Privacy Policy

1. About this Privacy Policy

This Privacy Policy explains how BARCLAY ADVISORY SERVICES LTD collects, uses, stores and shares personal data when you interact with our website, services, consultancy activities, recruitment processes, communications and other business operations.

This Privacy Policy applies to:

• visitors to our website;

• prospective and existing clients;

• suppliers, contractors and business partners;

• individuals who contact us or request information about our services;

• job applicants and prospective contractors;

• individuals participating in meetings, demonstrations, training or consultancy activities; and

• other individuals whose personal data we process in connection with our business.

In this Privacy Policy, Barclay Advisory, we, us and our mean BARCLAY ADVISORY SERVICES LTD.

Our services are primarily provided to businesses and organisations.

2. Who we are

Legal entity: BARCLAY ADVISORY SERVICES LTD
Company number: 16006462
Registered office: Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, United Kingdom, BL6 6HG
Contact email: info@barclayas.co.uk

For privacy enquiries or data protection requests, contact us at info@barclayas.co.uk.

3. What we do

Barclay Advisory provides professional services focused on project delivery, project controls, digital transformation, artificial intelligence, automation, technology and related consultancy services.

Our services may include:

• project planning and project controls;

• specialist consultancy and advisory services;

• digital and AI-enabled project delivery support;

• automation and workflow development;

• bespoke software and technology solutions;

• training and organisational capability development;

• project and programme analysis;

• staffing and specialist resource provision; and

• related professional and technical services.

4. Our role under data protection law

Depending on the circumstances, we may act as either a controller or a processor of personal data.

4.1 When we act as controller

We act as controller where we determine why and how personal data is processed.

This may include personal data processed for:

• website operation;

• enquiries and business development;

• client relationship management;

• consultancy engagements;

• recruitment;

• contractor and supplier management;

• training and events;

• invoicing and financial administration;

• marketing;

• security;

• legal and regulatory compliance; and

• general business administration.

4.2 When we act as processor

In some client engagements, we may process personal data on behalf of a client organisation.

For example, this may occur where we work with client project data, systems, reports, programmes, commercial records or other information containing personal data.

In these circumstances, the client will normally be the controller and Barclay Advisory will process the information in accordance with the client's instructions and the applicable agreement.

Where required, this processing may be governed by a separate Data Processing Agreement.

5. Personal data we collect

The personal data we collect depends on how you interact with us.

5.1 Business contact information

We may collect:

• name;

• business email address;

• telephone number;

• employer or organisation;

• job title;

• professional role;

• business address; and

• other contact information you choose to provide.

5.2 Enquiries and communications

If you contact us, we may collect:

• your contact details;

• the contents of your enquiry;

• email correspondence;

• meeting notes;

• information about your organisation;

• service requirements;

• commercial discussions;

• proposal information; and

• records of our communications with you.

5.3 Client and project information

When providing services, we may receive or process information relating to client projects, programmes, teams and organisations.

This may include:

• project records;

• project schedules;

• programme information;

• commercial information;

• progress information;

• project reports;

• risk and issue records;

• action registers;

• governance records;

• resource information;

• meeting records;

• project correspondence; and

• other information required to provide our services.

Some of this information may contain personal data, including names, email addresses, job titles, responsibilities, comments, approvals or other information relating to identifiable individuals.

5.4 Recruitment and contractor information

If you apply for a role, contract or other opportunity with us, we may collect:

• name;

• contact information;

• CV;

• employment history;

• qualifications;

• professional experience;

• skills;

• availability;

• day rate or salary expectations;

• interview notes;

• references;

• right-to-work information where appropriate; and

• information you voluntarily provide during the recruitment process.

Additional information may be collected where required before entering into an employment or contractual relationship.

5.5 Supplier and contractor information

Where you provide services to us, we may process:

• contact details;

• company information;

• contractual information;

• payment details;

• invoices;

• correspondence;

• qualifications or professional information; and

• records relating to services provided.

5.6 Website and technical information

When you use our website, certain technical information may be collected automatically.

