europe and the United States. Wherever you are, we handle your personal information to the standard set out in this notice.

If you are in the European Union or the European Economic Area, the EU General Data Protection Regulation may apply to our processing alongside UK law. Your rights are materially the same as those set out above, and you may complain to the supervisory authority in your own country as well as to us.

If you are in the United States, we process your information under United Kingdom law. We do not sell or share personal information, and we do not use it for cross-context behavioural advertising.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at privacy@alvermere.com.

You can also complain to the Information Commissioner’s Office if you are unhappy with how we have used your data. If you are in the EU or EEA, you may complain to your local supervisory authority instead.

The Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint