General Data Protection Regulations
INTRODUCTION & TERMS
A Privacy Statement is a document explaining to you, if you are an individual, how your personal data will be used by us and what your rights are.
Please read the following carefully to understand our practices regarding your personal data
Martin Halligan, MPH Recovery, City Mills, Peel Street, Morley, Leeds LS27 8QL
Telephone: 01132531445 – Ask for the Privacy Officer
Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you as follows:
- Identity Data – the information we use to identify you, which may include data contained in photographs.
- Contact Data – the information we use to contact you.
- Financial Data – details of your income and expenditure, assets and liabilities and ancillary data such as your bank account details
- Transaction Data – includes details about payments to and from you
- Communications Data – your communication preferences, for example any opt out exercised by you under Insolvency legislation.
We may collect some ‘special category’ personal data from you including (but not restricted to) details of your health, or whether you are a member of a Trade Union, where this is necessary to meet our legal or regulatory obligations. We may also collect information about criminal convictions and offences and whether you have been previously involved in any personal or corporate insolvency proceedings.
HOW WE COLLECT PERSONAL DATA
The personal data we initially used to contact you was provided by the Company or Individual on whose instructions the Company is acting or in relation to which Mr Halligan has been appointed as Office holder. Your personal data may also be collected from the following sources:
- Records that our client or the insolvent Company or individual already holds about you.
- Questionnaires and Forms completed and submitted by you, for example to the Redundancy Payments Service or to us.
- Correspondence and other communications or meetings between you and the Firm, including via our website or on social media
- Information provided to the Firm by third parties in relation to an appointment, for example your bank, your professional advisers or the Insolvency Service.
- Information held in the public domain (for example, at Companies House and the Land Registry).
Other data controllers (including clients) may also provide your personal data to us.
HOW WE USE PERSONAL DATA
Most processing is carried out to comply with the Office holder’s legal and regulatory obligations or to enable MPH Recovery to provide a service in accordance with its contractual terms. Personal data will be used to verify identity (where this is required), for communications, to maintain records and process transactions. It may also be used to facilitate the performance of investigations (including the prevention of fraud), the realisation of assets and the agreement and settlement of financial claims. Your personal data may therefore be used for more than one purpose.
DISCLOSURE OF YOUR PERSONAL DATA
Mr Halligan and MPH Recovery have a legal obligation, in certain circumstances, to disclose personal data to:
- Mr Halligan’s regulatory body, the Association of Chartered Certified Accountants and its subcontractors.
- The Secretary of State (including, but not restricted to, the Official Receiver).
Mr Halligan and MPH Recovery may also be under an obligation to provide your personal data to other third parties who have a statutory right to request it (for example, HMRC and Law Enforcement Agencies) or who have obtained an appropriate court order.
We may also share your personal data with:
- Our accountants, solicitors, insurers and sub-contractors
- Other Governmental or relevant regulatory bodies.
- Third parties who support us in providing our IT systems, including our website, e mails, data backup and storage.
- Third parties who archive our paper records
- Third party professional service providers instructed on a case by case basis by the Office holder or the Firm, including (but not restricted to) accountants and tax advisers, solicitors, valuers, debt collection agencies and service providers who may assist with the calculation of employee claims or pension deficits and contributions. They will only process your data on our instructions and they are under a professional duty of confidentiality.
PROTECTION OF YOUR PERSONAL DATA
Policies and commercially reasonable and appropriate procedures are in place to safeguard your personal data from loss, misuse and improper disclosure.
- Relevant training
- Digital personal data is held in secure data centres potentially located worldwide (and therefore potentially outside of the EEC).
- Paper personal data is held at the Firm’s offices in Morley, or, if the case has been closed, in a secure off-site third party storage facility.
We also have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
All our third-party service providers are required to take appropriate security measures to protect your personal information. We only allow third-party service providers to process your personal information for specified purposes and in accordance with our instructions.
MPH Recovery must make this privacy notice available with the emphasis on transparency over how we process your data.
You are entitled to find out what details we hold about you and why.
We are obliged to correct and update your details.
The request to be forgotten. This right does not apply when we hold your data under a legal obligation.
You have the right to block or suppress the processing by us of your personal data. This right does not apply when we hold your data under a legal obligation.
You have the right to obtain and reuse your personal data that you have provided to us. This right does not apply when we hold your data under a legal obligation.
You have the right to object us processing your data in relation to direct marketing and or profiting only. This right does not apply when we hold your data under a legal obligation.
We will only retain your personal data for as long as necessary. This necessity includes the purposes of satisfying any legal, accounting, regulatory or reporting requirements.
In line with these requirements personal data will generally be held for no longer than 6 years after the closure of an assignment or insolvency appointment.
If you have opted out of receiving future correspondence from us, your contact details will remain on our opt-out list to prevent you from receiving any further correspondence from us except where we are obliged to contact you by insolvency legislation.
Your have the right to erasure under specific circumstances. A request for deletion of your personal data will be adjudicated upon on a cases by case basis and any request must be submitted in writing, as detailed above.
MPH Recovery will correct or update your data without delay provided you make the request in writing to the contact details provided in this policy, clearly specifying which data is incorrect or out of date.
We strive to be as open as we can be in terms of giving people access to their personal data. Individuals can find out if we hold any of their personal data by making a formal request under the Data Protection laws. Such requests must be in writing to the details set out in this policy. If we hold personal data we will respond in writing within one calendar month of your request, where requested in accordance with the policy. The information we shall supply will:
- Confirm that your data is being processed;
- Verify the purpose of the processing;
- Categories of personal data being processed;
- Confirm the type or recipient to who the personal data have been or will be disclosed, and
- Let you have a copy of the data in an intelligible form.
You willl need to provide identification in order to prove who you are to access your data.
In the first instance, and if you agree, we will try to informally deal with your request by providing you with the specific information you need over the telephone.
In the instance that we do not hold information about you, we will also confirm this at the earliest opportunity in writing.
You have the right to complain about the processing of your personal data. Please contact us using the details above. If you are still dissatisfied you have the right to complain to The Information Commissioners Office.
We may amplify this Privacy Statement at the point of data collection.
We may change the terms of this Privacy Statement from time to time and will place any updates on our website www.mph4recovery.com/gdpr. This version is dated 25 May 2018.
Paper copies of this Privacy Notice can be obtained free of charge by written request to our offices at the address given above.