Privacy Statement

Data controller

Parker Russell UK LLP (registered number OC427192) and Parker Russell Ltd (company number 11972393) are registered in England and Wales and act as data controllers in relation to personal data processed under this Privacy Statement.

Registered office:

Data controller registration numbers:

• Parker Russell UK LLP: 4646464
• Parker Russell Ltd: 8585858

Personal data we collect

Depending on how you interact with us, we may collect and process:

• Identity information (such as name, title, employer, and job role)
• Contact details (such as email address, telephone number, postal address, and business contact information)
• Professional and business information
• Client due diligence and compliance information where legally required
• Recruitment and employment-related information
• Website usage and technical information (including analytics, IP address, browser type, device data, and cookies where permitted)
• Communications and correspondence with us

We only collect personal data that is reasonably necessary for lawful business purposes.

How we use personal data

We may process personal data to:

• Provide professional and business services
• Manage client relationships and communications
• Respond to enquiries and requests
• Meet legal, regulatory, professional, and compliance obligations
• Administer contracts and business operations
• Improve website functionality and user experience
• Protect our systems, business operations, and information security
• Recruit employees and contractors
• Exercise or defend legal rights and claims

We process personal data only where there is a lawful basis to do so under applicable law.

Lawful bases for processing

Depending on the circumstances, we may process personal data where:

• Processing is necessary for the performance of a contract
• Processing is necessary to comply with legal or regulatory obligations
• Processing is necessary for legitimate business interests
• Consent has been provided (where required)
• Processing is necessary to establish, exercise, or defend legal claims

Where consent is relied upon, you may withdraw consent at any time.

Security of personal data

We maintain appropriate technical and organisational security measures designed to protect personal data against accidental or unlawful destruction, loss, misuse, unauthorised access, disclosure, or alteration.

We maintain policies, procedures, confidentiality obligations, staff training, and security controls relating to privacy, cybersecurity, and information governance, which are reviewed periodically to maintain effectiveness.

International transfers of personal data

In the course of providing services or operating our business, personal data may occasionally be transferred outside the United Kingdom.

Where this occurs, we will ensure appropriate safeguards are in place to protect personal data, including adequacy regulations, contractual protections, or other legally recognised transfer mechanisms in accordance with applicable law. ICO guidance continues to emphasise safeguards and transparency for international transfers.

Sharing personal data

We only share personal data where lawful and appropriate.

We may share personal data with:

Service providers and advisers

Third parties who support our business operations or professional services, including:

• IT, hosting, cloud, and software providers
• Cybersecurity, storage, and backup providers
• Legal, professional, audit, insurance, and compliance advisers
• Payment, operational, and administrative service providers

Regulatory and legal authorities

Regulators, courts, law enforcement agencies, governmental bodies, and supervisory authorities where required or permitted by law or professional obligation.

Parties involved in professional services

Third parties involved in providing professional or contractual services where disclosure is necessary and appropriate.

We do not sell personal data to third parties.

Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, professional, accounting, regulatory, contractual, and operational requirements.

Retention periods vary depending on the nature of the relationship, services provided, legal obligations, and business requirements.

Your rights

You may have rights under applicable data protection law, including rights to:

• Access personal data we hold about you
• Correct inaccurate personal data
• Request deletion of personal data in certain circumstances
• Restrict processing
• Object to certain forms of processing
• Receive a portable copy of certain personal data
• Withdraw consent where processing is based on consent

We will respond to requests within applicable legal timescales.

You may also update personal data held by us by contacting your usual Parker Russell contact or contacting us directly.

Complaints

If you have concerns regarding our handling of personal data, please contact us in the first instance and we will investigate and seek to resolve the issue promptly.

You also have the right to complain to the UK regulator, the Information Commissioner’s Office.

The ICO has recently updated guidance relating to privacy notices, storage and access technologies (including cookies), and related transparency obligations.

Contact us

If you have any questions about this Privacy Statement or how personal data is processed, please contact:

• Contact: Joy Griffiths
• Email: jgriffiths@parkerrussell.co.uk
• Telephone: 020 7378 7500