Privacy Notice

2.      Scope of this privacy notice

This Privacy Notice applies to all personal data collected and processed by RSMB in the course of our business activities, including data collected through our website, during service provision, and through other interactions with clients, suppliers, and partners.

‍

3.      What personal data do we collect?

We may collect and process the following categories of personal data:

• ‍Identity Data: Name, job title, company name, and organisation type.
• Contact Data: Address, email address, and telephone numbers.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on devices used to access our website.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

We do not collect ‘special categories’ of personal data. (‘Special categories’ of data include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, or health information).  We also do not collect information about criminal convictions and offences.

‍

4.      How do we collect your personal data?

 We use different methods to collect data from and about you, including:

• Direct Interactions: You may provide personal data when you fill in forms, correspond with us by post, phone, email, or otherwise, or during the course of our business relationship.
• Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. See Cookie Declaration later in the section.
• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties, for example partners that host our solutions, analytics providers, advertising networks, search information providers, and publicly available sources.

Cookie Declaration. Specifically for our company websites (rsmb.co.uk, rsmb.solutions and data-fusion.co.uk/) . We use cookies to provide and make improvements to our websites, ensure that our websites are secure, analyse how users interact with our websites and address any issues you may experience with our websites. We may also use cookies to ensure you get relevant communications from us should we advertise on social media or other websites. You consent to our cookies if you continue to use our websites. If cookies are disabled you will still be able to access our websites, however some content may not function correctly.

‍

5. How and why do we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you.
• Legal or Regulatory Obligation: Where we need to comply with a legal or regulatory obligation.
• Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Consent: Where you have provided your consent to us using your personal data.

Additionally, we may process personal data when performing work on behalf of our clients. In such cases, we act as either a data controller or a data processor, depending on the nature of the work and our agreement with the client. When acting as a data processor, we will process data solely in accordance with the instructions provided by our client and in compliance with applicable data protection laws, including the UK GDPR and/or the EU GDPR.

Our responsibilities as a data processor include implementing appropriate technical and organisational measures to protect personal data, ensuring the confidentiality of processing, and assisting our clients in meeting their own data protection obligations where applicable.

If you have any questions about whether we are acting as a data controller or a data processor in relation to specific processing activities, please contact us at contact@rsmb.co.uk.

‍

6. How do we share your personal data

We may share your personal data with:

• Service Providers: Third parties who provide services on our behalf.
• Professional Advisers: Including lawyers, bankers, auditors, and insurers.
• Regulatory Authorities: HM Revenue & Customs, regulators, and other authorities.
• Third Parties: To whom we may choose to sell, transfer, or merge parts of our business or our assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

‍

7.      International transfers

We primarily store and process your personal data within the United Kingdom (UK) and the European Union (EU). This ensures compliance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). The EU considers the UK GDPR to be adequate and data can flow between the UK and EU under this adequacy decision. Note that different arrangements between the EU and UK apply for data for the purposes of immigration control and RSMB does not hold or process data for this purpose other than as may apply to its own staff.

If it becomes necessary to transfer your personal data outside the UK or the EU, we will ensure that a similar degree of protection is afforded to it by implementing appropriate safeguards, including:

• Adequacy Decisions: Where the receiving country is recognised as providing an adequate level of data protection under UK and/or EU law.
• Standard Contractual Clauses (SCCs): Using legally binding agreements approved by the UK and/or EU.

Specifically, some of our company websites (rsmb.co.uk and rsmb.solutions) are hosted on servers commissioned by our provider Webflow. Webflow is certified under the EU–U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework which requires them to provide similar protection to personal data shared between the Europe and the US, and means that the transfer is in accordance with European data privacy laws.

‍

8. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

‍

9. How long RSMB keeps personal data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

‍

10. Third party links

Our company websites may contain links to other sites operated by third parties whose information practices may be different than ours. Please consult all third party sites’ privacy notices as we have no control over information that is submitted to, or collected by, third parties.

‍

11. Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us at contact@rsmb.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”), which is the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, be grateful if you would contact RSMB in the first instance so we can endeavour to deal with your concerns direct.

‍

12. Changes to this privacy notice

We may update this Privacy Notice from time to time. Any changes we make will be posted on this page, and where appropriate, notified to you by email.

‍

This privacy notice was last updated on 15th January 2025. The previous version was limited to our websites, this version has been expanded to be a more general policy.