Supplier Privacy Notice
(Including Subcontractors and Associated Individuals)
This privacy notice outlines what to expect as a supplier regarding the personal information collected and processed by Kemp & Company Limited. Why we collect information, what information we collect, how we intend to use that information and whether we will share that information with anyone else.
Collection of personal information
We collect and process personal information on our suppliers (including subcontractors and individuals associated with our suppliers and subcontractors) to:
- establish and manage our relationship,
- purchase goods and/or services,
- make payments to you and to provide professional services to our clients.
Personal information we collect
We only collect information about you which is relevant to procuring goods and/or services and making payments. All information we collect will be directly from you and includes your name, contact and bank account details. This information is collected for the following purposes, to:
- procuring and paying for goods and/or services you provide
- collate evidence for handling complaints and legal disputes
- relationship management and fulfilling legal obligations e.g. fraud prevention.
We typically will only use your personal information for the purposes for which we collect it. We will not collect personal information about you that is considered special category data.
Lawful basis for processing personal information
Where a contract exists between us or where we are entering into a contract with you then we may collect personal information for the purpose of that contract. We use a contract to ensure the right controls are in place and the collection and use of personal information is proportionate and lawful.
Were no contract exists we will collect and use personal information on a legitimate interest basis, i.e. in a way that you would expect such as using said information to pay you for services rendered.
Sharing of your personal information
We will share your personal information with third parties service providers, where it is necessary to administer the contractual relationship with you and with other third parties where required by law.
The only third parties we intend to share your data with is our bank in order to facilitate payments, however we may share information where we have a legal obligation e.g. tax office, police.
All our third-party service providers are required to take appropriate security measures to protect your personal information.
Retention of Personal Information
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected and to fulfil any legal obligations we may have. When assessing what retention period is appropriate for your personal data, we take into consideration:
- the requirements of our business and the services provided;
- any statutory or legal obligations;
- the purposes for which we originally collected the personal data;
- the lawful grounds on which we based our processing;
- the types of personal data we have collected;
- the amount and categories of your personal data; and
- whether the purpose of the processing could reasonably be fulfilled by other means
What if I do not want to provide personal information?
If you will not provide personal information required for the purposes outlined in this notice, we may not be able to perform the contract we have entered into with you (such as making payments without your bank information).
Security of your information
We have in place appropriate security measures to prevent your personal information from being compromised, lost, used in an unauthorised way, altered or disclosed unlawfully. In addition, we limit access to your personal information to those employees, directors, and other third parties who have a need to know and are subject to a duty of confidentiality.
Your rights
By law you have several rights in relation to your personal information. You can:
- access and obtain a copy of your data on request
- ask us to change incorrect or incomplete data
- ask us to delete or stop processing your data
- object to the processing of your data, where you believe we do not have a legitimate interest for processing your information
- ask the organisation to stop processing data
For all requests involving your rights, we have to balance our legal obligations with your request, so will need to investigate and determine if we can uphold your right.
PRIVACY NOTICES CHANGES
This privacy notice may be updated from time to time, so you may wish to check it each time you submit personal information to Kemp & Company Limited. If you do not agree to any changes, please do not continue to give your personal information to Kemp & Company Limited. You can also make a request to have the personal information Kemp & Company Limited hold about you deleted at any time (this may not be possible where we have legal reasons to keep personal information we hold about you).
This privacy notice was last updated on 1 July 2021.
CONTACT US
If you have any questions, concerns or complaints about how your personal information is being processed, stored or that your personal information has been compromised, please contact us immediately.
Please address requests and questions regarding your personal information or about this privacy notice to the Data Protection Point of Contact, Angus Kemp at angus@kemp.gg, via telephone on 01481 253050 or via mail at:
Suite A
Stan Brouard Complex
Landes du Marche
Vale
GY6 8DE