GDPR Privacy Notice (External)

Issue 2: May 2025

Introduction

The Company gathers and processes your personal information in accordance with this privacy notice and in compliance with the relevant data protection regulation and law. This notice provides you with the necessary information regarding your rights and obligations, and explains how, why and when we collect and process your personal data. This personal information may be held by the Company on paper or in electronic format.

Your personal information is processed to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than already specified in this notice.

If you do not want the company to process your personal data, please do not share any with us.

The Company has appointed a Data Protection Officer (DPO) to oversee compliance of this privacy notice. If you have any questions about this privacy notice or about how we handle your personal information, please contact Leanne Evans – Data Protection Officer (DPO) or India Pite – Data Compliance Coordinator (DCC) at the New Mills office on (+44) 01663 747 061, or via email on: hr@morganward.co.uk

What types of personal information do we collect about you?

Personal information is any information about an individual from which that person can be directly or indirectly identified. It doesn’t include anonymised data. Special categories of personal information require a higher level of protection. The company will not collect sensitive personal data about you.

Information you give us may include (but is not limited to):

• Your contact details including name, address, telephone number and email address
• Information obtained through forms, questionnaires, contracts, service level agreements
• Marketing and communications preferences
• Business-related media for promotional use
• Payment information, professional accreditations, etc.

How do we collect your personal information?

We collect personal information directly from you or via third parties, forms, phone calls, emails, our website and during the course of your relationship with us. Your data may be stored in IT systems, marketing platforms and cloud-based storage.

Why and how do we use your personal information?

We only use your data where legally permitted, including under lawful bases such as consent, contract, legal obligation, vital interest, public task, and legitimate interest. Purposes include managing relationships, administering contracts, legal compliance, promotional communication, investigations, and protecting interests.

What if you fail to provide personal information?

Without certain data, we may not be able to fulfil our contractual or legal obligations, and you may be unable to exercise certain rights.

Change of purpose

We will only use your data for the purposes we collected it. If there is a new purpose, we will inform you accordingly and issue a new privacy notice if necessary.

Who has access to your personal information?

Your information may be shared within the Company or externally with service providers, clients, regulators or in the context of a business restructure. All third parties are required to maintain data confidentiality and security.

How does the Company protect your personal information?

We implement policies, procedures and technical controls to protect your data from unauthorised access, loss, or disclosure. We restrict access to those who need it for business purposes. In the event of a suspected data breach, we will notify authorities and individuals as legally required.

How long do we keep your personal information?

We retain your data only as long as necessary to fulfil the purposes for which it was collected. Personal data will be securely destroyed or anonymised when no longer required.

Your rights in connection with your personal information

Under data protection law, you have the right to:

• Be informed
• Access your data
• Rectify inaccurate data
• Request erasure
• Restrict processing
• Data portability
• Object to processing
• Rights related to automated decision-making

To exercise your rights, contact Leanne Evans (DPO) or India Pite (DCC) at (+44) 01663 747 061 or hr@morganward.co.uk.

Opting out

You can ask us to stop sending you marketing communications at any time by contacting us.

Third-party marketing

We will not share your data with third parties for marketing purposes without your express opt-in consent.

Transferring personal information outside the EEA

We do not store your data outside the EEA. If we do, we will ensure equivalent protections are in place.

Automated decision making

We do not make decisions based solely on automated processing. If that changes, we will inform you and explain your rights.

Changes to this privacy notice

We may update this notice at any time and will notify you of significant changes or new uses of your personal data.

Website Analytics

We use cookies and Google Analytics to improve your experience. Cookies store user preferences, and Analytics tracks website usage. You can disable cookies in your browser.

Emails

Email communication cannot be guaranteed to be secure during transmission. You are responsible for ensuring emails sent to us are virus-free.

Third-party website links

Our websites may link to external sites. We are not responsible for their privacy policies. Please review the privacy terms of those websites.

Contact

If you have any questions about this privacy notice or how we handle your personal data, contact Leanne Evans (DPO) or India Pite (DCC) at the New Mills office on (+44) 01663 747 061, or via email at hr@morganward.co.uk.