Supplier Terms and Conditions

Suppliers (and individuals connected with our suppliers)

We aim to collect personal data about our suppliers (which for the purposes of this notice includes subcontractors that we use to provide services to clients) only to the extent necessary for us to receive services and goods from our suppliers, manage our relationship with our suppliers and facilitate the provision of services to our clients. Our suppliers may refer data subjects to this Privacy Notice. We generally collect personal data directly from our suppliers but sometimes also from third parties such as credit rating agencies.

Such personal data may be used for the following purposes:

• Provision of professional services – We undertake a wide range of services, including Audit, Tax, Advisory and Outsourcing services. We may have to process personal data received from suppliers in order to perform such services and/or provide advice and deliverables to our clients. 
• Managing, administering and developing our business – We process personal data in order to manage our relationship with clients, develop our business and services, maintain and develop our IT systems, manage and host events, and to administer and manage our website, systems and applications.
• Quality and risk management and security – we use various measures to protect personal data and other client information, which include monitoring the services provided to clients to detect, investigate and resolve security threats. Such monitoring may involve processing personal data, for example the automatic scanning of email correspondence for threats. Our supplier take-on procedures involve processing personal data that may be obtained from publically available sources (such as sanctions lists, criminal convictions databases, and general internet searches) to identify any risks relating to individuals and organisations that may prevent us from working with a particular supplier.
• Providing information about our services to our clients – unless the relevant individual has opted-out, we may use supplier (typically subcontractor) business contact details to provide information about our services.
• Compliance with legal and regulatory obligations – as a regulated firm, we are subject to various legal, regulatory and professional obligations that may require us to process and/or retain personal data obtained from suppliers.