Aiteo Consulting - Privacy & Data Protection Policy

Registration

We are registered as a data controller with the Information Commissioner’s Office. Registration reference ZA146202.

Type/classes of information processed

We process information relating to the above reasons/purposes. This information may include:

• personal details
• family, lifestyle and social circumstances
• goods and services
• financial details
• education details
• employment details

We also process sensitive classes of information that may include:

• physical or mental health details
• racial or ethnic origin
• religious or other beliefs
• trade union membership

Who the information is processed about

We process personal information about customers and clients, advisers and other professional experts and employees.

Who the information may be shared with

We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons. Where necessary or required we share information with:

• business associates, professional advisers
• family, associates and representatives of the person whose personal data we are
  processing
• suppliers
• local and central government
• financial organisations
• ombudsmen and regulatory authorities
• credit reference and debt collection agencies
• healthcare professionals, social and welfare organisations
• current, past or prospective employers
• examining bodies
• service providers

Transfers

It may sometimes be necessary to transfer personal information overseas. When this is needed information is only shared within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the data protection act.