Privacy Notice

The Type of Personal Information Collected:

The information Halcyon Three collects will depend on the reason it is collecting it and the nature of the relationship with the Client. It is policy to collect only the minimum information required. If you believe Halcyon Three has collected excessive information about you, please make contact by the means indicated in the Contact details section above to raise any concerns you may have.

Where Halcyon Three needs to collect personal data in relation to providing services, you are kindly asked to provide only the data that has been requested.

Although you do not have to provide any of your personal information, if Halcyon Three asks you to do so and you refuse, it may be unable to provide you with the information, goods or services you have requested.

When providing other data subjects’ information, such as your family or your employees, you must ensure you have a lawful basis for doing so.

Examples of the personal information Halcyon Three may collect include:

Clients and prospective clients including associated individuals

  • Name;

  • Contact details including phone, email, address and any other relevant contact details;

  • Personal details such as date of birth, gender, marital status;

  • Financial information including pay, benefits, and other financial information relevant to the services Halcyon Three provides;

  • Employment details;

  • Training or performance data;

  • Recruitment information including CVs and interview records;

Business contacts including suppliers, partners, contractors and individual contacts at supplier organisations

  •  Name;

  • Contact details including phone, email, address and any other relevant contact details;

  • Employer/associated business name; and/or

  • Job title

  • Bank and payment details;

  • Fee and payment details;

 How personal information is obtained and why Halcyon three has it: 

 Most of the personal information processed by Halcyon Three is provided directly by Clients for one of the following reasons:

In order to effectively carry out services as agreed with the Client;

  • To facilitate ongoing contact with Clients or their employees as part of agreed services;

  • To develop business and services;

  • To conduct quality and risk management reviews;

  • Any other purposes for which you provided the information;

Halcyon Three does not collect personally identifying information for sale to third parties. 

Under the General Data Protection Regulation (GDPR), the lawful bases Halcyon Three relies on for processing this information are: 

  • to perform contractual obligations to you or;

  • legitimate interests in the effective delivery of information and services to you and in the effective and lawful operation of business (provided these do not interfere with your rights);

  • to satisfy any legal and regulatory obligations to which Halcyon Three is subject; and/or

  • where no other condition for processing is available, if you have agreed to Halcyon Three processing your personal information;

Your consent:

You are able to remove your consent at any time. You can do this by contacting amanda.underwood@halcyonthree.com. 

Security of your personal information:

Halcyon Three has implemented generally accepted standards of technology and operational security in order to protect personally identifiable information from loss, misuse, alteration or destruction.

Only authorised persons are provided access to personally identifiable information collected, and such individuals have agreed to maintain the confidentiality of this information.

Although appropriate security measures are used once Halcyon Three has received your personal data, the transmission of data over the internet (including by e-mail) is never completely secure.

Although it will endeavour to protect personal the security of personal data transmitted to or from Halcyon Three cannot be guaranteed.

Retention of personal Data

Storage and destruction of Data:

Halcyon Three will destroy correspondence and other files that it stores electronically or otherwise once it is deemed these to be no longer relevant except those that are required by law or professional guidelines to be kept for specified periods. Unless Halcyon Three is required to keep data for specified periods, it will typically keep it for no longer than six years. 

Your data protection rights:

Under data protection law, you have rights including:

Your right of access - You have the right to ask Halcyon Three s for copies of your personal information;

Your right to rectification - You have the right to ask Halcyon Three to rectify personal information you think is inaccurate. You also have the right to ask Halcyon Three to complete information you think is incomplete;

Your right to erasure - You have the right to ask Halcyon Three to erase your personal information in certain circumstances; 

 Your right to restriction of processing - You have the right to ask Halcyon Three to restrict the processing of your personal information in certain circumstances;

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances;

Your right to data portability - You have the right to ask that Halcyon Three transfers the personal information you gave to another organisation, or to you, in certain circumstances;

You are not required to pay any charge for exercising your rights. If you make a request, Halcyon Three will have one month to respond to you.

Please contact amanda.underwood@halcyonthree.com  if you wish to make a request.

How to complain:

If you have any concerns about the use of your personal information, you can make a complaint to amanda.underwood@halcyonthree.com 

You can also complain to the ICO if you are unhappy with how Halcyon Three has used your data.

The ICO’s address:     

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Helpline number:                 0303 123 1113

ICO website:                         https://www.ico.org.uk