How we process personal data and our compliance with the Data Protection Act 2018.
This policy relates to personal information provided to FCRM Ltd ('FCRM') via this website, email or any other protocol (e.g. written correspondence, telephone and/or facsimile).
uk-duediligence.com is part of FCRM, a company registered with the Information Commissioner's Office (Number: Z1273248).
Your use of uk-duediligence.com is condition precedent on your accepting and consenting to our policy approach, as described below.
FCRM is committed to ensuring that personal information is protected and safeguarded against misuse.
When processing personal information, such as, name, address, date of birth, Passport or National Identity card number, etc., we process in accordance with applicable law, including The Data Protection Act 2018 ('DPA') and The General Data Protection Regulation ('GDPR' - Regulation (EU) 2016/679 of the European Parliament).
The type of information or data we collect via uk-duediligence.com, is:
Other sources which might lead to the identification of personal data include, freely available open-source data-sets, subscription based services provided by a range of third parties and information supplied by clients, or their professional advisors.
Save as indicated below or where disclosure is required or permitted by law (e.g. to a regulator, government body or law enforcement agency), we do not routinely transfer or disseminate personal data to third parties. Personal data/information remains confidential. Access is restricted to authorised FCRM personnel, who might use data to:
If inquiry is needed with, about, or via a third party, we might share personal information where this is necessary to provide a research focus (e.g. a previous employer as part of pre-employment screening, or a supplier/vendor as part of a procurement review, etc.). On a case-by-case basis this may necessitate the sharing of a person's name, name plus date of birth, or one or more other relevant factor(s).
Where we instruct an agent, external provider or an independent contractor to assist with service delivery, such party might be supplied with information necessary to enable them to perform the required service, such as, in the following (example) circumstances, to:
Any processing of personal data is undertaken with due regard to the DPA and GDPR.
When receiving personal data/information, we deploy strict access controls and security arrangements to reduce risk of unauthorised access.
On a case-by-case basis, depending on the scope of work agreed, some personal data might be transferred outside the European Economic Area ('EEA'). This may involve processing by persons operating outside the EEA, when commissioned to support due diligence or investigative research.
Should you wish to be better informed on where personal data is/might be processed, in relation to a particular contract of engagement, please Contact us.
Please note we cannot 'guarantee' the security of data transmitted electronically to/from our site. Should you choose to contact or communicate with us via email or the internet, you do so at your own risk.
We respect individuals' privacy and provide an option for subscribers to cancel updates and/or other communications from us. To opt-out, please send an e-mail to firstname.lastname@example.org with 'Opt-out' in the heading.
Should you wish to see a copy of any data we might hold about you, please contact our Data Protection Officer. You can write to us (see Contact), send an e-mail to email@example.com with 'SAR' in the heading, or telephone +44 (0) 207 060 2780.
If you are concerned about hyperlinks, we suggest you avoid using them. Or, you satisfy yourself as to the respective website's privacy arrangements before doing so. We do not accept responsibility (or liability) for content or privacy practices of third party websites. Any use of a third party website is at your own risk.
For any further information, please Contact us.
Publicly available internet/web content
When researching common names (e.g. Smith, Jones, Davies, etc.), or a name abbreviation, nickname, etc., search queries may return high volumes of potential matches, the majority of which will be false-positives.
Save where specifically contracted to do so, FCRM does not assess all hits encountered in high-volume responses. We adopt a reasonable endeavours approach to identifying the more likely or relevant records. Query combinations may be used to reduce high volumes and aid prioritise the review of potential matches.