When GET CONSULT collects and processes your personal data in accordance with this Privacy Notice, GET CONSULT LTD acts as the data controller, or, where applicable, as a joint controller with another organisation in accordance with relevant data protection laws. This means that GET CONSULT LTD determines the purposes and means of processing personal data within the scope of its activities and is responsible for ensuring that such data is collected, used, protected, disclosed, retained, and securely disposed of in accordance with applicable legal requirements.

GET CONSULT LTD is a company incorporated in the United Kingdom and operates as the primary data controller for personal data collected through our Site and our business activities. Where an international engagement involves independent professional advisers, corporate service providers, financial institutions, fiduciaries, compliance specialists or other members of our partner network in the United Kingdom, Switzerland, Ireland, Malta, Bulgaria or another relevant jurisdiction, those organisations may act as independent controllers, joint controllers or processors in relation to particular processing activities, depending on their role and the nature of the engagement. Where appropriate, the respective responsibilities for processing personal data will be determined in accordance with applicable law and the relevant contractual arrangements.

GET CONSULT collects personal data in the course of our business activities, both directly from you and, where appropriate, from third parties.

GET CONSULT collects personal data about you in the course of our routine business activities:

• When you interact with our Site, including when you manage or update your cookie preferences, as described in our Cookie Policy;
• When you create, access, or log into a user profile on our Site;
• When you register to receive GET CONSULT newsletters, insights, updates, or alerts, and when you interact with those communications;
• When you register for, attend, or otherwise participate in GET CONSULT events;
• When you participate in public content or communication areas, including discussion forums, professional networks, or GET CONSULT social media channels;
• When you participate in a survey, panel discussion, consultation, research initiative, or individual discussion conducted by or on behalf of GET CONSULT;
• When you interact with GET CONSULT or its employees through our Site, by email, telephone, or other professional communication channels to make an enquiry, request information, discuss a potential engagement, provide information in connection with an existing engagement, or otherwise request a response from GET CONSULT.

GET CONSULT may also receive personal data about you from third parties, including professional advisers, business partners, service providers, data providers and, where relevant to an international engagement, members of our professional partner network. Such information may include personal data obtained from legitimate public sources, including corporate and business registers, company websites, professional directories, public-facing professional and social media platforms, and other lawfully accessible sources. Where appropriate, we may also receive deidentified or aggregated datasets from service providers and maintain such information in deidentified or aggregated form. Where we obtain personal data from third parties, we take reasonable steps, where required and appropriate, to ensure that the information has been obtained and shared lawfully and that GET CONSULT is permitted to process it for the purposes described in section three below.

Sensitive personal data – We may, where necessary, collect sensitive or special category personal data directly from you, including where you voluntarily provide such information in connection with an enquiry, advisory engagement, survey, panel discussion, event, or other interaction with GET CONSULT. In certain international, corporate, private-client, banking, payment, compliance, fiduciary or structuring engagements, information of a sensitive nature may also be provided where it is necessary for the relevant professional, legal, regulatory, due-diligence, KYC or AML process. We process sensitive or special category personal data only where a valid legal basis and, where required, an additional condition for such processing applies. Where such information is processed for research, analytical or statistical purposes, we seek, where appropriate, to use aggregated, anonymised or deidentified information for resulting reports or publications. We may combine personal data received directly from you with personal data lawfully obtained from third parties where necessary and appropriate, provided that such collection and processing remains consistent with this Privacy Notice, applicable data protection law, and the purposes and access arrangements described in section three below.

GET CONSULT uses your personal data for a number of legitimate business and professional purposes and, where appropriate, may combine personal data obtained from different lawful sources in order to fulfil those purposes. The information below summarises the purposes for which we process personal data, the categories of personal data that may be involved, the legal basis or bases on which the relevant processing may be carried out, and the parties who may have access to that information.

Managing our business relationship with you

Purpose: As a client, prospective client, representative, director, shareholder, beneficial owner, employee or other authorised contact of a GET CONSULT client or business partner, we may process your personal data to establish, administer and develop our professional relationship with you. This may include responding to enquiries, assessing potential engagements, preparing proposals and engagement documentation, coordinating assignments, communicating in relation to services, issuing invoices and maintaining appropriate business and client records.

Categories of personal data: Name, title, pronouns where provided, contact details, location, professional or employment-related information such as job title, position and employer and, where relevant to an engagement, information concerning your role, directorship, shareholding, beneficial ownership or authority to act on behalf of an organisation.

