HKW Risk Management Ltd is a consultancy specialising in offering bespoke solutions to businesses needing to newly implement or improve and integrate existing quality, health, safety and environmental management systems.
HKW Risk Management is a B2B consultancy and as such only collects personal data for business purposes. We use the GDPR and ICO definition of ‘personal data’ which means any “information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”. The categories of personal data we collect, and use are:
- Names and surnames
- Business email addresses
- Business phone numbers
- Business addresses
We collect your personal data in various ways such as meeting you at a networking event and you giving us your contact details, approaching you on Linked In or by being introduced by someone else.
HKW Risk Management has no need to collect sensitive personal data and does not collect or use such data.
Our lawful basis for processing as well as the purposes of the processing are detailed in the table below:
|Purpose/activity||Type of data||Lawful basis for processing|
|Providing proposals and quotes to you||Contact details||Contract|
|Carrying out work as agreed with you||Contact details||Contract|
|Applying for quotes from Certification Bodies on your behalf||Contact details||Contract|
|Contacting you with information about services HKW Risk Management can provide||Contact details||Legitimate Interest – to grow our business|
|Introducing you to other contacts in our network whom we think you might find interesting or useful. We will ask permission from both parties before the introduction.||Contact details||Legitimate Interest – to grow our business|
Individuals have the following rights:
|Your Right||HKW Risk Management Explanation|
|The right of access||If you wish to access your personal data held by HKW Risk Management, please send an email to firstname.lastname@example.org with the title Subject Access Request.
We will respond within a month.
The response is likely to consist of emails and reports which mention you.
|The right to rectification||If you wish to rectify your personal data, please send an email to email@example.com with the title Request for Rectification.
We will respond in within a month
|The right to erasure||We are unlikely to be able to delete your personal data as it is likely to be attached to a contract and work completed as part of that contract and we need to hold records of the work we have completed for business development reasons or in case of claims.
However, if you would like to be forgotten, please send an email to firstname.lastname@example.org with the title Forget Me.
We will respond within a month.
|The right to restrict processing||You can request that we stop processing your data for a specified time period.|
|The right to data portability||HKW Risk Management can provide a copy of your personal data on request, this will consist of your contact details in a spreadsheet.|
|The right to object||HKW Risk Management does not carry out any Direct Marketing|
|Rights in relation to automated decision making and profiling.||HKW Risk Management does not carry out any automated decision making or profiling.|
If you need any further information on the way we collect and use your personal data, or you have a complaint please contact us by email to email@example.com. You have the right to lodge a concern or complaint with the Information Commissioner’s Office via https://ico.org.uk/concerns/