Restructuring and Insolvency – Corporate Client Privacy Notice

In this section, the term "Company" refers to the business which is subject to an Insolvency or restructuring regime (each referred to as an "Insolvency").

Insolvency Practitioners and FRP's roles in Insolvency Proceedings

Definitions under Data Privacy Laws:

A controller is an individual or legal person who decides how and why personal data is processed. A controller is in control and is responsible for the collection, keeping and use of personal data.
A processor is an individual or legal person (other than an employee of a controller) which processes personal data on behalf of a controller.

The data controller for personal data processed by the Company prior to the Insolvency is the Company. Upon appointment, the Insolvency Practitioners act in the capacity of agents of the Company in fulfilling the role of managing the Company's affairs, business and property and so the Company continues to be the controller for personal data collected and processed in this context.

The Insolvency Practitioner will typically be the Data Controller in respect of the information the personal data they process to comply with their own legal and regulatory requirements as Insolvency Practitioners.

FRP may act as a data processor on behalf of the Insolvency Practitioner or the Company as appropriate in relation to the engagement.

What we collect

We collect personal data about our clients in relation to a Corporate Insolvency (directors, shareholders, partners and owners) which is necessary to effectively deploy our professional services as agreed with our clients.

The types of data we collect, and process can vary, it may include:

Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses;
Date of birth;
Gender;
Marital status, co-habitees/co-occupants and dependents;
National Insurance number;
Occupation and function within the Company;
Bank account details, payroll records and tax status information;
Location of employment or workplace;
Salary/wage details;
Pension arrangements and benefits;
Details of any vehicle provided to you by the Company;
Details of any other valuable property (assets) that you have acquired from the Company;
Amounts of any bonuses, dividends or other financial benefits received by you from the Company;
Photo ID produced to confirm your identity;
Details of any personal guarantees or indemnities you may have given in respect of the Company's liabilities
Any explanation you provide of the reasons for the Company's insolvency (where appropriate);
Details of any proposed role or function you may undertake in respect of a successor business (where appropriate);

In limited circumstances, we may also collect, store and use "special categories" of more sensitive personal information. Please see "Special Categories (sensitive) Personal Data" for more details.

We collect data;

Directly when you initially contact us and through the advisory process
Indirectly through subsequent interactions with our clients, from a third party acting on our clients' instructions, or from other third parties (including publicly available information such as Companies House)
From time to time, we may collect additional personal information in the course of our investigation into a Company's affairs. These investigations may involve contacting third parties that are known or suspected to have had business or financial dealings with the client, where we consider that the information they may provide could assist us to properly administer the affairs of the Company
From a number of other sources in a formal Insolvency process, such as the Official Receiver (in England), Accountant in Bankruptcy (in Scotland), In all cases (both solvent and insolvent) information may also be received from the creditors, debtors and employees of the Company, and/or other stakeholders in the process that make such information available to us in the course of administering the affairs of the Company
From information contained in the Company's books and records which is obtained when the officeholder is appointed though in respect of this information, the Office Holder will not generally be a Data Controller of it but will be acting as agent on behalf of the business

How we use your personal data and legal basis for processing

We process your personal data for various purposes including (but not limited to):

Purpose	Legal basis
To enable us to contact and meet with you to gather or provide information To provide you with initial advice about recommendations about a possible restructuring solution or cessation options for the Company To perform other tasks as necessary to provide our services	We have a legitimate interest in using your data for these purposes, as it helps us to manage our relationship with you. We have carried out a Legitimate Interests Assessment (LIA) whereby we have weighed your interests and the risks posed to you against our own interests and consider that they are proportionate and appropriate.
To fulfil any contractual obligations we have to you	We do this to comply with our contractual obligations.
To perform Anti Money Laundering (AML) assessments	The processing is necessary for compliance with our obligation under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulation 2017. Any personal data received as part of our AML process from a corporate client will be processed only for the purposes of preventing money laundering and terrorist financing, unless: Use of the data is permitted by or under and enactment other than the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017; or FRP has obtained the express consent of the data subject to the proposed use of the data.
To administer, support, improve and develop our services generally To enforce our legal rights	We have a legitimate interest in using your personal data in this way, as it helps us to run our business and to safeguard our rights as a business.
To comply with any requirements of law, regulation or a professional body of which we are a member	We do this to comply with our legal, regulatory and professional obligations. Where we do not have a legal obligation, we have a legitimate interest in processing personal data necessary to meet our regulatory or professional obligations.
To fulfil the legal obligations placed upon an Insolvency Office Holder in administering the affairs of the Company;	We do this to comply with our legal obligations under the Insolvency Act 1986.

We may also use personal information in the following situations, which are likely to be less common:

when it is necessary to protect your interests, if you are identified as being subject to a vulnerability;
when it is necessary to protect someone else's interests (for instance, if you have or have been alleged to have acted in a violent or abusive manner toward our staff); or
when it is necessary in the public interest or for official purposes as an Insolvency Office Holder (such as in connection with any corporate governance offences that have or are alleged to have been committed).

If you fail to provide personal information

If you fail to provide certain information when requested, we may take steps to compel you to provide it in Court and/or to acquire the information we need to properly administer the affairs of an insolvent Company from third parties.

Special categories (sensitive) personal data

Some categories of personal data are considered by law to be particularly sensitive and are therefore classed as "special categories" of personal data. These relate to a person's racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health conditions, sexual life, sexual orientation, biometric or genetic data. This type of data is afforded additional protection.