Legal basis for use: Performance of a contract or steps taken at your request prior to entering into a contract, where applicable; our legitimate interests in establishing, managing and developing professional relationships and providing our services; and compliance with legal or regulatory obligations where relevant.

Data access: GET CONSULT personnel and third-party service providers, professional advisers and other appropriate recipients as described in section five of this Privacy Notice.

GetConsult.co.uk account

Purpose: If account functionality is available and you create an account on GetConsult.co.uk, we may process your personal data to establish and administer your account, authenticate access and provide account-related functionality, which may include access to newsletters, alerts, insights, publications, downloadable materials and personalised content.

Categories of personal data: User ID, authentication credentials or securely protected password information, name, pronouns where provided, email address, account preferences and information relating to your use of account functionality.

Legal basis for use: Performance of the service requested by you and, where required for particular optional functionality or communications, your consent.

Data access: GET CONSULT personnel and third-party service providers as described in section five of this Privacy Notice.

Newsletters and alerts

Purpose: If you register for GET CONSULT newsletters, insights, briefings or alerts, we may provide you with information relating to business, strategy, international markets, corporate structuring, financial services, technology, regulatory developments and other subjects relevant to GET CONSULT’s expertise and your stated interests.

Categories of personal data: User ID where applicable, name, pronouns where provided, email address, telephone number where provided, professional information, communication preferences and information concerning your interaction with our communications where legally permitted.

Legal basis for use: Your consent where required by applicable electronic marketing and data protection laws, or our legitimate interests where direct marketing is lawfully permitted on that basis.

Data access: GET CONSULT personnel and third-party service providers as described in section five of this Privacy Notice.

Events

Purpose: Register you for and administer your participation in conferences, private meetings, roundtables, presentations, webinars, webcasts and other GET CONSULT events, including managing invitations, attendance, communications and any reasonable requirements associated with your participation.

Categories of personal data: Name, pronouns where provided, email address, telephone number, location, professional or employment-related information such as job title, position and employer, dietary information or health-related information where voluntarily provided and necessary to accommodate specific requirements, including accessibility requirements, and permissions relating to photographs, audio, video, webcasts or other media where applicable.

Legal basis for use: Performance of arrangements made at your request; our legitimate interests in organising and administering professional events; your consent where required, including in relation to particular marketing communications, photographs, recordings or media participation; and, for special category personal data, an appropriate additional condition under applicable law.

Data access: GET CONSULT personnel, event and technology providers and other third-party service providers as described in section five of this Privacy Notice.

Public user posts and surveys

Purpose: Enable participation in public posting areas, where such functionality is offered, including discussion forums or other interactive features, and administer surveys, research, panel discussions and other business-related studies. Where appropriate, additional information will be provided in connection with a particular survey or research activity explaining the personal data collected and the manner in which it will be processed.

Categories of personal data: Personal or professional preferences, information you choose to provide about yourself, responses, comments, statements, posts, opinions and other information voluntarily submitted in connection with the relevant activity.

Legal basis for use: Your consent where required or appropriate and, depending on the nature of the activity, our legitimate interests in conducting research, obtaining professional insights and developing our services.

Data access: GET CONSULT personnel and third-party service providers as described in section five of this Privacy Notice and, in the case of information intentionally posted in a public area, other users or members of the public as applicable.

Benchmarking and analytics

Purpose: Conduct research, benchmarking and analytical activities designed to improve our understanding of markets, industries, business models, international expansion, operating performance and other commercial or strategic matters relevant to our advisory work. Where appropriate, analytics may also be used to identify patterns relevant to risk management, fraud prevention, operational performance or market behaviour.

Categories of personal data: Relevant business and professional information, location information, behavioural or interaction data, transaction-related information where lawfully available and appropriate, and other data necessary for the specific analytical purpose. Wherever reasonably practicable, we seek to use aggregated, anonymised or deidentified information for these activities.

Legal basis for use: Our legitimate interests in conducting research and analytics, developing our expertise and improving our services; your consent where required; or another applicable lawful basis depending on the nature and source of the information.

Data access: GET CONSULT personnel and third-party service providers as described in section five of this Privacy Notice.

Maintain and provide GET CONSULT’s services

Purpose: Provide, administer, develop and protect GET CONSULT’s advisory and coordination services, including strategic and management consulting, international corporate structuring support, private-client and family-capital assignments, banking and payment infrastructure coordination, operational consulting and other agreed professional services. This may include coordinating, where appropriate, with independent professional advisers, corporate service providers, banks, EMIs, fiduciaries, trustees, administrators, accountants, tax advisers, compliance specialists and other relevant participants in an international engagement.