This may include:

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from technical information;

• pages viewed;

• referral information;

• session information;

• interaction information;

• error information; and

• security or access information.

6. How we collect personal data

We may collect personal data:

• directly from you;

• through our website;

• when you contact us by email, telephone or another communication method;

• during meetings and business discussions;

• when you request a proposal or information about our services;

• when you apply for a position or contract;

• from your employer, client or organisation;

• from clients in connection with consultancy engagements;

• from suppliers and contractors;

• through business networking and professional relationships;

• through publicly available professional and business sources; and

• automatically through website and analytics technologies.

7. How we use personal data

We may use personal data to:

Provide our services

This includes delivering consultancy, project controls, automation, technology, training, staffing and related services.

Our lawful basis will normally be performance of a contract, steps taken before entering into a contract or our legitimate interests in providing professional services.

Manage client relationships

This includes responding to enquiries, preparing proposals, arranging meetings, onboarding clients and managing ongoing engagements.

Our lawful basis will normally be contract or legitimate interests.

Manage recruitment

This includes assessing candidates, arranging interviews, communicating about roles and determining suitability for employment or contract opportunities.

Our lawful basis may include steps taken before entering into a contract, legitimate interests and legal obligations.

Manage suppliers and contractors

This includes managing agreements, services, invoices, payments and business relationships.

Our lawful basis will normally be contract, legal obligation or legitimate interests.

Operate and improve our website

This includes understanding website usage, maintaining performance, diagnosing problems and improving our website and services.

Our lawful basis may be legitimate interests or consent, where required.

Business development and marketing

We may use business contact information to respond to enquiries and communicate with prospective or existing clients about relevant services.

Our lawful basis may be legitimate interests or consent, where required.

Financial administration

This includes invoicing, accounting, payment processing, tax administration and financial record keeping.

Our lawful basis may be contract or legal obligation.

Security and fraud prevention

We may process information to protect our systems, business, clients, staff and information.

Our lawful basis may be legitimate interests or legal obligation.

Legal and regulatory compliance

We may process information where necessary to comply with applicable laws, regulations, court orders, contractual obligations or other legal requirements.

Our lawful basis will normally be legal obligation or legitimate interests.

8. Client information and confidential project data

Our work may require access to confidential, commercially sensitive or project-specific information.

We will use information supplied by clients only where reasonably necessary to provide the agreed services, manage the client relationship, maintain security, comply with legal obligations or otherwise fulfil our contractual responsibilities.

Where we process personal data on behalf of a client, the client remains responsible for ensuring that it has an appropriate lawful basis for providing that information to us.

Clients should avoid providing personal data that is unnecessary for the services being performed.

9. AI, automation and technology

Some of our services may involve artificial intelligence, automation, analytics, software or digital tools.

Where these technologies are used as part of a client engagement, the way information is processed will depend on the service being provided and the systems agreed with the client.

We may use technology to help:

• analyse project information;

• structure information;

• summarise information;

• automate workflows;

• generate reports;

• identify trends or inconsistencies;

• support project controls activities; and

• improve operational efficiency.

We do not intentionally use client confidential information or personal data for unrelated purposes.

Where third-party technology providers process personal data as part of our services, appropriate contractual and data protection arrangements will be used where required.

10. Cookies and analytics

Our website may use cookies and similar technologies.

These may be used to:

• provide website functionality;

• maintain security;

• understand website usage;

• analyse visitor behaviour;

• improve website performance; and

• identify technical problems.

Where cookies or similar technologies are not strictly necessary, consent will be obtained where required by applicable law.

Further information may be provided through our Cookie Policy or cookie management tools.

11. Who we share personal data with

We may share personal data where reasonably necessary with the following categories of recipients.

11.1 Clients

Where you work for, represent or provide services to one of our clients, relevant information may be shared with that client where necessary for the engagement.

11.2 Suppliers and service providers

We may use third-party suppliers to support our:

• website;

• hosting;

• email;

• communications;

• analytics;

• software;

• cybersecurity;

• document management;

• accounting;

• payment processing;

• recruitment; and

• general business operations.

