Privacy Policy

Deallus Holdings Limited, together with any of its affiliates, subsidiaries, parent and other related entities, (“Deallus”, ”we” or “us”) are committed to protecting and respecting your privacy. We are committed to maintaining compliance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA), the California Consumer Privacy Act (CCPA) and any associated data protection regulations that come into force as and when required. The Personal Data of California residents are subject to the protections of the CCPA. Residents of California should therefore consult Deallus’ CCPA privacy notice.

This policy together with our Website Terms and Conditions and Cookies Policy set out the basis on which any personal data we collect from you, or that you provide to us in connection with our website and wider business activities, will be processed. Please read the following privacy policy carefully to understand our views and practices regarding your personal data and how we will treat it.

By visiting https://www.deallus.com, including any and all sub-domains of this domain name (the “Site”), you are accepting and consenting to the practices described in this policy. For the purpose of GDPR and DPA, the data controller is Deallus Consulting Limited, a company registered in England & Wales with company number 05253532 and whose registered office is at 1 Poultry, London, EC2R 8EJ, United Kingdom.

This policy also extends to personal information Deallus collects about you from third parties and publicly available sources or that we obtain directly from you as part of business development and research activities. For more information, please refer to our Research Policy.

INFORMATION WE COLLECT FROM YOU

Generally, you can visit the Site without providing any personal data. However, for accessing some parts of the Site, such as downloading certain documents, we may collect personal data from you. We will hold and process any personal information which you provide via the Site or by submitting emails and/or online forms for our own internal business purposes and we will not pass on or sell, online or otherwise, any personal information to third parties.

We log the domain and IP address of all visitors to the Site. This information does not identify individuals, only the computer or other device which is being used to access the Site. This information is used for statistical purposes only, it is not used to contact you and is not sold to any third parties. The data that we collect from you will be processed and managed by the third-party IT supplier operating under direct instruction from Deallus. Your data will not be used by our supplier for any purpose other than that specified by Deallus.

USES OF INFORMATION COLLECTED

We use:

  • Information you give to us to:
    • Ensure content from our Site is presented in the most effective manner for you and your computer or other device.
  • Information we collect about you to:
    • Administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
    • Improve our Site and ensure that content is presented in the most effective manner for you and your computer or other device;
    • Allow you to participate in interactive features of our Site when you choose to do so;
    • Support our efforts to keep our Site safe and secure;
    • Measure or to understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and
    • Make suggestions and recommendations to you and other users of our Site about goods or services that may interest you or them

We also collect standard internet log information to track the behaviour of visitors to the Site. We do this to receive information regarding Site activity, such as the number of visitors to our Site and the frequency of such visits. This information is collected in a way which does not identify you or any other individual. We make no attempt to find out the identities of those visiting our Site and we do not associate any data gathered from the Site with any personally identifying information from any source.

COOKIES

Please also read our Cookies Policy. The Cookies Policy lists the cookies used by the Site and states how you can restrict or delete the listed cookies.

OTHER INFORMATION YOU PROVIDE

In order to request information about Deallus, apply for a job or submit an enquiry, you will be asked to submit personal information about yourself (for example, your name, e-mail address, etc.).  Personal information can be given via our website and when you correspond with us by phone or email. By doing so, you are consenting to Deallus processing your personal data as described in this Privacy Policy. This information is used by Deallus and the members of our group only for the purposes of fulfilling your request or providing a specified service and is never given or sold by us to any third party. Your information is held in our systems for as long as you continue to use the service you requested and will be removed in the event that it is no longer needed.

PEOPLE WHO CONTACT US THROUGH SOCIAL MEDIA

You can contact Deallus via Facebook, Twitter or LinkedIn by direct message if you wish to enquire about our services or wish to comment on our services. These communications are managed by our Marketing department and will only ever be shared internally at Deallus for the purpose of providing you with the information you have requested.

SHARING YOUR PERSONAL INFORMATION

We do not sell, trade, rent or licence personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users of the Site with our business partners, trusted affiliates and advertisers for the purposes outlined above and to improve optimisation of our Site.

