Use of personal information
We process personal information to enable us to carry out our work as insolvency practitioners which includes processing data that was held by companies and or individuals before our appointment together with data collected during an insolvency procedure, a solvent winding up, or a fixed charge receivership. Our legal obligation to process personal data arises from work we are required to carry out under insolvency and other related legislation.
As defined by data protection legislation, our insolvency practitioners are Data Controllers of personal data and MGA will act as Data Processor on their instructions, specifically in relation to an insolvency procedure, a solvent winding up, or fixed charge receivership (collectively, “the insolvency procedure”). Personal data will be kept secure and processed only for matters relating to the insolvency procedure being dealt with.
The data we may process
The personal data our insolvency practitioners may process will be basic details that may identify an individual and will typically be sufficient to allow us to carry out our work as insolvency practitioners, for example, dealing with the claims of individuals who are owed monies by the insolvency procedure over whom we have been appointed.
However, insolvency practitioners may be appointed over entities that process personal data that is considered more sensitive, for example health records, created before our appointment. Although we will take appropriate steps to safeguard sensitive data (or to destroy it where it is appropriate to do so), subject to limited exceptions, for example, where we identify previous conduct and/or action that requires further investigation, we will not be processing sensitive data.
We may share personal data with third parties where we are under a legal or regulatory duty to do so, or it is necessary for the purposes of undertaking our work as insolvency practitioners. We may also share personal data to lawfully assist the police or other law enforcement agencies or otherwise as permitted by the law.
How long we hold information
Personal data will be retained for as long as any legislative or regulatory requirement requires us to hold it. Typically, this may be up to 6 years after which it will be destroyed.
You have the right to receive the information contained in this document about how your personal data may be processed by us.
You also have the right to know that we may be processing your personal data and, in most circumstances, to have information about the personal data of yours that we hold, and you can ask for certain other details such as what purpose we may process your data for and how long we will hold it.
Individuals have the right to request that incorrect or incomplete data is corrected and in certain circumstances, you may request that we erase any personal data on you which may be held or processed as part of our work as insolvency practitioners. If you have any complaints about how we handle your personal data, please contact Karen Goldstein of our senior management at firstname.lastname@example.org to resolve the issue, where possible. You also have the right to lodge a complaint about any use of your information with the Information Commissioners Office (ICO), the UK data protection regulator.