Privacy Policy

 

At GMS, we are committed to protecting your privacy and safeguarding your personal information.

This Privacy Policy explains how we collect, use and safeguard your personal information in accordance with applicable data protection laws.

1. How We Collect Your Information
2. How We Use Your Information
3. Data Processing Purposes and Lawful Bases
4. Website Cookies
5. How We Use Cookies and Personal Information
6. Data Sharing
7. Data Retention
8. Data Security
9. Your Rights

How We Collect Your Information

We may collect personal information from the following sources:

> Directly from you – When you interact with us, including when you complete forms, register for our services or make an enquiry.
> Through authorised representatives – Including agents or other third parties acting on your behalf.
> From partners and clients – Including business partners, collaborators and service providers with whom you interact.
> Through online platforms – Including social media and professional networking platforms.
> By referral – Through recommendations or introductions made by existing contacts, clients or other third parties.

How We Use Your Information

We use your personal information only where necessary to respond to your enquiries, provide the services or information you have requested, or to fulfil a request made on your behalf by someone authorised by you, maintain effective communication and fulfil our legal and regulatory obligations. We are committed to the principle of data minimisation and will collect, use and retain only the personal information that is necessary for these purposes.

Data Processing Purposes and Lawful Bases

Under UK data protection law, we must have a lawful basis for collecting, using and sharing your personal information. Depending on the circumstances and the purpose of the processing, we may collect and share your personal data with our clients, partners and third-party service providers as part of the engagement process. This may include processing and sharing information for purposes such as finance and audit, employment and contractor setup, immigration, onboarding and related support services. Where necessary to provide our services, we may also share your information with specialist providers, including payroll, insurance and travel agencies.

Website Cookies

Like most websites, our website uses cookies to support functionality, security and performance. Cookies are small text files stored on your device that help us understand how visitors use our website and enable us to improve your experience. Cookies may collect technical information, such as your IP address, browser type, device information and pages visited. Depending on the type of cookie used, this information may not directly identify you. You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of some features of our website.

How We Use Cookies and Personal Information

We use information collected directly from you and through cookies to operate, maintain and improve our website, communicate with you effectively and meet our legal and regulatory obligations. Where required by applicable law, we process personal data on the basis of your consent. We may also process personal data where necessary for our legitimate business interests, including managing communications and providing our services, or where processing is necessary to comply with a legal or regulatory obligation.

Data Sharing

We do not share your personal information with third parties except where required by law or where necessary to provide our website functions, email communications or services. As part of our engagement process, this may include sharing your personal information with clients, partners and third-party service providers, including providers of payroll, insurance and travel services, where necessary to deliver our comprehensive services. Any third parties acting on our behalf are contractually obliged to maintain appropriate standards of data protection and security.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or for such longer period as may be required or permitted by applicable law. All business and personal data is stored and managed using Microsoft Cloud Services.

Data Security

We maintain appropriate technical and organisational measures designed to protect your personal data against unauthorised access, misuse, loss, destruction, alteration or disclosure. While we take reasonable and appropriate steps to protect your information, no method of transmitting information over the internet or storing information electronically is completely secure. Accordingly, we cannot guarantee the absolute security of your personal data. 

Your Rights

The UK GDPR sets out a number of lawful bases on which personal data may be processed, depending on the circumstances and purpose of the processing. Further information about lawful bases for processing personal data, your data protection rights and applicable exemptions is available on the website of the Information Commissioner’s Office (ICO) UK. GMS is registered with the Information Commissioner’s Office (ICO) under registration reference ZC200148.

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
  Read more about the right of access.

• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
  Read more about the right to rectification.

• Your right to erasure – You have the right to ask us to delete your personal information.
  Read more about the right to erasure.

• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
  Read more about the right to restriction of processing.

• Your right to object to processing – You have the right to object to the processing of your personal data.
  Read more about the right to object to processing.

• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
  Read more about the right to data portability.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
  Read more about the right to withdraw consent.