Introduction

We recommend reading our privacy policy as it will help you understand how we collect and use personal data from individuals, our clients, suppliers and others during the course of our business. We commit to only use personal data that remains strictly limited to the purposes described in this privacy policy or as stated during the point of collection. We operate this website for the purpose of promoting the services provided by us, and the use of our website signifies your consent and acceptance of these conditions in return for which we shall provide you with access to our website. We regularly review this privacy statement and may make changes at any time without prior notice.

About us

Touchstone Advisory Limited (hereinafter referred to as “Touchstone Advisory” is a company registered in England bearing registration number (12937481) having its registered office at Touchstone Advisory Limited , 71-75 Shelton Street , Covent Garden, London, WC2H 9JQ We are also registered as a data controller with the registration number ZB034191.

Purpose of this Privacy Policy

The purpose of this privacy policy is to give you information on how Touchstone Advisory collects and processes your personal data through your use of this website. It is essential that you read this privacy policy together with any other privacy notice or fair processing notice that we may provide you on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we use your data.

Your information that we collect

Personal data, or personal information, is any information based on which an individual can be identified. We shall collect such information, as is also listed below, for the purpose of our use and records. We capture your location based on your ID in order to show you the most relevant data for your ease. Additionally, we may further collect, store, use and transfer different kinds of personal data about you, which we have listed below:

  • Identity Data

    includes first name, last name, title, employer, job title.

  • Contact Data

    includes first name, last name, title, employer, job title.

  • Transaction Data

    includes first name, last name, title, employer, job title.

  • Technical Data

    includes first name, last name, title, employer, job title.

  • Usage data

    includes first name, last name, title, employer, job title.

  • Marketing and Communications Data

    includes first name, last name, title, employer, job title.

We may also use and share the information that we collect to compile aggregated data such as statistical or demographic data for any purpose. Aggregated data is derived from your personal information but is not considered as personal data under law as it does not directly or indirectly reveal your identity. In any scenario where we combine or connect the aggregated data with your personal data such that it directly or indirectly identifies you, we shall treat the combined data as personal data, which will be used in accordance with this privacy policy and the laws applicable within the territory of United Kingdom.

In any scenario where you fail to provide us any personal information which we lawfully require under the terms of any agreement executed by and between us, we may not be able to fulfill our obligations under such contract or any other contact we are willing to execute with you. In any such scenario, we may have to cancel services that you have with us, subject to a written notification which shall be provided to you before termination of our services.

How we collect this information?

  • Direct Interactions

    via your identity card and contact data by corresponding with us through phone, post, email or if you subscribe to your company updates.

  • Automated Technologies and Interactions

    through our website, we may automatically collect Technical Data about your equipment, browsing activity and patterns. This data shall be collected by us through cookies, server logs and other similar technologies. Your location data is stored in a cookie which is stored for a day.

How we use this information?

We shall at all times undertake to adhere to the data protection legislation in relation to any personal data shared by you and will only use such data to the extent that law allows us. Most commonly, we will use your personal data in the following ways:

  • For the performance of services under the contract executed by and between us.

  • For the purpose of performing our services under any other prospective contract to be executed at any time in future.

  • For the protection of our legitimate interests such as ensuring the quality of services, we provide to you, collecting information for marketing purposes, communicating with you.

  • To ensure that we are in compliance with a legal or regulatory obligation.

Why we need this information?

Our primary purpose behind collecting personal information is to provide you a safe, smooth and customized user experience of this website and to provide the services you have requested. We may also use this information to ensure that the content on our website is presented in the most effective manner for you and your computer. In addition to the same, your information shall be used by us for the following other purposes, which shall include the following:

  • To carry out our obligations arising out of any contract executed between you and us and to provide you with the information, products and services that you request from us;

  • To ensure efficient administration and management of our business and client relationships;

  • To notify you about changes to our service;

  • To ensure the security and quality of our service along with any risk management activities;

  • To ensure that we comply with any requirement in law, regulation or towards a professional body of which we are a member;

  • To ensure that the content on our website is presented in the most effective manner for you and your computer;

  • As part of our efforts to keep our website safe and secure;

  • To consider your application where you have applied for a position with us; and

  • To send you our newsletters or updates, or to make suggestions and recommendations to you and other users of our website about services that may interest you or them.

