Peresec in South Africa (“Peresec”) Privacy Statement
This privacy statement applies to all personal information collected by Peresec via the internet.
Peresec recognises the importance of your privacy, and that you have a right to control how your personal information is collected and used. We know that providing personal information is an act of trust and we take that seriously. Unless you directly give us consent to do otherwise, Peresec will only collect and use your personal information as set out below.
We collect personal information about you when:
you submit your personal information in the contact form;
you use the Peresec Website, in which case our system automatically collects information relating to your visit to that website, such as your IP address.
We do not collect credit card details.
The Peresec Website will not rent, sell, or share information about you with other people or non-affiliated companies. Any other data collected on the site is purely for the purpose of running the site and will not be shared, rented or sold. Please also refer to our Terms of Business.
Third Party Content
In addition, we may collect your personal information when you have given your consent to another party who holds personal information about you to allow us access to that personal information.
The type of information that we collect from you may include the following: your name, phone number, address, email address, cookies and personal information that you email/send using email functionality on the Peresec Website.
Using and Disclosing Your Personal Information
Our purpose in collecting information about you is to provide you with a better service experience with content and advertising that is more relevant to your interests.
Peresec will not use or disclose any information about you without your consent, unless:
the use or disclosure is for one of the purposes described above or otherwise permitted by this policy;
it is required or permitted by law (including by relevant privacy laws);
we believe it necessary to provide you with a service which you have requested;
to protect the rights, property or personal safety of another Peresec website user, any member of the public or Peresec; or
any of the assets and/or operations of Peresec are being transferred to another party.
If you do not provide requested information, Peresec may not be able to provide you with access to or full use of sections of the Peresec website.
Sometimes, the activities described above require us to share your personal information with other organisations. The types of situations in which Peresec usually discloses personal information, and the types of organisations to which such disclosure is usually made, include the following:
Peresec discloses personal information to its service providers, advisers and other entities with whom Peresec has a business relationship, in the course of operating the Peresec website and Peresec online business and in the course of delivering the Peresec services.
We may contact you at any email or other address or contact point which we have collected or obtained in order to:
provide you with updated information about the Peresec Website; or
provide you with other information about other products or services which you may enjoy.
If you are receiving promotional information from Peresec Website and do not wish to receive this information any longer, you may remove your name from our list by contacting us and asking to be removed from our mailing list. Please allow 7 days for this request to be processed.
Emails sent through the site, enquiries and replies are once-off emails. We will not distribute any email addresses to any third party or associated company of Peresec or use them for anything other than their intended purpose.
Access to the Information We Hold
You can request access to the personal information we hold about you by making a request via the Contact Us form. We will provide you with access unless we are legally authorised not to do so.
If at any time you wish to change personal information that is inaccurate or out of date, please contact us. If you wish to have your personal information deleted, please let us know in the same manner as referred to above. We will take all reasonable steps to change or delete information in response to such a request. If there is a reason that we cannot make that change or deletion, we will inform you of that reason.
Peresec will endeavour to take all reasonable steps to keep secure any information which we hold about you, and to keep this information accurate and up to date. You should note that the internet is not a secure method of transmitting information and, as such, we are not responsible for the security of any information sent or received over the internet.
Please note that Peresec may use overseas facilities to store, process or back up its information. As a result, we may transfer your personal information to our overseas facilities. However, this does not change our commitment to keeping your information secure.
Third Party Websites
Changes to this Privacy Statement
Peresec may update this statement. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your Business Listing or by placing a prominent notice on our site.
If you have any questions about this Privacy Statement or how the Peresec Website deals with your personal information, please contact us.
Peresec International Limited Privacy Statement
This statement serves to inform you of the changes to data protection law under the Data Protection (Bailiwick of Guernsey) Law, 2017 (“DP Law”), as amended to incorporate legislation equivalent to EU Regulation 2016/679 (the “GDPR”).
Peresec International Limited (“Peresec Int” or the “Company”) would like to advise you that we are handling and will continue to handle your data professionally, securely and in accordance with GDPR.
Information privacy is an ongoing responsibility, and Peresec Int will from time to time update this Privacy Statement as we undertake new personal data practices or adopt new privacy policies. Where we do so, we will take appropriate steps to bring the amendment to your attention.
The Company takes the protection of your personal information seriously, and has appropriate technical and organisational measures and policies in place to secure your information and to protect it against unauthorised or unlawful use and accidental loss or destruction. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will only do so in an authorised manner and are subject to a duty of confidentiality. All staff of the Company are made aware of their information security responsibilities.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
- What we need
Peresec Int is a Data Controller of the personal data you (the data subject) provide us. We collect the following types of personal data from you:
- names, title, email addresses, physical addresses, phone numbers, date of birth etc.;
- personal identifiers such as your social security number, national insurance number, tax number;
- information that we will need to conduct ‘know your client’ checks and principles such as details relating to your passport etc.;
- Structure Details; and
- additional information you provide to us in the course of your dealings with us or which we require to provide you with the Company’s product and services.