Categories of personal data: Name, contact details, professional information, access and communication data, preferences, information concerning your business relationship with GET CONSULT and, where necessary for a particular assignment, corporate, financial, ownership, source-of-funds, source-of-wealth, identification, KYC/AML or other information relevant to the agreed engagement.

Legal basis for use: Performance of a contract or steps taken at your request prior to entering into a contract; our legitimate interests in providing, administering, developing and protecting our services and professional relationships; compliance with applicable legal and regulatory obligations; and, where relevant, another lawful basis and any additional condition required for particular categories of personal data.

Data access: GET CONSULT personnel and, where necessary for the relevant engagement, third-party service providers, independent professional advisers and other recipients as described in section five of this Privacy Notice.

Legal compliance and legal actions

Purpose: Comply with applicable laws, regulations, regulatory requirements, court orders and other binding legal obligations; establish, exercise or defend legal claims; protect GET CONSULT, our clients and other relevant parties; prevent, detect and investigate fraud, financial crime, misuse or security incidents; and enforce our agreements, this Privacy Notice, our Cookie Policy and our Terms of Use. Where relevant to the nature of an engagement, processing may also support appropriate due-diligence, KYC, AML, sanctions or related compliance procedures.

Categories of personal data: The categories of personal data processed will depend upon the relevant legal, regulatory, compliance or dispute-related requirement and may include identification, contact, corporate, professional, financial, ownership, transactional and other information necessary for the relevant purpose.

Legal basis for use: Compliance with applicable legal obligations; our legitimate interests in protecting GET CONSULT, our clients, our rights and the integrity of our services; establishment, exercise or defence of legal claims; and any other lawful basis required or permitted by applicable law.

Data access: GET CONSULT and, where appropriate, professional advisers, courts, regulators, competent authorities, financial institutions and third-party service providers as described in section five of this Privacy Notice.

Aggregation, anonymization, and deidentification of your data

Purpose: Aggregate, anonymise or deidentify personal data so that, where and to the extent recognised under applicable law, the resulting information no longer identifies an individual or is no longer treated as personal data. We may use such information to conduct research, perform statistical and market analysis, develop insights, improve our services and produce analytical materials and, where appropriate, share aggregated or anonymised findings with clients, professional partners or other business parties.

Categories of personal data: Personal data, including the categories identified for the other purposes described in this section, to the extent necessary to create appropriately aggregated, anonymised or deidentified information.

Legal basis for use: Our legitimate interests in conducting research and analytics, developing and improving our services and protecting individual privacy through the reduction or removal of identifying information.

Data access: See section four below. Where GET CONSULT maintains information in deidentified form, we take appropriate measures designed to preserve that status and do not intentionally use such information to reidentify individuals except where permitted or required by applicable law, including where necessary to test or verify the effectiveness of deidentification measures.

Marketing communications

Purpose: Based on your preferences and, where required, your opt-in choices when you subscribe to newsletters, register for events or otherwise engage with GET CONSULT, we may send you insights, invitations, updates and information about GET CONSULT, our expertise, international markets, events and services that we believe may be relevant to your professional interests. You may opt out of marketing communications at any time.

Categories of personal data: Name, email address, telephone number where provided, professional title, company or organisation, location, areas of interest, communication preferences and, where lawfully collected, information about your interaction with our communications.

Legal basis for use: Your consent where required by applicable law or, where legally permitted, our legitimate interests in maintaining professional relationships and communicating relevant information about GET CONSULT and our services.

Data access: GET CONSULT personnel and third-party service providers as described in section five of this Privacy Notice. Whenever we rely on legitimate interests as the legal basis for processing, GET CONSULT considers the nature, necessity and proportionality of the processing and balances our interests against your rights and interests. Where we rely on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent may mean that we are unable to provide certain optional communications, features or services that depend upon that consent. GET CONSULT does not use solely automated decision-making to make decisions that produce legal effects concerning you or similarly significantly affect you, unless such processing is permitted under applicable law and appropriate safeguards are in place. Where automated tools, including artificial intelligence or analytical technologies, are used to support our activities, we seek to apply appropriate governance, security and human oversight. GET CONSULT may use first- and third-party Cookies and Other Tracking Technologies, including web beacons, to operate, secure and improve our Site and, subject to your choices and applicable law, to conduct analytics and understand engagement with our professional communications. GET CONSULT may collect information about whether you open or interact with links contained in knowledge, research, event or other communications where legally permitted. You have choices regarding the use of non-essential Cookies and Other Tracking Technologies. Please refer to our Cookie Policy for further information and to manage your preferences. We may also use security technologies designed to detect malicious activity, automated attacks, bots and other threats to the integrity of our Site and systems; such technologies are used for legitimate security and fraud-prevention purposes.

