Privacy Notice

Who we are

Buyer Consulting Ltd is a consultancy working with organisations across health and social care, health technology, the public and private sectors, charities and voluntary, community, faith and social enterprise organisations.

For data protection purposes, Buyer Consulting Ltd is the data controller responsible for the personal information covered by this notice.

For questions about this privacy notice, to exercise your data protection rights or to raise a data protection concern, please contact:

Email: privacy@buyerconsultingltd.com

Information we may collect

The personal information we collect depends on how you interact with Buyer Consulting. It may include:

• Your name.
• Your job title, role and organisation.
• Your business or personal contact details, including your email address and telephone number.
• Information you provide when making an enquiry or contacting us.
• Correspondence and other communications between you and Buyer Consulting.
• Information relating to a potential, current or previous project, partnership or working relationship.
• Information you provide when subscribing to updates or other communications.
• Professional information available from public or organisational sources where relevant to our work.
• Technical information associated with your use of our website, which may include your IP address, browser type, device information, operating system and website activity.
• Cookie and analytics information where applicable and where the appropriate permissions have been obtained.

We do not ask you to provide special category or other sensitive personal information through our general website enquiry forms. Please avoid including confidential or sensitive personal information unless it is necessary and an appropriate method for providing it has been agreed with us.

How we collect your information

We may collect personal information:

• Directly from you when you contact us.
• When you submit an enquiry or other form through our website.
• When you correspond with us by email, telephone, video call or other means.
• During discussions about potential projects, partnerships or consultancy work.
• Through an existing client, partner or professional relationship.
• From clients, partners or other organisations where your information is relevant to a project or professional relationship and it is appropriate for them to provide it.
• From publicly available professional or organisational sources, including professional websites and directories.
• Automatically through our website and its supporting technologies, including cookies and analytics technologies where these are enabled.

How we use your information

We may use personal information to:

• Respond to enquiries, requests and correspondence.
• Discuss potential projects, collaborations and partnerships.
• Prepare proposals and take steps towards entering into a contract.
• Provide and manage consultancy services.
• Manage our relationships with clients, partners, suppliers and other stakeholders.
• Administer agreements, projects and professional relationships.
• Maintain appropriate business, contractual and financial records.
• Communicate with you about Buyer Consulting's work, projects, insights and activities where appropriate.
• Operate, improve, maintain and protect our website and digital services.
• Understand how our website is being used where analytics have been enabled.
• Prevent or investigate misuse, fraud, security incidents or other unlawful activity.
• Establish, exercise or defend legal claims where necessary.
• Meet our legal, regulatory and professional responsibilities.

We will not use personal information for a new purpose that is incompatible with the purpose for which it was originally collected unless permitted or required by law.

Our lawful bases for using your information

UK data protection law requires us to have a lawful basis whenever we process personal information. The lawful basis we use will depend on why we are using the information.

If you choose not to provide information

In most cases, you are not under a legal obligation to provide personal information to Buyer Consulting simply by visiting our website or making an initial enquiry.

However, we may need certain information in order to respond to an enquiry, prepare a proposal, enter into an agreement, provide services or meet a legal or contractual requirement. If this information is not provided, we may not be able to respond fully, enter into the relevant agreement or provide the requested services.

Marketing and communications

We may occasionally send information about Buyer Consulting's work, projects, insights or activities where you have asked to receive it or where we are otherwise permitted to contact you under applicable data protection and electronic communications rules.

Where consent is required, we will obtain it before sending the relevant marketing communications.

You can ask us to stop sending marketing communications at any time by using an unsubscribe option provided in the communication or by contacting privacy@buyerconsultingltd.com .

Cookies and website analytics

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function correctly. Other cookies, including those used for analytics, embedded content or marketing, will only be used where permitted and, where required, after you have given your consent.

You can manage your cookie preferences through the cookie controls provided on the website.

Further information about the cookies and related technologies used by this website can be found in our Cookie Policy.

Who we share information with

We do not sell your personal information.

We may share personal information where necessary with organisations or individuals that support our business and our work, including:

• Website, hosting and infrastructure providers.
• IT, software and technology providers.
• Email, communications and collaboration providers.
• Professional advisers, including legal and accounting advisers.
• Administrative and business support providers.
• Project partners, associates or subcontractors where their involvement is necessary for the relevant work.
• Clients or partner organisations where sharing is necessary for an agreed project or professional relationship.
• Regulatory, governmental, judicial or law-enforcement bodies where disclosure is required or permitted by law.

Where an organisation processes personal information on our behalf, we take appropriate steps to ensure that the information is handled securely and in accordance with applicable data protection requirements.

We only share personal information where there is an appropriate purpose and lawful basis for doing so.

International transfers

Some of the technology and service providers we use may store or process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we take appropriate steps to ensure that the transfer complies with UK data protection law. Depending on the circumstances, this may include relying on UK adequacy regulations or approved contractual safeguards.

You can contact us at privacy@buyerconsultingltd.com if you would like further information about the safeguards relevant to an international transfer of your personal information.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and for any related legal, accounting, contractual, regulatory or reporting requirements.

The appropriate retention period depends on factors including the type of information, why it was collected, the nature and duration of our relationship with you, any legal or contractual requirements and whether the information may be needed to establish, exercise or defend legal claims.

We periodically review the information we hold. When personal information is no longer required, it will be securely deleted or anonymised where appropriate.

How we protect your information

We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration, destruction or disclosure.

Access to personal information is limited to people who have an appropriate business or professional reason to use it.

Where we use third-party service providers to process personal information on our behalf, we take reasonable steps to ensure that suitable data protection and security arrangements are in place.

No method of transmitting or storing information electronically can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances and the lawful basis on which we use your information, you may have rights including the right to:

• Ask for access to the personal information we hold about you.
• Ask us to correct personal information that is inaccurate or incomplete.
• Ask us to erase your personal information in certain circumstances.
• Ask us to restrict the use of your personal information in certain circumstances.
• Object to certain uses of your personal information.
• Receive certain personal information in a portable format and ask for it to be transferred to another organisation where the right to data portability applies.
• Withdraw your consent at any time where we rely on consent.
• Raise a complaint about the way your personal information has been handled.

These rights do not all apply in every situation, and some rights are subject to exemptions under data protection law.

To exercise a data protection right, contact: privacy@buyerconsultingltd.com .

We may need to ask for information to confirm your identity before responding to a request. We will handle requests in accordance with the time limits and requirements set by applicable data protection law.

Data protection complaints

If you are concerned about how Buyer Consulting has collected, used, stored or shared your personal information, you can make a data protection complaint directly to us.

Please send your complaint to: privacy@buyerconsultingltd.com .

Please provide enough information for us to understand your concern and, where possible, identify the information or processing involved. We will consider the complaint and respond in accordance with our obligations under applicable data protection law.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Make a complaint to the Information Commissioner's Office

Links to other websites

Our website may contain links to websites and services operated by other organisations.

Buyer Consulting is not responsible for the privacy practices or content of third-party websites. When you leave our website, we recommend reviewing the privacy information provided by the organisation responsible for the website or service you are using.

Changes to this privacy notice

We may update this privacy notice from time to time to reflect changes to our website, services, technology, working practices or legal obligations.

Where appropriate, we will bring significant changes to the attention of people affected by them.

The date at the top of this page shows when this notice was most recently updated.