You agree that we have the right to share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

STORING AND PROTECTING YOUR PERSONAL INFORMATION

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data on our Site. Sensitive and private data exchange between the Site and its users happens over a SSL secured communication channel and is encrypted and protected with digital signatures.

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site. Any transmission of data is at your own risk. Once we have received your information, we will use strict procedures and security measures to try to prevent unauthorised access to your data.

RETAINING YOUR PERSONAL INFORMATION

Deallus retains Personal Data, as necessary, for the duration of the relevant business relationship or activity. We may also retain Personal Data for longer than the duration of the business relationship or activity to protect ourselves against legal claims, use the data for analysis or historical recordkeeping or comply with our information management policies and schedules. For more information about our data retention and disposal practices, please reach out to privacy@deallus.com.

DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

YOUR RIGHTS

Under GDPR and DPA, Deallus recognises and respects that you have rights as an individual providing personal data:

  • By engaging with Deallus via our website, by completing an application form or submitting an enquiry you are consenting to Deallus processing your personal data and may withdraw consent at any time.
  • You have the right to know exactly how your personal data will be processed by Deallus. Deallus commits to processing your data fairly, lawfully and transparently, details of which are set out in this Privacy Notice.
  • You have the right to request access to the personal data that Deallus holds about you.

If you wish to request access to the personal data held by Deallus about you, please contact our HR department on privacy@deallus.com.

  • You have the right to request changes to the data held about you if the data is incorrect or requires additional information.
  • You have the right to request deletion of your data or the right to be forgotten completely where there is no legitimate reason for your data to continue to be processed.
  • You have the right to request the processing of your data is restricted so that the data remains stored but is not further processed by Deallus.
  • You have the right to request a copy of your data in a portable format.

You may notify Deallus of any request to change how your personal data is processed by email on privacy@deallus.com. Deallus retains the right to continue processing personal data if there are compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual, or the processing is for the establishment, exercise or defence of legal claims.

Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies, terms and conditions and cookies policies and that we do not accept any responsibility or liability for these policies, or the security measures applied in respect of any such websites. Please check these policies before you submit any personal data to these websites.

CHANGES TO OUR PRIVACY POLICY

Our privacy policy will be reviewed frequently to ensure we continue to maintain compliance with GDPR, DPA, CCPA and any associated data protection regulations. We may update this privacy policy at any time and any changes we make to our privacy policy in the future will be posted to this page of our Site. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and please check back to see any updates or changes.

CONTACT

Questions, comments and requests regarding this privacy policy are welcomed by us and should be addressed to privacy@deallus.com.

You have the right of access, rectification and erasure and, although we would hope that you would address any queries directly to us in the first instance so that we can resolve them, you may complain to the UK Information Commissioner.

PRIVACY NOTICE TO CALIFORNIA EMPLOYEES AND JOB APPLICANTS REGARDING THE COLLECTION OF PERSONAL INFORMATION

Deallus adopts this Privacy Notice to California Employees and Job Applicants Regarding the Collection of Personal Information (the “Privacy Notice”) to comply with the California Consumer Privacy Act (“CCPA”).  Any terms defined in the CCPA have the same meaning when used in this Privacy Notice.

Deallus is committed to protecting the privacy and security of personal information. The Company is one that, in the course of its business, asks job applicants, prospective employees, and employees to provide personal information necessary relating to their employment or prospective employment.  This Privacy Notice describes how the Company collects and uses employee personal information, the categories of personal information it collects, and instances where Company may disclose employees’ personal information to third parties.  Company will only collect and process employee personal information in accordance with this Privacy Notice, unless otherwise required by applicable law.

Categories of Personal Information Company Collects and How We Use It

The Company collects and processes information from employees for human resource, employment and benefit administration purposes, and where necessary to comply with any local, state, and federal legal obligations. The Company obtains the categories of personal information listed below directly from employees and the information they provide during their job application process, their employee onboarding process, and during the selection of benefits as an employee.  In some cases, Deallus may obtain a background check and/or consumer report from a consumer reporting agency once an offer of employment is made.