If consent has been relied upon as the legal basis for a particular processing activity and you subsequently withdraw that consent, GET CONSULT will cease the relevant consent-based processing unless another lawful basis applies. Depending on the nature of the information or service concerned, withdrawal of consent may affect our ability to provide certain optional services, communications or functionality.

GET CONSULT does not use solely automated decision-making to make decisions that produce legal effects concerning you or similarly significantly affect your rights, interests or freedoms, unless such processing is permitted under applicable law and appropriate safeguards are in place. Where automated tools, including artificial intelligence, analytics or other technology-assisted processes, are used to support our activities, they are subject to appropriate governance, safeguards and, where necessary, meaningful human oversight and review.

GET CONSULT’s use of cookies and other tracking technologies. GET CONSULT may use first- and third-party cookies and other tracking technologies, including web beacons and similar technologies, to operate, secure, manage and improve our Site and services and, subject to applicable law and your consent choices, to understand how visitors interact with them. Where legally permitted, GET CONSULT may also collect information about whether you open or interact with links contained in knowledge, research, event or other professional communications that we send to you. You have choices regarding our use of non-essential cookies and other tracking technologies. Please refer to our Cookie Policy for further information and to manage your preferences.

In addition, we use security tools and technologies designed to protect our Site, systems, communications and information from cyber threats, fraud, malicious activity, unauthorised access, automated attacks, bots and other security risks. These tools are used for legitimate security, integrity and fraud-prevention purposes and are not used for unrelated marketing or advertising purposes.

We do not acquire, use, disclose or permit others to use deidentified data for the purpose of identifying or reidentifying individuals. Where GET CONSULT receives information in deidentified form, or transforms personal data that we have collected into deidentified data, we apply appropriate technical, organisational and contractual safeguards designed to preserve its deidentified status. In particular, we make the following commitments:

• GET CONSULT will maintain deidentified data in deidentified form and will take reasonable and appropriate measures designed to prevent it from being used to identify or reidentify an individual.
• Except to the extent reasonably necessary to verify the effectiveness and integrity of the deidentification process, or where otherwise expressly permitted or required by applicable law, GET CONSULT will not attempt to identify or reidentify any individual represented within a deidentified dataset, use such data to associate a specific individual with particular characteristics, attributes or activities, or knowingly permit any person or organisation acting on GET CONSULT’s behalf to do so.
• To the extent that GET CONSULT provides access to, transfers or otherwise discloses a deidentified dataset to a recipient outside GET CONSULT — including, where appropriate, a service provider, professional adviser, client or other authorised recipient — we will take reasonable steps to require that recipient to preserve the information in deidentified form, apply appropriate safeguards to it, and refrain from attempting, or permitting others to attempt, to identify or reidentify individuals represented within the dataset or to associate specific individuals with particular characteristics, attributes or activities, except where expressly permitted or required by applicable law.

Personal data collected in the course of GET CONSULT’s business activities may be accessed by, transferred to, or otherwise made available to GET CONSULT personnel, service providers, independent professional advisers, business partners and other third parties where this is necessary to fulfil the specific purposes for which the personal data were collected, to manage our relationship with you, to deliver or coordinate services, or to comply with applicable legal or regulatory requirements. GET CONSULT LTD, as the primary data controller, may provide access to or transfer your personal data to the following categories of recipients for the business purposes described in section three above:

