2. Personal information collection
For the purposes of the Data Protection Act 1998 (DPA) and General Data Protection Regulation (GDPR), PwC UK is the “data controller”.
We collect certain information or data about you when you use our website and email us. This includes;
questions, queries or feedback you leave, including your name and email address if you contact us
information about your use of our website services including what pages you visited, how long you visited the website for
The general categories of personal information that we may collect for the aforementioned purposes are as follows:
When you register with us, you are agreeing that you are over 18 years of age or are acting with parental consent.
2.1. Using personal information
We may use your personal information to;
administer and personalise this website for you
send you news and communications relevant to you
use your email address for survey purposes via a third party organisation
2.2 Lawful basis
Under the GDPR (General Data Protection Regulation) we control your personal information about you electronically using the following lawful bases:
legitimate interests: we may process information on the basis there is a legitimate interest, either to you or to us. Where we process your information on this basis, we do after careful consideration whether the same objective could be achieved through other means and whether you would expect us to process your data, and whether you would consider it reasonable to do so. For example, in order to deliver our services for your benefit, we may share your personal data with a trusted third party organisation for the purpose of our business activities or to conduct a survey to better understand your needs and requirements of us as set out in section 2.1
2.3. Where your data is stored
We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.
Your personal data may, throughout the course of its processing, be transferred outside of the European Economic Area (EEA). Where this is the case, all appropriate technical and legal safeguards will be put in place to ensure that you are afforded the same level of protection as within the EEA.
2.4. Information disclosure
We may also need to disclose your information if required to do so by law and for the purpose of defending our legal rights (including providing information to others for the purposes of fraud prevention).
2.5. Information protection
We take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. All personal information is stored securely in accordance with the principles of the General Data Protection Regulation.
By using our website services, you acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
2.6. Cross-border data transfers
In addition, personal information that you submit for publication on the website will be published on the internet and may be available around the world.
You agree to such cross-border transfers of personal information.
3. Your individual rights
Under the GDPR your rights in relation to the personal data we hold are expressed as follows. You have;
the right to be informed about how we use your personal data
the right of access to the data we hold
the right to rectification of any data we hold;
the right to erasure of your data
the right to restrict processing of your data
the right to data portability of your data
the right to object; and
the right not to be subject to automated decision-making including profiling
You also have the right to complain to the ICO (opens in a new window) if you feel there is a problem with the way we are handling your data.
3.1. Accessing your personal information
Individuals can find out if we hold any personal information by making a ‘subject access request’ under the General Data Protection Regulation (GDPR). If we do hold information about you, we will:
give you a description of it;
tell you why we are holding it;
tell you who it could be disclosed to; and
let you have a copy of the information in an intelligible form
You may request a copy of the personal information by emailing us at: firstname.lastname@example.org
3.2 Data retention period
Personal data that we process shall not be kept for longer than is necessary. Our retention period is in line with the default legal standard retention period which is specified as 6 years.
3.3 Withdrawing your consent
You may exercise your right to withdraw your consent in relation to your personal data being used at any time by written notice to us via email to: email@example.com
By withdrawing your consent this does not affect the lawfulness or processing based on consent before its withdrawal.
4. Visitors to our websites
When someone visits our website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
Our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. To opt out of being tracked by Google Analytics across all websites visit Google (opens in a new window).
We use the following types of cookies:
Strictly necessary cookies: These cookies are essential for the user to move around the website and to use its features
Performance cookies: These cookies collect information about how the user makes use of the site, e.g. which pages the user visits most. These cookies do not collect information that identifies the user
Functionality cookies: These cookies remember choices made by the user and enhance the features, e.g. language or users location. This cookie is also used to remember a user’s preferences for a font size, or customisable parts of a web page
4.2. Collecting information with cookies
the website pages you visit
how long you are on the website for
whether you are a new or returning user
how you came to the website
the type of device and browser you use
4.3. Disabling or deleting cookies
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit About Cookies or All About Cookies. If you disable cookies by blocking them, or delete cookies, the functionality of the website will likely be affected.