Company collects the following categories of your personal information:

Personal identifiers that associates provide when they apply for a job, supply information for benefits, or in context of employment with us, such as employees’ first and last name, address, email address, telephone number, date of birth, social security number, driver license number, passport number, and/or other government identification numbers, immigration and work authorization status, signature, and username and/or account name. The Company collects this information to make an employment and/or job related decision that involves the employee, to fulfill or meet the reason employee provided the information as a job applicant or employee, to provide employees with employment with Company, to manage the employment relationship with us and for general employee administration and processing (including associate payroll and benefits administration), and to create, maintain, and secure  online employee accounts with the Company.

Financial information such as banking information for direct deposit, debit card number, credit card number, tax selections, pay rate, payroll deduction information. The Company collects this information for employees related human resource administration (including employee payroll and benefits administration), processing work-related claims (for example, insurance or payment claims), and all related accounting and auditing.

Benefit selection and related information such as employee benefit selection, social security number or other government identification number, date of birth, health insurance information, policy number, and selections. Deallus collects this information to administer benefit claims and for employees related human resource administration.

Protected classification and diversity information such as age, race, color, national origin, citizenship, marital status, physical or mental disability, sex (including gender, gender identity, gender expression), and veteran or military status. Deallus collects this information to comply with local, state, and federal laws and regulations and for the Company’s diversity initiatives.

Professional and employment-related information such as current or past employment history, associate status and title, job evaluations, employment status, work schedule, job assignments, hours worked, training and development information, performance evaluation information, disciplinary and counseling information, and termination information.  The Company collects this information to make an employment and/or job related decision that involves the employee, to fulfill or meet the reason associates provided the information as a job applicant or employee, to provide employees with employment with Company, to assess qualifications for a particular job or task, conduct performance reviews and determine performance requirements, for education, training, and development requirements, and to gather evidence for disciplinary action or termination, for other human resource administration purposes, and to administer and process employee benefits.

Education information such as education history. Deallus collects this information to evaluate and make an employment and/or job related decision that involves employees, to provide employees with employment with Company, to assess qualifications for a particular job or task, conduct performance reviews and determine performance requirements, for education, training, and development requirements. Education information of our lawyers may also be used for client marketing.

Health and Safety Information such as health conditions, if relevant to employees’ employment, job restrictions, workplace accident and illness information, and health insurance policy information. Company collects this information to maintain a safe workplace, assess employees’ working capacity and make necessary accommodations, administer health and Worker’s Compensation programs, and comply with applicable laws.

Network activity information, including employees’ iTunes password if they choose to use their own iTunes account on any Company-issued iPhone or use their personal phone for Company business, and internet activity information on company-issued computers. The Company collects this information for confidentiality and security in order to be able to erase devices remotely should data need to be protected.

Beneficiary Information of employee beneficiaries, such as name and contact information, relationship to the employee, birth date, social security or other government identification number, and any other information necessary to process any benefits claims. The Company collects this information to administer and process any related benefit claims.

Emergency Contact Information of person(s) employees designate as their emergency contact(s) such as their name and contact information, and their relationship to the employee. Deallus collects this information to maintain contact information should an emergency involving an associate arise during his/her employment.

Deallus will not collect additional categories of personal information or use the personal information collected for materially different, unrelated, or incompatible purposes without first providing an employee with additional and/or updated notice.

Disclosure to Third Parties

Deallus does not sell or otherwise disclose employees’ personal information to any third parties for any monetary consideration.  Deallus only shares employee personal information with service providers to the extent necessary in order to administer employee benefits, including for payment of wages, tax processing, and health insurance, and in connection with its human resource activities.  Deallus also discloses employee information when required to by local, state, or federal law.

Changes to This Privacy Notice

Deallus reserves the right to update this Privacy Notice at any time and will provide employees with a new Privacy Notice when and if any updates are made.  Deallus would like to use employees’ previously collected personal data for different purposes than those it notified employees about at the time of collection, Deallus will provide employees with notice and, where required by law, seek their consent, before using their personal data for a new or unrelated purpose. Deallus may process employee personal data without their knowledge or consent only where required by applicable law or regulation.