The data that is collected that personally identifies you (your directors, officers, employees, settlors, beneficial owners and/or beneficiaries) comes from:
- the mandates or other materials you submit to us during the course of your relationship with Peresec Int;
- your business dealings with Peresec Int, including via email, telephone or as stated in our mandates with you;
- third parties (including for anti-money laundering checks, among other things); and
- recording and monitoring tools that we may use for compliance or security purposes (e.g. recording of telephone calls, monitoring emails, etc.).
In limited cases, we also collect what is known as “special categories” of information. Our money laundering, sanctions, financial crime and fraud prevention checks sometimes results in us obtaining information about political opinion, actual or alleged criminal convictions and offences.
Where we process “special categories” of information about you, we do so either because you have given us your explicit consent, we are required by law to do so or the processing is necessary for the establishment, exercise or defence of a legal claim.
- Why we need it
We need your personal data in order to provide you with the following services:
- services stipulated in the Mandate signed with Peresec Int;
- adhere to Money Laundering Regulations and to proceed with AML checks and related actions which the Company considers appropriate to meet any legal obligations imposed on the Company relating to, or the processing in the public interest, or to pursue the legitimate interests of the Company in relation to, the prevention of fraud, money laundering, terrorist financing, bribery, corruption, tax evasion and to prevent the provision of financial and other services to persons who may be subject to economic or trade sanctions, on an on- going basis, in accordance with the Company’s AML procedures;
- internal management and reporting;
- to facilitate our internal business operations, including assessing and managing risk and fulfilling our legal and regulatory requirements;
- to monitor electronic communications for (i) processing verification of instructions; (ii) investigation and fraud prevention purposes; (iii) for crime detection, prevention, investigation and prosecution; (iv) to enforce or defend the Company’s, or their affiliates’ rights, themselves or through third parties to whom they delegate such responsibilities or rights in order to comply with any legal obligation imposed on the Company; (v) to pursue the legitimate interests of the Company in relation to such matters; or (vi) where the processing is in the public interest;
- to disclose information to other third parties such as service providers of the Company, auditors, regulatory authorities and technology providers in order to comply with any legal obligation imposed on the Company or in order to pursue the legitimate interests of the Company;
- to update and maintain records and carry out fee calculations;
- to retain AML and other records of individuals to assist with subsequent;
- the performance of our contract with you or a contract between us and another service provider to us the performance of which is in your interest;
- to comply with the Company’s legal obligations; and
- are necessary for the Company’s legitimate interests indicated above.
- What we do with it
Your personal data is processed in Guernsey. Hosting and storage of your data takes place in Europe with duplicate storage and back up at an affiliate Company established in South Africa.
Where we transfer your information outside of Guernsey and the EEA, we will ensure that the transfer is subject to appropriate safeguards in accordance with data protection laws. Often, these safeguards include contractual safeguards. Please do contact us if you would like more information about these safeguards.
The Company may disclose your personal information as follows:
- to the Company’s service providers and other third party vendors in order to store or process the data for the above mentioned purposes; and
- to competent authorities (including tax authorities), courts and bodies as required by law or requested or to affiliates for internal investigations and reporting.
- How long we keep it
Peresec Int will retain your personal information for as long as required for the Company to perform the Services and/or carry out the purposes for which the data was collected, or perform investigations in relation to the data depending on the legal basis for which that data was obtained and/or whether additional legal/regulatory obligations mandate that the Company retains your personal information.
- What are your rights?
You may have the following rights under data protection laws:
- Right of subject access: the right to make a written request for details of information about you held by the Company and a copy of that information.
- Right to rectification: the right to have inaccurate information about you rectified. You must provide any relevant updates to your personal data held by the Company promptly to ensure its accuracy.
- Right to erasure (‘right to be forgotten’): the right to have certain information about you erased.
- Right to restriction of processing: the right to request that your information is only used for restricted purposes.
- Right to object: the right to object to the use of your information, including the right to object to marketing.
- Right to data portability: the right, in certain circumstances, to ask for information you have made available to us to be transferred to you or a third party in machine-readable formats.
- Right to withdraw consent: the right to withdraw any consent you have previously given us to handle your information. If you withdraw your consent, this will not affect the lawfulness of the Company’s use of your information prior to the withdrawal of your consent.
These rights are not absolute: they do not always apply and exemptions may be engaged. We may, in response to a request, ask you to verify your identity and to provide information that helps us to understand your request better. If we do not comply with your request, we will explain why.
To exercise any of these rights, or if you have any other questions about our use of your information, please contact us at email@example.com.
In the event that you wish to complain about how we have handled your personal data, please contact Data Privacy Manager at firstname.lastname@example.org. We hope that our Data Privacy Manager can resolve any query or concern you raise about our use of your information. If not, you have a right to complain to the data protection regulator where you live or work, or where you think a breach of your personal information has taken place.
In Guernsey, your local regulator is the Data Protection Authority.