Provision of information to third parties

Your information is only provided to a third party if it is required for the purposes of providing you services in the contract executed by and between us or where it is expressly required in order to deal with any enquiry that you may have for us to resolve. In addition to these, there may be circumstances where it becomes absolutely necessary for Touchstone Advisory to provide information, including as a result of legal or regulatory processes.

The following categories of recipients may receive your personal information and process it for the purposes outlined in this Privacy Statement:

  • Agents, contractors, sub-contractors, consultants, service providers, third-party or related companies, including payment processors, if it is necessary to provide our services and respond to your enquiries or for any other related purposes;

  • Analytics and search engine providers that may assist us in the improvement and optimization of our website;

  • Third parties who support our information technologies or handle mailings or events on our behalf;

  • Law enforcement agencies, other governmental agencies or third parties if we are required by law to do so or in any limited circumstances such as required by a court or a regulatory order.

Legalities

The law permits us to process your personal data to the extent as is:

  • Necessary for the purposes of the legitimate interests that we pursue, which are to run and administer our operations as a business, to properly discharge our legal obligations, to store and disclose information for record and wherever necessary to evaluate, develop and improve our services; or

  • Necessary for the performance of our contract with you or any other contract that we may execute in future; or

  • Necessary in order to comply with a legal situation that we are subjected to; or

  • Necessary where the processing of data is necessary for providing certain services to our clients or for certain requirements we are subject to; or

  • Necessary for the legitimate interests of our clients or third parties to provide our services, develop or protect our business or to keep people informed about relevant products and services.

Client Service Activity (Corporate and Business Clients and associated individuals)

We only ask our clients to share personal information where it is necessary in order to provide our services or other agreed purposes. We rely on our clients to provide any necessary information to the individuals whose data is shared with us regarding its use.

In the course of providing our services clients, we need to process various categories of personal data associated with them (such as employees, directors, senior management, trustees, members and their beneficiaries etc.), which could include personal identification and contact details, employment related information or financial data. Generally, we collect personal data directly from our clients or third parties acting on their instruction. Such data is collected for the following services:

  • Providing professional services that we offer to our clients and many of these services require us to process personal data to give advise and deliver reports to our clients.

  • To run our business operations effectively, we need to process personal data for multiple reasons, including managing our client relationships, developing our business and services, hosting events and to manage and administer our website, IT systems and applications.

  • To ensure the protection of our information and other clients’ information (including personal data), we have installed security measures that involve detecting, investigating and resolving security threats. As a part of the security monitoring that we do, personal data will be processed (e.g. automated scanning of emails to identify threats).

  • To provide information about our services, we use business contact details to provide information about us, our services and activities, including events that we believe will be f interest.

  • To comply with legal, regulatory or professional obligations as being a regulated business, we are subjected to various legal, regulatory and professional obligations that require us to keep records that contain personal data.

Suppliers

We only process personal data about our suppliers where it appears necessary for us to receive goods and services, contract, manage our relationship and help provide services to our clients wherever relevant. Personal data shall be used in the following circumstances and purposes, as stated here in below:

  • Where a supplier helps us to deliver services to our clients, we process the personal data of its people involved to help manage our relationship and to deliver such services to our clients.

  • To run our business operations effectively we need to process personal data for multiple reasons, including managing our client relationships, developing our business and services, hosting events and to manage and administer our website, IT systems and applications.

  • To ensure the protection of our information and other clients’ information (including personal data) we have installed security measures that involve detecting, investigating and resolving security threats. As a part of the security monitoring that we do, personal data will be processed (eg automated scanning of emails to identify threats).

  • To provide information about our services, we use business contact details to provide information about us, our services and activities, including events that we believe will be of interest.

  • To comply with legal, regulatory or professional obligations as being a regulated business, we are subjected to various legal, regulatory and professional obligations that require us to keep records that contain personal data.

Clients or Prospective Business Contacts

We process personal data about contacts, including existing contacts, prospective contacts and individuals associated with them. This personal data includes names, employer identity, job title and business contact details.