These suppliers may process personal data only to the extent required to provide their services.

11.3 Professional advisers

We may share information with:

• accountants;

• solicitors;

• insurers;

• auditors;

• tax advisers; and

• other professional advisers.

11.4 Authorities and regulators

We may disclose personal data where required by law or where reasonably necessary to:

• comply with legal obligations;

• respond to courts or regulators;

• respond to law enforcement;

• establish or defend legal claims;

• prevent fraud or misconduct; or

• protect our rights or the rights of others.

11.5 Business transactions

If Barclay Advisory is involved in an investment, financing, restructuring, merger, acquisition or sale of some or all of its business, relevant information may be disclosed to potential investors, purchasers, advisers or other parties subject to appropriate confidentiality protections.

12. International transfers

Barclay Advisory is a United Kingdom company.

Some service providers we use may process information outside the United Kingdom.

Where personal data is transferred internationally, we will use appropriate safeguards where required under applicable data protection law.

These may include:

• UK adequacy regulations;

• the UK International Data Transfer Agreement;

• the UK Addendum to the European Commission Standard Contractual Clauses;

• Standard Contractual Clauses; or

• another legally recognised transfer mechanism.

13. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy legal, accounting, tax, contractual, security or regulatory requirements.

Typical retention periods may include:

Client contracts, project records and commercial correspondence: generally up to 6 years after the end of the relevant client relationship or engagement where required for legal, contractual, insurance, tax or business purposes.

Invoices and accounting records: generally at least 6 years or for any longer period required by law.

Business contact information: for as long as the business relationship remains relevant or until you request that we stop processing your information where applicable.

Recruitment records: retained for a reasonable period following completion of the recruitment process and longer where required for legal, contractual or business purposes.

Website analytics information: retained according to the configuration and retention periods of the relevant analytics provider.

Security and technical logs: retained for a period reasonably necessary for security, investigation and operational purposes.

Information may be retained for longer where required in connection with a dispute, legal claim, investigation or other legal requirement.

14. Security

We use reasonable technical and organisational measures designed to protect personal data from:

• unauthorised access;

• accidental loss;

• misuse;

• alteration;

• destruction; and

• unauthorised disclosure.

Measures may include:

• access controls;

• restricted access to business systems;

• password and authentication controls;

• encrypted communications;

• security monitoring;

• secure cloud infrastructure;

• backups;

• supplier due diligence;

• administrative controls; and

• security procedures.

No electronic system or method of transmission can be guaranteed to be completely secure.

15. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion of personal data;

• request restriction of processing;

• object to processing;

• request transfer of certain personal data;

• withdraw consent where processing is based on consent; and

• complain to a data protection authority.

Some rights are subject to legal conditions and exemptions.

To exercise your rights, contact info@barclayas.co.uk.

You also have the right to complain to the UK Information Commissioner's Office (ICO).

16. Marketing communications

We may contact existing or prospective business clients about services, industry developments, events, company updates or other relevant business matters where permitted by law.

You may opt out of marketing communications at any time by:

• using an unsubscribe mechanism provided in the communication; or

• contacting info@barclayas.co.uk.

Opting out of marketing communications will not prevent us from sending necessary service, contractual, legal or administrative communications.

17. Third-party websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy, security or content of third-party websites or services.

You should review the privacy information provided by the relevant third party before providing personal information to them.

18. Children

Our website and services are intended for business and professional use and are not directed at children.

We do not knowingly collect personal data from children through our normal business activities.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our business;

• our services;

• technology;

• suppliers;

• data processing activities; or

• applicable laws and regulations.

The effective date shown at the top of this Privacy Policy indicates when the current version took effect.

Where appropriate, we may take reasonable steps to notify affected individuals of material changes.

20. Contact us

For privacy enquiries, data protection requests or questions about this Privacy Policy, contact:

BARCLAY ADVISORY SERVICES LTD
Belmont Suite, Paragon Business Park
Chorley New Road
Horwich
Bolton
United Kingdom
BL6 6HG

Company number: 16006462
Email: info@barclayas.co.uk