The purpose of this Transparency Notice ("Notice") is to provide you with information regarding who we are and how we collect and use your personal data in connection with our marketing activities and the rights that you have in connection with our use of that data. This Notice is given to comply with our obligations under the UK GDPR and the Data Protection Act (DPA) 2018 (together the “DPL”).

Board Intelligence Ltd is a company registered in England and Wales that offers a SaaS platform and services that help businesses to have better and more informed board meetings. For the purposes of this Notice, Board Intelligence is a controller under the DPL. If you have any questions about this Notice, please contact us by email at: info@boardintelligence.com, by telephone on: +44 (0)207 192 8218, or by post at: 24 Cornhill, London, EC3V 3ND.

We have appointed a Data Protection Officer who can be contacted by email at: info@boardintelligence.com.

From time to time we use third-party data providers to obtain personal data for the purposes of contacting individuals who we think are likely to be interested in our product, services, or events. We are happy to provide you with details of these third parties on request.

From time to time we will research publicly available data (for example company annual reports, company websites or social media) to obtain personal data for the purposes of contacting individuals who we think are likely to be interested in our product, services, or events.

We process your personal data in order to: (i) enrich data that we have gathered from you or third parties; (ii) send, analyse and improve the effectiveness of our marketing communications; and (iii) share relevant information with you (directly or indirectly e.g. via social media ) about our research, thought leadership, products and services or to invite you to an event. We rely on legitimate interests to process your personal data (being our interest in providing you with details of our product, services and relevant events as described in this Notice).

The personal data that we process is as follows: first name; surname; title; telephone number; email address; job title/role; nationality; age; month and year of birth, gender; and awards/qualifications (e.g. MBE, OBE).

We do not store details of your nationality, gender, age or month/year of birth however they may appear in a researched list (for example one that has been obtained via a search of Companies House). Where possible, we limit our search parameters to omit this data however where we are unable to do this (for example where data fields are pre-determined) we delete these fields and the data within them on receipt and do not otherwise process them.

We share your personal data with a limited number of our service providers, employees and contractors who have confidentiality and privacy provisions in their contracts that govern use of any data obtained within the course of their employment or engagement. We may share your personal data with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.

As a data subject, you have the following rights under the DPL, which this Notice and our use of personal data have been designed to uphold:

The right to be informed about our collection and use of personal data;
The right of access to the personal data we hold about you;
The right to rectification if any personal data we hold about you is inaccurate or incomplete;
The right to be forgotten – you have the right to ask us to delete any personal data we hold about you. This right is subject to limited exceptions under the DPL (for example we may continue to process your data in connection with the establishment, exercise or defence of legal claims);
The right to restrict (i.e. prevent) the processing of your personal data;
The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation) where processing is automated and based on consent or the performance of a contract;
The right to object to us using your personal data for particular purposes; and
Rights with respect to automated decision making and profiling.

We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was collected.  We maintain a marketing suppression list to ensure that where you have opted out of our communications, you are not contacted again. We also monitor marketing communications sent by email in order to track and improve our communications.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, together with any applicable legal, regulatory, tax, accounting or other requirements.

Data security is very important to us, the steps that we take to secure and protect your data are built around the suite of security policies and controls we have in place to maintain our externally audited ISO27001 and Cyber Essentials Plus certifications. We may sometimes use third party processors that are located outside of the UK or the European Economic Area (“the EEA”), including in the USA. Where we transfer any personal data outside the UK or the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and as required under the DPL.

In addition to your rights under the DPL, you will be given options to restrict our use of your data. This includes the ability to opt-out of receiving marketing emails from us by unsubscribing using the links provided in our e-mails or to specify how you would like to hear from us.  We will ensure that our records are updated to reflect your requirements.

You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receive.