Supplier privacy notice

Data that we process

As a supplier, we hold the contact and payment details required to carry out our contract with you and data to manage our relationship with you. This data would have been sourced from you directly, although your contact details may have been sourced from a recommendation or another source, with the intention of entering into a contact with you.

Lawful basis for processing

Our lawful basis for processing your data is contract; all data is used to enable us to fulfil our contract with you, including paying you and managing our relationship with you.

Retention period

We hold your data for the length of time you are a supplier to us and for 7 years afterward in case of any disputes and for accounting purposes.

Data sharing and transfers

Like most companies, we use a number of other companies as part of our data processing, for example cloud services and technology services. We have data processing agreements in place with these providers. Where data is transferred outside of the EEA, we ensure that appropriate protection and mechanisms are in place, for example standard contractual clauses. We do not sell your data to anybody. If data is transferred from the UK to the EEA then it is done so on the basis of those countries having a comparable data protection regime to the UK (adequacy).

We may share your contact details if someone asks us for a recommendation. We will always contact you before we do this unless it is your company name and switchboard phone number that we share.