MARSHALL MURRAY LTD PRIVACY NOTICE

This Privacy Notice explains how Marshall Murray Limited (“the Company”) collects, uses, and discloses your personal data, and your rights in relation to the personal data it holds.
In this Privacy Notice, “us”, “we” and “our” refers to the Company.
The Company is the data controller of your personal data and is subject to the Data Protection Act 1998 (“DPA”) (and, once in force, to EU Regulation 2016/679 (the “GDPR”)).
We may amend this Privacy Notice from time to time, to reflect any changes in the way that we process your personal data. This Privacy Notice supersedes any previous version which you may have been provided with, or had sight of, before the date stated at the end of this notice, as well as anything to the contrary contained in any agreement with us.

YOUR RIGHTS
Under the DPA you have the following rights:
➢ To obtain access to, and copies of, the personal data that we hold about you;
➢ To require that we cease processing your personal data if the processing is causing you damage or distress; and
➢ To require us not to send you marketing communications.
Once the GDPR comes into force in May 2018, you will also have the following additional rights:
➢ To require us to erase your personal data;
➢ To require us to restrict our data processing activities;
➢ To receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller; and
➢ To require us to correct the personal data we hold about you if it is incorrect.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
You can find out more about your rights under data protection legislation at www.ico.org.uk
If you have any questions about how we use your personal data, or you wish to exercise any of the rights set out above, please contact us at enquiries@marshallmurray.co.uk If you are not satisfied with how we are processing

HOW WE COLLECT YOUR DATA
We may collect your personal data in a number of ways, for example:

➢ when you communicate with us by telephone, video conference, fax, email or other forms of electronic communication. In this respect, we may monitor, record and store any such communication;
➢ when you complete agreements or other forms;
➢ from your agents, employees and advisers

➢ from the information and documentation you provide to us;
➢ from publicly available sources or from third parties authorized by you.

THE CATEGORIES OF THE DATA WE COLLECT
We may collect the following categories of personal data about you:

➢ your name, and contact information such as address(es), email address(es) and telephone number(s), as well as your date of birth, country of domicile and nationality;

THE BASIS FOR PROCESSING YOUR DATA, HOW WE USE IT AND WHOM WE SHARE IT WITH
Where We Process Your Data Other Than With Your Consent
We may process your personal data without your specific consent because it is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.

In this respect, we use your personal data for the following:
➢ to prepare a scope of work for you regarding the advice we offer;
➢ to provide you with the advice as set out in our Terms of Engagement with you or as otherwise agreed with you from time to time;
➢ to deal with any complaints or feedback you may have; and/or
➢ for any other purpose for which you provide us with your personal data.

In this respect, we may share your personal data with the following:
➢ your advisers, agents and other third parties with your consent;
➢ third party service providers who we may engage on your behalf;
➢ advisers or agents where it is necessary for us to obtain their advice or assistance, for example, foreign legal advisors and/or counsel or other specialists;
➢ registered agents;
➢ our data storage providers

We may also process your personal data because it is necessary for our legitimate interests.
In this respect, we may use your personal data for the following:

➢ For the administration and management of our business, including recovering money you owe to us;
➢ Seeking advice on our rights and obligations, such as where we require our own legal advice;
➢ To monitor, record or store telephone conversations.In this respect we may share your personal data with the following:
➢ Our advisers or agents where it is necessary for us to obtain their advice or assistance;
➢ With third parties and their advisers where those third parties are acquiring, or considering acquiring, all or part of our business.
We may also process your data for our compliance with a legal obligation which we are under.
In this respect, we may use your personal data for the following:
➢ To meet our compliance and regulatory obligations, such as compliance with anti-money laundering and revenue laws,
In this respect, we may share your personal data with the following:
➢ Our advisers where it is necessary for us to obtain their advice or assistance;
➢ Our auditors where it is necessary as part of their auditing functions;
➢ With relevant tax authorities, regulators or law enforcement agencies, where we are required to do so

RETENTION OF YOUR DATA
We may retain your personal data for a period of at least seven years after the termination of our relationship with you in case any claims arise out of the provision of our services to you. However, where we have collected client due diligence data as required by anti-money laundering (AML) laws, we will retain that AML related personal data for five years after the termination of our relationship, unless we are required to retain this information by another law or for the purposes of court proceedings.