CH Business Research Ltd – Data Processing Statement

CH Business Research is registered in England & Wales under company no 8824643. The company’s registered office is Raleigh House, 14c Compass Point Business Park, Stocks Bridge Way, St Ives PE27 5JL. CH Business Research is registered with the Information Commissioner’s Office under registration number Z1701769. CH Business Research is a member of the Association of Independent Information Professionals (AIIP) and adheres to the code of ethics set out by this group. This statement describes the personal data processing that CH Business Research carries out on behalf of its clients when it is acting as a data processor. Unless otherwise agreed this statement constitutes the information required for the purposes of Article 28(3) of the General Data Protection Regulation (GDPR) in describing the nature and purpose of the processing and the types of personal data and categories of data subjects.

 

1. Nature of Work – Provision of Open Source Research

2. Description of Processing

2.1. The following is a broad description of the way this organisation processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received with the Data Controller, check any privacy notices that organisation has provided or contact the organisation to ask about your personal circumstances.

2.2. Reasons/Purposes for processing information
We process personal information to enable us to:

• Provide open source research on the written instructions of a data controller (our client)
• To maintain our own accounts and records

3. Type/classes of information processed

We process information relating to the above reasons/purposes. This information may include:

• Personal details
• Project/investigation brief, results & related information
• Lifestyle and social circumstances
• Family details
• Good & servives
• Financial details
• Education & employment and/or business details

4. Who the information is processed about

We process personal information about:

• Subjects of investigation – investigations may include due diligence, Know Your Client (KYC), asset tracing or litigation support

5. Who the information may be shared with

• We share information with the client, i.e the data controller
• We sometimes share information with a partner or subcontractor who is also working on the project. CH Business Research has Terms of Business contracts in place with any subcontractor it uses in the course of its work.

6. Trading and sharing personal information

• Personal information is traded and shared as a primary business function. For this reason, the information may include name, contact details, family details, financial details, employment details, and goods or services.

7. Undertaking research

• Personal information is also processed in order to undertake research, For this reason, the information processed may include name, contact details, family details, lifestyle and social circumstances, financial details, goods and services.

8. Consulting and advisory services

• Information is processed for consultancy and advisory services that are offered. For this reason, the information processed may include name, contact details, family details, financial details and the goods and services provided.

9. Retention periods

• CH Business Research retains personal data in accordance with its agreements with its clients.

10. Transfers

• It may sometimes be necessary to transfer personal information overseas
• When this is needed, information may be transferred to countries or territories around the world.
• Any transfers made will be in full compliance with the requirements of international data transfers under Chapter 5 of the GDPR.