Consult Lhasa General Privacy Notice

Who are we?

“We”, “our” or “us” means Consult Lhasa Limited. Our company no. is 14707253. Our registered office is at Granary Wharf House, 2 Canal Wharf, Holbeck, Leeds, West Yorkshire, LS11 5PS.

What does this privacy notice apply to?

We respect your privacy and understand that your privacy and how your personal data is processed is important. This privacy policy therefore sets out how we make use of your information in line with the GDPR and the UK’s specific implementation of data protection legislation. 

1. How do we use personal information we collect about you from your use of our website?

We may collect certain information about you when you visit our website. This information will be anonymous, so we will not be able to identify you from this information, but it will give us information about your IP address, browser, etc.

We also use cookies on our website. You will be prompted about our use of cookies via our cookie banner and will have the option to accept or reject cookies. Full details of how we use cookies can be found in our cookie policy. 

2. How do we use personal information you give us when you contact us or express an interest in our services?

If you have registered your interest in Consult Lhasa or sent us a message (e.g. asking for more information), we will record your interest in our CRM for the purposes of dealing with your enquiry. If your enquiry is via email, your details (in the email) will also be stored in our email system.

This information will be used to respond to your interest in our services, although we may rely on legitimate interest to send you associated marketing relating to Consult Lhasa services.

3. How do we use the personal information that you give us if you use our services?

If you use Consult Lhasa services, we will collect information from you for the purposes of providing the services. We will typically collect and process the following information:

• your name and contact details;
• details about your company and role;
• any information (e.g. reports) that you provide as part of using Consult Lhasa services.

We will always collect the minimal amount of information necessary to provide Consult Lhasa services to you or respond to your query. As such, we rely on contract as our lawful basis for processing.

4. What if my details have been included in any reports that Consult Lhasa process, for example if we are an author or contributor to the report?

It is likely that to provide Consult Lhasa services we will be provided with reports by our clients. These reports may include names, contact details and other information, of the report author or contributor. We generally do not need this detail and will always ask our client to redact, if possible, any personal data within reports. However, where we are provided with non-redacted reports, we will not process any personal data contained within the report for any purpose. If it is practical for us to do so, we may redact the details ourselves.

5. How will we use your information for the purposes of marketing and communications?

We will only send you marketing messages (e.g. our newsletter) when it is lawful for us to do so. This may be because you have specifically opted into receive the marketing, or In some circumstances where we rely on legitimate interest to send you the messages (e.g. if you are a contact at one of our client organisations). Where this is not the case, we will always seek your consent to market to you.

We use third-party applications to control and manage what marketing materials are sent, to manage your opting out of our marketing and to help us measure the effectiveness of our marketing messages.

You can opt out of our marketing activities at any time by selecting the unsubscribe link in our emails or by contacting us at communications@consultlhasa.com.

6. How will we use the information you provide if you are interested in working with us?

If you show an interest in working with us (e.g. via the form on our website), we will collect the minimal information required to contact you further about your interest, and where applicable the Lhasa Limited privacy policy will apply.

7. How long will we keep your personal information?

Unless stated elsewhere in this document or at the point of collection we will keep your personal information for as long as it is lawful for us to do so. This may be for as long as you are a client or for as long as you are subscribed to our marketing email lists.

We may also keep some of your information to protect our legal interests, in which case we will be relying on legitimate interest as our lawful basis and may keep your data for up to 7 years after you are no longer a client.

8. Who will we share your personal information with?

We use several third-party services for the purposes of effectively running our business and providing our services to you. In all cases where we are using a third-party service or company, we will only provide the minimal amount of information for the purposes of them delivering the service to us and to meet our requirements. 

We always carry out due diligence against all our third-party suppliers for the purposes of ensuring their compliance with data protection, maintaining adequate security of your data and ensuring they apply adequate data protection principles to the processing of the data we supply. We also make sure a legally binding contract (sometimes called a Data Processing Agreement or DPA) is also in place to protect your data.

9. Will we transfer your personal information outside the UK/EEA?

Generally, we store your personal information in the United Kingdom or in countries within the European Economic Area (EEA). However, your data may be processed outside the UK or EEA when we use some third-party processors or when our colleagues access our systems from different geographical locations.

In such circumstances we only transfer your personal information where we have a legal basis for doing so and where we ensure that your personal information is protected to the same standard as it would be protected in the UK or EEA, this includes ensuring we have the right checks and balances in place to ensure all of our colleagues only process your data according to UK data protection legislation.

10. What rights do you have over your personal information?

 You have several rights over your personal information, which are:

• the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal information is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
• the right to withdraw consent or object to processing. If you wish to stop receiving marketing emails you can do so, by clicking on the “unsubscribe” link at the bottom of the emails, or by contacting us at communications@consultlhasa.com;
• the right to ask us what personal information we have about you and to have a copy of your personal information from us, free of charge and within one month of your request. To make a request for any personal information we hold and process about you, we would prefer it if you could put it in writing in an email to communications@consultlhasa.com;
• the right to ask us to correct any errors in your personal information;
• the right to ask us to review and explain our legitimate interests to you;
• the right to ask us to delete your personal information where: (i) we don’t need your personal information anymore; (ii) you have asked us to review and explain our legitimate interests to you and we don’t have a valid legitimate interest to do what we are doing; (iii) our use of your personal information is illegal; (iv) we have to delete your personal information to comply with our legal obligations;
• the right to request a machine-readable format of the data you supplied to us and associated service logs (where we store them). Please contact us, using communications@consultlhasa.com, if you wish to receive a CSV export of your data, and
• the right to ask us to restrict the use that we are making of your personal information where: (i) you don’t think the personal information we have about you is correct, so that we can check if it is correct; (ii) what we are doing with your personal information is illegal but you would rather we stop using your personal information rather than delete it; (iii) we don’t need your personal information anymore, but you need us to keep it so that you can exercise any legal rights; and (iv) you have asked us to review and explain our legitimate interests to you, so that we can check whether we actually have a valid legitimate interest to do what we are doing.

11. Does this privacy notice cover websites linked to from this website?

Links within our website to other websites, such as LinkedIn, are not covered by this privacy notice. You should review the privacy information on those other websites to find out how they may use your personal information.

12. How will we tell you about changes to this privacy notice?

We keep our privacy notice under regular review. Any changes we make to our privacy notice in the future will be posted on this page (https://www.consultlhasa.com/privacy-policy/) and if the changes will have a significant effect on you or the way we use your personal information we will bring them to your attention by email where appropriate (e.g. if we have your email address as a contact at one of our client organisations). Please check back frequently to see any updates or changes to our privacy notice.

13. How can you contact us?

If you have any questions about this privacy notice or about the ways we use your personal information, please contact us at communications@consultlhasa.com.