Skip to content

CDS privacy notice

This privacy notice will provide information about how we handle your personal data as a client of CDS. If you have any queries, please contact compliance@bgbs.co.uk

Contacts

Your personal data is processed by the following controller:

Controller Address
Corporate Document Services Ltd Riverside House, 7 Canal Wharf, Leeds, LS11 5AS

You can write to us at the above address or you can contact the compliance team by email on: compliance@bgbs.co.uk or by telephone on 0113 3994000.

What personal data we use and why

What Examples Purpose Lawful Basis Legitimate Interest (if applicable
Identifiers First name, Last
Name
To allow us to identify you and
refer to you by the correct name

The processing is necessary for a contract

The processing is necessary for your legitimate interests or the legitimate interests
of a third party

To allow us to contact you
regarding our professional
services from a B2B perspective
Current work/employment details

Job role, office location, email communication,
meeting minutes.

Work email address and contact number

To be able to contact you in relation to the work we carry out for you. To allow us to contact you with any new marketing The processing is
necessary for a contract
The processing is
necessary for your
legitimate interests or
the legitimate interests
of a third party
To allow us to contact you
regarding our professional
services from a B2B perspective

With whom we share your personal data

Who What Lawful Basis Legitimate Interest
Bailie Group Business Services Identifiers, Current work/employment details The processing is necessary for a contract  
IT Service Providers Identifiers, Current work/employment details The processing is necessary for a contract  
CDS Support Ltd Identifiers, Current work/employment details Legitimate interest To pass details within our Group on where we believe they may be able to provide a service that you have indicated you are interested in.
Newspress Ltd Identifiers, Current work/employment details Legitimate interest To pass details within our Group on where we believe they may be able to provide a service that you have indicated you are interested in.

How long we store your personal data

We store your personal data for two years from the date of our last interaction with you, after which we will delete your details.

Personal data which relates to records such as contracts, order information or accident records (where you visit any of our premises) may be kept longer and these details can be located in our Data Retention Policy which can be provided upon request.

If you do not provide us your personal data

If you do not provide us your personal data, we will not be able to uphold our responsibilities of the contract.

Your rights

Your right of access

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

Your right to rectification

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing

You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing

You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.

Your right to data portability

This only applies to information you have given us. You have the right to ask that we transfer the 1 / 2 information you give us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the
processing is automated.

You are not required to pay any charge for exercising your rights. We have one month to respond to you. Please contact us at compliance@bgbs.co.uk to exercise any rights.

Withdrawal of consent

Where we use consent as our lawful basis, you are provided the right to withdraw that consent as easily as
you provide it. Where this is the case we will advise how to withdraw that consent upon collection.

Automated decision-making

There is currently no automated decision making taking place.

International transfer of personal data

Where we believe there will be any international transfers to countries outside of the UK or EEA we will
ensure that one or more of the following safeguards are in place including:

  • Adequacy Decision
  • Standard contractual clauses with a Transfer Impact Assessment
  • International Data Transfer Agreement with a Transfer Impact Assessment
  • Binding Corporate Rules.

Or we will use one of the following exceptions to process the personal data lawfully:

  • We collect explicit consent
  • We have a contractual requirement to do so
  • To manage any legal claims
  • It is in the public interest
  • To protect the vital interest of an individual
  • It is a one off transfer and we have compelling legitimate interest to do so.

How to complain

We work to high standards when it comes to processing your personal information. If you have any concerns with the way we are processing your personal data, we encourage you to contact us on compliance@bgbs.co.uk and we will respond.

If you are not satisfied when it comes to our response or still have concerns with the way we are processing your personal data, you have the right to complain to the Information Commissioner's Office (ICO). Please visit the ICO's website for further details.