PRIVACY POLICY

GB&M Limited

Privacy Policy

This privacy policy sets out how GB&M uses and protects your personal data. This privacy policy is provided in a layered format so you can click through to the specific areas set out below.

This privacy policy was last updated on 11/11/2024.

Table of Contents

1. INTRODUCTION
2. INFORMATION WE MAY COLLECT ABOUT YOU AND HOW WE COLLECT IT
3. HOW WE USE YOUR PERSONAL DATA
4. DISCLOSURE OF YOUR INFORMATION
5. COOKIES
6. WHERE WE STORE YOUR PERSONAL DATA
7. DATA SECURITY
8. RETENTION OF INFORMATION
9. YOUR DATA RIGHTS
10. CHANGES TO OUR PRIVACY POLICY
11. CONTACT US
12. RIGHT TO COMPLAIN

1. INTRODUCTION

GB&M Limited (‘we’, ‘us’ and ‘our’) are committed to protecting and respecting your privacy.

This privacy policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand how we use your personal data and how we will treat it.

For the purpose of the General Data Protection Regulation (the GDPR), the data controller is GB&M Limited of 175 Grays Inn Road, London WC1X 8UE.

Our nominated representative for the purpose of the GDPR is Alex Johnson, Chief Executive Officer. Our European representative is Francisco Vasconcelos who can be contacted by email at Francisco.Vasconcelos@GlobalBankingMarkets.

2. INFORMATION WE MAY COLLECT ABOUT YOU AND HOW WE COLLECT IT

We may collect and process the following personal data about you:

• Registration, free trials & subscriptions: Information that you provide by filling in forms on our sites www.GlobalBankingMarkets.com / www.GBandM.com (our sites). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services.

• Submitting an enquiry: Information that you provide when completing the ‘contact us’ forms on our site (including but not limited to your name, email address, telephone number, company and job title).

• Events & Conferences: If you register for an event through our site, or by telephone or by any other means, we may collect personal data including (but not limited to) your name, job title, company, address, telephone number, geographical location and email. This information is necessary so that we can complete your registration for the event and provide you with relevant event materials.

• Payment details: If you purchase one of our products or services, we will also ask for payment details. Credit/debit card payments are processed using a third-party supplier and we do not retain the credit/debit card data. Address details may be shared with third party service providers engaged by us for order fulfilment, delivery and payment collection. This personal data is also used by us to complete subscription requests. We may keep details of transactions you carry out through our site and of the fulfilment of your orders for tax purposes.

• Marketing: If you contact us, we may keep a record of that correspondence to facilitate a business relationship with you. The personal data we may use for advertising and marketing purposes includes (but is not limited to) your name, email address, job title, phone number, company name/employer, geographical location and postal address. We may use the personal data you provide us and which we collect from you to inform you about other related products and services which we provide. We may send you marketing communications that are sponsored by our partners and which are targeted to your interests based on information you have provided us such as job title, employer and/or industry.

• Social Media: If you engage with our content on social media, we may receive your personal data via the relevant social media platform provider (including information regarding people with whom you are friends or otherwise connected). This personal data may be shared with the social media platform provider and other users of the social media platform, and you understand that the use of the information we share will be governed by our, and the relevant social media platform’s, privacy policy.

• Surveys & Market research: We may also ask you to complete surveys that we use for research purposes (although you do not have to respond to them) - we may therefore use the information you provide us – including your name and contact details. We may also receive personal data from third party data research companies like Kia Solutions.

• Websites: Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes, to improve our website or the services we offer.

• Online community: You may choose to participate in online membership communities on our sites that allow you to create and publish a profile and other personal information. These communities may provide privacy controls that allow choice in how much of your profile and other information to make public or to share with others within the community. Privacy controls are usually found on the page on which you edit your profile, and each individual is responsible for understanding how those controls work, including default settings, and choosing how the information provided is shared and protected. By participating in these online membership communities, you may be contacted by other participants using the information provided. When you disclose personal information on any public community boards or chat areas of this website, or any other website used as a result of use of this website, such personal information can be collected and used by anyone who views that board or area. This may result in unsolicited messages from other participants or other parties, which are outside of our control or responsibility.

3. HOW WE USE YOUR PERSONAL DATA

We use personal data held about you in the following ways:

• To ensure that content from our site is presented in the most effective manner for you and for your computer.

• To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.

• To carry out our obligations arising from any contracts entered into between you and us.

• To allow you to participate in interactive features of our service, when you choose to do so.