There are a number of situations where we might possess special categories of data about you:

In limited circumstances, special category data may be provided by you where it impacts on the financial position of the Company and is relevant to ensure appropriate advice is given and subsequent disclosure made. Depending on the insolvency procedure we may not need your consent to have or use this information, where it is relevant to the performance of our functions as an Insolvency Practitioner. Where your consent is required, you will be provided with full details of the information that is sought and the reason it is needed, so that you can carefully consider whether to consent. It is not a condition of us providing you with restructuring advice or insolvency services that you agree to any request for consent. You have the right to withdraw any given consent at any time, upon which we will no longer process the information for the purpose originally agreed to, unless there is another legitimate basis for doing so in law
We may possess special category information where it is needed in relation to legal claims or proceedings relating to the affairs of the Company. Depending upon the nature of the information we receive, we may not need your consent to have this information
When such information is needed in the public interest, such as where you lack the mental capacity to deal with the affairs of the Company or where a lasting power of attorney has been provided to another person in respect of your affairs, we do not require your consent to have this information

Information about criminal convictions

We envisage that we may hold information about criminal convictions where these are relevant to the causes of failure of the Company or the performance of the functions of an Office Holder. If it becomes necessary to do so, we will only use this information where we have a legal basis for processing the information. This will usually be where such processing is necessary to carry out the role and function of an Insolvency Office Holder.

We may also use information relating to criminal convictions where:

it is necessary in relation to legal claims
it is necessary to protect your vital interests (or someone else's vital interests) and you are not capable of giving consent
Where it is relevant to the statutory reporting obligations of an Insolvency Office Holder
you have already made the information public, or the information is otherwise in the public domain

We will only collect information about criminal convictions if it is appropriate given the nature of the role of a restructuring adviser or Insolvency Office Holders. Relevant convictions would typically be those relating to theft, fraud or dishonesty, money laundering or terrorist financing.

Sharing and disclosing your personal data

We do not share or disclose any of your personal data without your consent, other than for the purposes specified in this notice or where there is a legal requirement. When we share data with others, we ensure contractual arrangements and security mechanisms are in place to protect the data and to comply with our data protection, confidentiality and security standards.

Your personal data may be shared with:

Third parties involved in Insolvency proceedings, including but not limited to the courts, Official Receiver, creditors, Companies House and other third parties involved
Third party organisations that provide identification checking services
Third party organisations that provide applications/functionality, data processing or IT services to us
Other third parties as instructed by you
Our trade associations, professional bodies and business associates e.g. agents, auditors, solicitors, accountants etc.

Occasionally, we may also need to disclose your personal data in the following circumstances:

Based on our legitimate interests, to third parties if we choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
To law enforcement officials, law courts and government and regulatory authorities: (a) if we believe disclosure is required by any applicable law, regulation or legal process; or (b) to protect and defend our rights, or the rights or safety of third parties, including to defend against legal claims based on our legitimate interests.
In exceptional circumstances, to third parties to protect your vital interests if you fell ill or suffered an injury at one of our events or on our premises.

How long we keep your data

We only ever retain personal data for as long as is necessary for the purposes for which it was collected, and we have strict review and retention policies in place to meet these obligations. We keep personal data in accordance with our internal retention policies, which are determined in accordance with our regulatory obligations and good practice.

We retain records collected and created in Formal Insolvency matters for 7 years after the conclusion of the case administration and the officeholder's discharge of appointment.

Your rights

Please read this section in addition to the main rights section.

Your rights in relation to the personal data that we process will depend upon the lawful basis or bases upon which we are holding it. This will vary depending upon where the information has come from (yourself or a third party, such as the Official Receiver in an Insolvency situation) and the nature of our relationship with you. Personal data may be held for more than one lawful basis. Details of the basis or bases we believe we have for processing your data can be found in the relevant sections of our Privacy Notice.

Prospective Clients: If we have provided you with advice about restructuring options or cessation options, you will have a number of rights available to you, which may include access, restriction or transfer and to a lesser degree, erasure.
Insolvency Act Clients: Where we are formally appointed to administer the affairs of a Company (in Liquidation (solvent or insolvent), Administration, Administrative Receivership, Receivership or Company Voluntary Arrangement), there are certain periods that the law requires us to maintain information about the case. Where we are formally appointed to administer the affairs of a business, we are unlikely to be able to agree to a request to erase, restrict or transfer your information, but will explain this to you in further detail should such a request be made.
- Erasure and Rectification: Upon commencement of a formal insolvency, where that information will form part of the legal records of the case and we will be required to retain it, we would be unable to erase or rectify any information though we will make a record where you consider it to be inaccurate. We will always be grateful to receive updates to contact information etc. but will not be able to amend or erase historic information that is part of the formal record of an Insolvency case, such as your address at the time of the Insolvency or the amounts stated owed to the creditors.
- Portability: This right only applies to information that you have provided (so would not apply to information supplied to us by the Official Receiver, or the people you owe money to in an Insolvency situation.) It does not apply to formal Insolvency cases, where our lawful basis for processing is "legal obligation".
- Restriction of processing: In the case of a formal Insolvency appointment, we are unlikely to be able to restrict or erase any data that forms part of the formal record of the Insolvency case, though any such request will be considered upon its merits and a full explanation will be provided to you in response to your request.
Legal Claims: Where legal claims are involved, we may not be able to provide you with access to all of the information we hold, as some of it will be subject to legal professional privilege.