Limited functionality available
This Privacy Statement explains what personal information we may gather about you when we provide our clients with services and how this personal information may be used and shared. This Privacy Statement also sets out your rights in relation to your personal information and tells you who you can contact if you have questions.
This Privacy Statement is divided into the sections listed below.
This Privacy Statement applies to the Deloitte Total Reward and Benefits Limited (DTRB) and Deloitte Pensions Services Limited (DPSL) entities within the Deloitte Network (also referred to as “Deloitte”, “we”, “us”, and “our”). As used in this Privacy Statement, the “Deloitte Network” refers to one or more of Deloitte Touche Tohmatsu Limited a UK private company limited by guarantee, and its network of member firms and associated entities, each of which is a legally separate and independent entity. Please see deloitte.com/about for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.
This Privacy Statement applies to actuarial, pensions, investment, employee benefits, reward advisory and other services provided by DTRB and DPSL. When Deloitte carries out these services, we are acting as a Data Controller and this Privacy Statement sets out how we will process your personal information when providing services to our client.
Your personal information will be protected and handled with utmost consideration for its confidentiality and your privacy, and Deloitte will only disclose it to those who need to know in order to appropriately provide the services to our client.
This Privacy Statement contains additional details about when we may share your personal information with other members of the Deloitte Network and other third parties (for example, our service providers).
In this Privacy Statement, we refer to handling, collecting, protecting, analysing, calculating, storing and other professional services in connection with your personal information as "processing".
Deloitte may collect personal information relating to you such as:
Deloitte may also need to process personal information about you that may be considered sensitive or a special category (for example about your health or ethnic origin) that we require to be able to provide the services to our client or that may become apparent to us based on the personal information that we receive.
Deloitte may collect personal information about you in different ways, for example:
This personal information can be received in any manner, including in-person discussions, telephone conversations, and electronic or other written communications.
Without access to all the personal information that we need we may be unable to provide or complete the services to our client.
Where another person (our client, a company, trustee or partnership or any third parties acting on your or their behalf) provides your personal information to us, they must also comply with their obligations under the relevant privacy laws and regulations. Should you feel that the entity for whom you work or a third party has not provided you with proper details about the personal information that they hold about you or has not obtained any necessary consent for us to process that personal information as described in this Privacy Statement then please contact them directly.
Deloitte collects personal information about you to:
We may also use your personal information for the purposes of, or in connection with:
As set out above, we process personal information when providing actuarial, pensions, investment, employee benefits, reward advisory and other services.
We are required by law to set out in this Privacy Statement the legal grounds upon which we rely in order to process your personal information.
We may use your personal information for the purposes outlined above because:
(a) we have a legitimate interest in processing your personal information, which may be to:
or (b) we are subject to legal or regulatory obligations, such as providing information to a public body or law enforcement agency.
We will not process sensitive or special category data without your explicit consent unless permitted by law.
In connection with one or more of the purposes outlined in the “How do we use information about you?” section above, we may disclose your personal information to:
Subject to the terms of our client engagement letters, please note that some of the recipients of your personal information referred to above may be based in countries or regions without data protection rules similar to those in effect in your area of residence. In such cases, adequate safeguards will be in place to protect your personal information. Such adequate safeguards might include a data transfer agreement with the recipient based on standard contractual clauses approved by the European Commission for transfers of personal information to those countries.
For further details about the transfers described above and the adequate safeguards used by Deloitte with respect to such transfers, please contact us using the details below.
You have various rights in relation to your personal information. In particular, you have a right to:
Any request for access to or a copy of your personal information must be in writing and we will endeavour to respond within a reasonable period and in any event within the period required by applicable data protection legislation. We will comply with our legal obligations as regards your rights as a data subject.
Where our processing of special category personal information is reliant on your consent and you withdraw that consent, we will cease processing the relevant information for the purposes of providing our services and the effect may be that we are no longer able to provide the services. However, we may still retain a copy of the relevant information for as long as necessary to comply with applicable laws or professional standards, or as long as the period in which litigation or investigations might arise in respect of our services.
if you wish to exercise any of the rights relating to your information set out above, or if you have any questions or comments about privacy issues, or you wish to raise a complaint about how we are using your information you can contact us in the following ways:
If you have any concerns about our use of your information, you also have the right to make a complaint to the Information Commissioner's Office, which regulates and supervises the use of personal data in the UK, via their helpline on 0303 123 1113.