• To GET CONSULT’s service providers and personnel;
• To GET CONSULT’s legal, tax, accounting, compliance, fiduciary, corporate, technology and other professional advisers;
• To third parties in the following circumstances:
  • If we are required to do so by applicable law, regulation, court order or other binding legal process;
  • To law enforcement authorities, regulators, supervisory bodies or other government officials pursuant to a lawful and valid request;
  • When we reasonably believe that disclosure is necessary or appropriate to prevent physical harm, financial loss, fraud, financial crime or other unlawful activity, or in connection with an investigation into suspected or actual misconduct;
  • If disclosure is necessary to protect the vital interests of an individual;
  • To enforce our Terms of Use, contractual rights or other applicable agreements;
  • To protect GET CONSULT’s property, systems, services, confidential information, business interests and legal rights;
  • To prevent, detect or investigate fraud, misuse or other unlawful activity affecting GET CONSULT, our clients, professional partners or other business relationships;
  • To support GET CONSULT’s investigation of an actual or suspected security incident, including an incident involving confidential information, personal data, systems, communications or a breach of applicable policy or contractual obligation;
  • To support auditing, compliance, risk management, financial control and corporate governance functions;
  • To comply with any and all applicable laws, regulations, regulatory obligations, sanctions requirements, court orders or requests from competent authorities.
• To a successor, purchaser, investor, joint venture partner or other relevant business entity in connection with an actual or proposed reorganisation, merger, acquisition, financing, sale, assignment, transfer or other disposition of all or any part of our business, assets or operations, subject to appropriate confidentiality and data protection safeguards.

To protect personal data transferred internationally, GET CONSULT takes steps designed to ensure that such transfers are made in accordance with applicable data protection laws. This may include reliance on recognised adequacy decisions or regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, the EU Standard Contractual Clauses, or other lawful transfer mechanisms and appropriate safeguards, as applicable to the jurisdictions and recipients involved. Where an engagement involves our professional partner network or specialist providers in the United Kingdom, Switzerland, Ireland, Malta, Bulgaria or another jurisdiction, the applicable transfer mechanism and respective data-protection responsibilities will depend on the nature of the processing and the role of each recipient.

GET CONSULT protects and safeguards personal data in accordance with applicable data protection laws, our privacy and information-security requirements, and this Privacy Notice. Taking into account the nature and sensitivity of the personal data, the context and purposes of processing, and the associated risks, we implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access, misuse or other unlawful processing. These measures may include, as appropriate, access controls, authentication and identity-management measures, encryption or other protections for data in transit and at rest, secure systems and communications, data minimisation, backup and recovery procedures, monitoring, incident-management processes, and proportionate controls governing access to confidential, corporate, financial, KYC/AML and private-client information. We require service providers and other third parties processing personal data on our behalf to maintain appropriate security, confidentiality and data-protection safeguards consistent with applicable law and the nature of the services they provide. Access to personal data is restricted to authorised GET CONSULT personnel and authorised personnel of relevant service providers who require such access for legitimate professional purposes and who are subject to appropriate confidentiality obligations. We regularly consider the adequacy of our safeguards in light of evolving technologies, business requirements and security risks; however, no method of electronic transmission, storage or information-security system can provide absolute security, and GET CONSULT therefore cannot guarantee that personal data will never be accessed, disclosed, altered or otherwise affected by an unauthorised third party despite the safeguards we maintain.

GET CONSULT retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, to provide and administer our services, to manage our professional relationship with you, to comply with applicable legal, regulatory, tax, accounting, contractual or compliance obligations, and to establish, exercise or defend legal claims where necessary. Retention periods may vary depending on the nature of the information, the type of engagement, the jurisdictions involved and the legal or professional requirements applicable to the relevant processing activity. Once personal data is no longer required for an applicable purpose, we will take reasonable steps to securely delete, destroy, anonymise or otherwise place it beyond use in accordance with our retention practices and applicable law. If you request deletion of your personal data, GET CONSULT will assess and respond to that request in accordance with applicable data protection law and will take reasonable steps to delete relevant personal data where we are required to do so, subject to any lawful basis or obligation requiring or permitting us to retain certain information. For requests concerning access, correction, deletion or other data protection rights, including where processing is based on your consent, please refer to section nine of this Privacy Notice.

GET CONSULT does not intentionally use its Site or business content to collect personal data from individuals under the age of 16. Where, in limited circumstances, our non-Site business activities may involve processing personal data relating to an individual under the age of 16, we will do so only where there is an appropriate lawful basis and, where required, the necessary authorisation or consent of a parent, guardian or other person legally entitled to provide it, and in accordance with applicable law.

GET CONSULT does not intentionally use its Site, digital content or general business activities to collect personal data from individuals under the age of 16. Where, in limited circumstances, our non-Site business activities may involve processing personal data relating to an individual under the age of 16, we will do so only where there is an appropriate lawful basis and, where required by applicable law, with the necessary authorisation or consent of a parent, guardian or other person legally entitled to provide it. Any such processing will be limited to what is necessary for the relevant purpose and handled with particular regard to the rights and interests of the child.

9.1 Your data protection rights

9.2 How do you exercise your data protection rights?

9.3 How to unsubscribe to GET CONSULT newsletters and alerts?