Privacy Policy

Introduction

Welcome to Eckersley O’Callaghan Limited, Eckersley O’Callaghan SARL, Eckersley O’Callaghan & Partners LLC and Shanghai Eckersley O’Callaghan Structural Design Consulting Co Ltd’s (EOC) privacy notice.

This privacy notice provides information on how EOC collects and processes your personal data when you visit our website, contact us or otherwise interact with us.

This website is not intended for children and we do not knowingly collect data relating to children.

1. Important information and who we are

EOC is the controller and responsible for your personal data. We have appointed a data privacy manager. If you have any questions about this privacy notice or our data protection practices, please contact the data privacy manager.

Full name of legal entity:
Eckersley O’Callaghan Limited

Name or title of data privacy manager:
Practice Manager

Email address:
[email protected]

Postal address:
9th Floor, 236 Gray’s Inn Road, London WC1X 8HB

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK data protection regulator (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

2. The data we collect about you

We may collect, use, store and transfer different kinds of personal data about you as follows:

— Identity Data (e.g. name, title).
— Contact Data (e.g. email address, telephone number).
— Transaction Data (only if you engage our services).
— Technical Data (e.g. IP address, browser type, location, device information).
— Usage Data (e.g. information about how you use our website).
— Marketing and Communications Data (e.g. preferences for receiving updates).

We may also collect, use and share aggregated data, such as statistical or demographic information. This is not considered personal data as it does not directly or indirectly reveal your identity.

We collect personal data through direct interactions (e.g. when you contact us via our website) and via automated technologies (e.g. analytics cookies).

We also use Microsoft Clarity to help us understand how visitors interact with our website through session recordings, click tracking and heatmaps. This allows us to analyse usage patterns and improve the website experience. Microsoft may collect data using cookies and similar technologies. For more information on how Microsoft collects and processes data, please see the Microsoft Privacy Statement.

3. The data we collect about you

We will only use your personal data for the purpose for which we collected it which include the following:

— To register you as a new client.
— To process and deliver your services.
— To manage your relationship with us.
— To enable you to participate in a survey.
— To improve our website, services, marketing or customer relationships.
— To recommend services which may be of interest to you.

We rely on the following lawful bases for processing: (i) performance of a contract, (ii) compliance with a legal obligation, and (iii) our legitimate interests, provided that these are not overridden by your rights. In limited cases, we may also rely on your consent.

4. How we share your personal data

We may share your personal data with:

– Professional advisers (e.g. lawyers, accountants, insurers).
– IT service providers who support our website and infrastructure.
– Subcontractors or consultants assisting us with services.
– Regulators or other authorities where required by law.

All third parties are required to respect the confidentiality and security of your data and must only process it in accordance with our instructions.

5. International transfers

We may transfer, store and process your personal data outside the European Economic Area.
Whenever we transfer your data outside the UK, we ensure it is protected by using one or more of the following safeguards:

– The country has been deemed to provide an adequate level of protection.
– We have put in place Standard Contractual Clauses approved by the UK authorities.
– The transfer is otherwise permitted under data protection law.

6. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, accessed or used in an unauthorised way, altered or disclosed.

Access is limited to employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to confidentiality obligations.

We have procedures in place to deal with any suspected personal data breach and will notify you and any relevant regulator where legally required to do so.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal or regulatory requirements.

To determine the appropriate retention period, we consider the type and sensitivity of the data, the purposes for processing, and whether those purposes can be achieved by other means.

Where appropriate, we may anonymise your personal data so it can no longer be associated with you. In that case, we may use such information without further notice.

8. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data including the right to:

– Request access to your personal data.
– Request correction or deletion of your data.
– Object to our processing.
– Request restriction of processing.
– Request transfer of your data to you or a third party.
– Withdraw consent (where relevant).

To exercise any of these rights, please contact us using the details in section 1.