Site Content

Eventus Consulting respects your right to privacy.  This Privacy Policy explains who we are, how we collect, share and use your personal data and how you can exercise your privacy rights. We provide interim and consultancy services to support our clients and help them develop, grow and nurture their internal audit and risk functions. More information our services can be found here.

In May 2018, the General Data Protection Regulation (the “GDPR”) came into force in the EU. This, in combination with a variety of global privacy laws, gives people more control of their data and guides the way businesses collect and use personal data.

We will continue to update this notice as we receive feedback on how to make it easier to understand. If you have any questions or concerns about our use of your personal data, then please contact us using the contact details provided at the bottom of this Privacy Policy.

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.  We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws. 

This policy was last updated on 26th June 2020.

The personal information that we may collect about you broadly falls into the following categories:

Information that you provide voluntarily

If you choose to contact us through our website, we will request your name, business URL and your contact details. This information is used to contact you about out your specific request or to provide you and your business with information on the services we provide and how they may benefit you.

Information that we collect automatically

When you visit our Website, we may collect certain information automatically from your device.  In some countries, including countries in the European Economic Area, this information may be considered personal data under applicable data protection laws.

Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information.  We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked.  

Collecting this information enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them.  We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors.

Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and Similar Tracking Technology” below.

We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal information about you.  For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Policy.

In addition to using your information to fulfil a contract to provide you with requested products or services, we may also use your information in the following ways:

• to monitor and improve our services and the Website;
• to provide you with information about other services we offer that are similar to those that you have already purchased or enquired about, or that we feel may be of interest to you;
• to notify you about changes to our services;
• to administer the Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• to enable us to comply with any legal or regulatory requirements.

We collect much of your information on the grounds of: (i) legitimate interests (for example, to send you direct marketing about products and services similar to those you have purchased from us or negotiated or enquired about, or to help us administer the Website); and (ii) fulfilment of a contract with you (for example, to provide you with products or services you have purchased from us).

If we require your personal data for fulfilment of a contract with you (for example, to provide services or products to you or to receive payment from you), we may be unable to fulfil the contract without your personal data.

Where we rely on legitimate interests, our legitimate interests are the promotion of the services offered by Eventus Consulting and the provision of information in respect of services you have already purchased from us or in which you have expressed an interest in purchasing. 

If we are unable to rely on legitimate interest, fulfilment of a contract or any other ground set out in the GDPR (or other applicable privacy law) to process your personal data, we will obtain consent from you to the processing. 

If you give us your consent, you can withdraw it at any time by clicking on the link in the email we send to you, or by emailing information@eventusconsult.com. Withdrawal of your consent won’t affect any processing we have carried out in respect of your personal data prior to you withdrawing consent.

We may disclose your personal data to third parties:

• if we utilise a third party (either by subcontracting or in partnership) to provide certain aspects of the services you have requested, where your personal data is required in order to facilitate these contracts or services;
• if we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
• if Eventus Consulting, or substantially all of its assets are acquired by a third party and the personal data held by it about its customers will be one of the transferred assets; 
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or to protect the rights, property, or safety of Eventus Consulting, our customers, or others; or
• Any other third party where such sharing is necessary and you have provided appropriate consent to the sharing of your personal data.

The organisations we share personal data with are as follows;

• Government bodies and Regulators such as UWV, HMRC, the Health & Safety Executive (HSE), Federal Trade Commission, data protection regulators worldwide
• External auditors and professional advisors (such as Financial auditors)

We will always ensure that personal data will only be shared where there is a requirement to do so, and where appropriate technical, organisational, and where necessary, contractual measures are in place in order to ensure its protection.

We use appropriate technical and organisational measures to protect the personal data that we collect and process about you.  The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.

Eventus Consulting are based in the United Kingdom (UK) and operate globally, therefore the information we process may be transferred outside your country of residence. As such, the below is designed to give you a clear understanding of any overseas transfers as it relates to your country of residence.

The data that we process about you may be transferred to, or stored at, a destination outside of your country of residence, for example to the UK if you reside in a country outside of the UK. It may also be processed by staff operating outside of your country of residence who work for us or for one of our suppliers/partners.

We have assessed our legal grounds to transfer your data and have an appropriate mechanism to facilitate this that ensures the security and confidentiality of any transferred data and compliance with local privacy laws. This includes ensuring that our supply chain has appropriate transfer mechanisms in place, such as the EU-US Privacy Shield, SCCs or Binding Corporate Rules.

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).  

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. 

You have the following data protection rights:

• If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “Contact Us” heading below.
• In addition, if you are a resident of the European Union, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the “Contact Us” heading below.
• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by either contacting us using the contact details provided under the “Contact Us” heading below or by following any unsubscribe instructions contained within any email marketing communications sent by us.
• Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time.  Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

• Under the California Consumer Privacy Act, Californian residents have the right to direct a business that sells personal information about you to third parties not to sell your personal information. Eventus Consulting do not engage in the sale of personal data.

• Under the California Consumer Privacy Act, Californian residents have the right to request that a business that sells personal information about you, or who discloses your personal information for a business purpose, provide you with information about the information disclosed and the recipients of that information. Eventus Consulting do not engage in the sale of personal data.

• Under the California Consumer Privacy Act, Californian residents have the right to not be discriminated against for exercising their rights. Eventus Consulting shall not discriminate against any person who exercises their rights under the any applicable privacy law. 
• You have the right to complain to a data protection authority about our collection and use of your personal information.  For more information, please contact your local data protection authority. In the UK, this is the Information Commissioner’s Office who can be contacted here or by phoning 0303 123 1113.

Eventus Consulting do not offer financial incentives for the collection or use of personal data. If Eventus Consulting were to offer any financial incentives for the collection or use of personal data, including but not limited to the sale of personal data or the deletion of personal data, it shall notify consumers and provide the option for consumers to opt-in. Such an opt-in may be revoked at any time by the consumer.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

The Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

If you have any questions or concerns about our use of your personal information, please contact us using the following details: 

Eventus Consulting 

40 Hoghton Street

Southport

Merseyside

PR9 0PQ

Email: information@eventusconsult.com