• To notify you about changes to our service. We may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you and we or they may contact you about these by post or by email.

We will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you. Where we permit selected third parties to use your personal data, we (or they) will contact you by electronic means only if you have consented to this.

If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick or leave the relevant box situated on the order form or registration form on which we collect your data unchecked (as indicated) or otherwise contact us at [email protected].

Lawful basis for processing this information

• Contractual necessity: We may use your personal data where it is necessary to perform our contract with you and provide you with the service you have requested (e.g. to provide you with tickets you have purchased).

• Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
• Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.

• Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

4. DISCLOSURE OF YOUR INFORMATION

We may disclose your personal data where necessary to the parties set out below:

• Any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.
• Third party service providers including payment service providers and order fulfilment companies (for example, in order to manage our website or host events you have signed up for).
• Third parties that carry out marketing services for us, but only if you have consented to this.

• In the event that we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets.

• If GB&M Limited or substantially all of its assets are acquired by a third party, personal data held by it about its customers will be one of the transferred assets.

• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or to protect our rights, property, or safety, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

5. COOKIES

We may collect information about you through the use of cookies and similar technologies. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are required for the operation of our website. These essential cookies are always enabled because our website won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our website or use a shopping basket to purchase tickets. You can switch off these cookies in your browser settings, but you may then not be able to access all or parts of our website.
• Performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
• Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences (for example, your choice of language or region).
• Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites.

To manage the cookies and similar technologies used, please click on the image of the cookie on our website to access our cookie management tool.

You can find more information about the individual cookies we collect and the purposes for which we use them in the table below:

Strictly necessary cookies:

Performance cookies:

Functionality cookies:

Targeting cookies:

6. WHERE WE STORE YOUR PERSONAL DATA

The personal data that we collect from you may be transferred to, and stored at, a destination outside the UK. It may also be processed by staff operating outside the UK who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.

Whenever we transfer your personal data out of the UK to service providers or staff, we ensure a similar degree of protection is afforded to it by ensuring that the following safeguards are in place:

• We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data; or
• Transfers are made in reliance on standard contractual clauses approved for use in the UK which give the transferred personal data the same protection as it has in the UK.

By submitting your personal data, you agree to such transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

7. DATA SECURITY

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

8. RETENTION OF INFORMATION

We will only retain personal information for as long as is necessary and as permitted by applicable laws.

We will retain personal information while we are using it, as described in the section above. We may continue to retain it after we have ceased such uses for certain legitimate business purposes or where legally obliged to do so. For example, if you have opted out of marketing communications from us, we will retain limited details about you to ensure we can honour the opt-out request. We may also continue to retain your personal information to meet our legal requirements or to defend or exercise our legal rights.

The length of time for which we will retain your personal information will depend on the purposes for which we need to retain it. After we no longer need to retain your personal information, it will be deleted or securely destroyed.

9. YOUR DATA RIGHTS

You have various rights in relation to your personal data, these are detailed below:

• The right to request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you. You will not have to pay a fee to access your personal data, though we reserve the right to charge a reasonable fee in line with the GDPR in certain circumstances.

• The right to request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.

• The right to request erasure of your personal data. This enables you to ask us to delete your personal data when we no longer need it. We may however not always be able to comply with your request of erasure, for example, if we are required to retain your personal data for legal reasons. We will let you know if this is the case.

• The right to restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data, for example if you want us to establish its accuracy or the reason for processing it.

• The right to data portability. This enables you to request the transfer of your personal data to another party.

• The right to object to processing of your personal data where we are relying on a legitimate interest as the legal basis for that particular use of your data. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.

• The right to withdraw consent at any time where we are relying on consent to process your personal data (for example, for marketing purposes). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

We try to respond to all legitimate requests within a 30-day period. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case we will notify you and keep you updated.

If you wish to exercise any of the rights set out above, please contact us using the contact details set out under the “Contact Us” section below. Please note that we can only deal with requests to exercise these rights where they relate to personal data that we process as data controller.

10. CHANGES TO OUR PRIVACY POLICY

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. We request that you check this privacy policy from time to time in order to keep up to date with any changes.

11. CONTACT US

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected].

12. RIGHT TO COMPLAIN

If you have any concerns about our use of your personal data, please get in touch with us at [email protected] and we will do our best to resolve the issue.

You may also complain to the UK Information Commissioner’s Officer (ICO) if you are unhappy with how we have used your data. The ICO’s contact details can be found through their website here: https://www.ico.org.uk. If you are based outside the UK, you may complain to your local data protection regulator.