Such personal data shall be accessible to our people and used for the following purposes:

  • Developing, managing and administrating our business

  • Providing information about us and the services we provide

  • Identifying the business needs of our clients or prospective clients

  • Performing analytics, including producing metrics of our relationships and progress against account business goals.

  • Analysing interactions between our people and our contacts to provide information to our management on relationships and trends, including the use of an automated analytical tool to evaluate the frequency and timing of interactions with contacts.

Our People and Contractors

  • Employees:

    We will process personal data about you during and after your membership with the firm in line with our legal and regulatory obligations and an agreement executed with you.

  • Temporary Workers:

    We will process personal data about you during and after your working period with the firm in line with our legal and regulatory obligations and our agreement with you or your agencies.

  • Work Experience Students:

    We will process personal data about you during and after your working period with the firm in line with our legal and regulatory obligations and our agreement with you or your parents/guardians.

  • Contractors and consultants:

    We will process personal data about you during and after your working period with the firm in line with our legal and regulatory obligations and our agreement with you or your agencies.

Recruitment

While applying with us for a role, applicants will need to furnish sufficient information for us to be able to evaluate their application. We would need you to furnish your name, contact details, details of your qualification, skills, experience, employment history, information about your eligibility to work in the UK etc.

In addition to the aforesaid, we shall also collect your personal information from third parties, such as references supplied by former employers, and conduct background checks. Your personal data, as specified above, will be used for the following purposes:

  • Manage the recruitment process, assess and confirm your suitability for employment.

  • To potentially execute an employment agreement with you.

  • Provide information to you about other employment opportunities with us.

  • Comply with legal, regulatory and professional obligations.

Protection and storage of your information

We, at Touchstone Advisory, understand your need for privacy and take your online security seriously in pursuit of which we have implemented generally accepted standards of technology and operational security to protect your personal information from loss, misuse, alteration, breach and/or destruction. Upon receipt of your information, we will ensure that its collection and processing is in accordance with Data Protection legislation applicable in the territory of the United Kingdom. All employees, associates, contractors, consultants, suppliers etc. of Touchstone Advisory are required to keep you personal information confidential, and access to such information is only granted to authorized persons.

However, in current scenario the transmission of information via the Internet is not completely secure and we cannot guarantee the security of your personal information transmitted to us or provided through the website.

Your personal data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA”), to a country not deemed to provide adequate protection of your information by the European Commission, and may also be processed by staff operating outside the EEA who work for us, or for one of our service providers, agents or contractors. Such transmission of information is subject to contractual obligations on the recipients of that data in the territory outside the EEA to protect your information to the standard as required in the EEA.

How long do we have your information for?

We will only retain your personal information for as long as it is necessary to fulfil the purpose we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

What rights do you have?

At any time during the course of your engagement with us you have the following rights:

  • To be informed about the processing of your personal data;

  • To request access to or a copy of any personal data which we hold about you;

  • Rectification of any inaccurate data that we may have for you;

  • To ask us to delete personal data, if you consider that we don’t possess the right to hold it;

  • To withdraw consent to our processing of your personal data;

  • To ask us to stop or start sending you marketing messages at any time by using the below contact details;

  • To restrict the processing of your personal data;

  • Data Portability i.e. moving some of your personal data elsewhere in certain cases;

  • Not to be subjected to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your personal data.

Any request made by you for access to or a copy of your personal data shall be expressly made in writing, and we will endeavour to respond within a reasonable period and in accordance with the terms of the agreement executed by and between us. We will, at all times comply with our legal obligations regarding your rights as a data subject.

Any incorrect or incomplete information shall be corrected by us. We will stop processing your personal data, or erase it, where there is no legal reason for us to continue to hold or use that information. It shall be our aim to ensure at all times that the information we hold about you is accurate at all times. To assist us in ensuring that your information is up to date, do let us know if any of your personal information or details change for us to update our database.

Changes to Privacy Statement

Any changes to our privacy statement will be posted on this page of our website. We recommend users to check the privacy statement each time they visit out website. If your privacy policy is amended in any way, we will automatically update the existing policy with the updated version and its date of effect.