Privacy Policy

​

1. Introduction

Centric AI Consultancy ("Centric AIC") is committed to the lawful and proper handling of personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all data collected and processed for contacts, prospects, employees, potential employees, clients, and service users. It outlines how we collect, use, share, and protect personal information, ensuring transparency and upholding data privacy rights.

​

2. Company Information

Centric AI Consultancy is a UK-based company offering a wide range of AI consultancy and advanced analytics services. We are registered with the Information Commissioner’s Office (ICO) under Registration Number [Insert ICO Registration Number]. For any data protection queries, please contact our Data Protection Officer at:

• Email: daniel@centric-aic.com

 

3. Purpose of Data Collection

Centric AIC collects personal information to:

• Manage communications and provide requested information to contacts and prospects.

• Process service requests, deliver services, and issue invoices for clients.

• Administer employment contracts, facilitate recruitment, and ensure regulatory compliance for employees.

• Support HR functions and assess potential candidates for employment.

 

4. Types of Personal Information Collected

• Contacts and Prospects:

  • Full name, business address, email, and telephone contact details.

  • Additional details for prospects involved in discussions about potential services.

• Employees and Potential Employees:

  • Full name, contact details, date of birth, National Insurance number, next of kin, passport and driver’s license details, bank account information, health-related data, employment history, and other relevant details for employment purposes.

• Clients (Individuals and Companies):

  • For individuals: Name, contact information, and payment details.

  • For corporate clients: Contact information of representatives, business address, invoicing information, and any required personal data for service delivery.

 

5. Information Sharing

Centric AIC shares personal information only when necessary, including:

• With trusted service providers, like payroll or health services, under contract.

• With clients, for security clearance or identity verification.

• For fulfilling contractual obligations, such as providing training details or processing dose monitoring data.

• As legally required, for compliance with regulations (e.g., HMRC or anti-money laundering laws).

 

6. Use of Information

Personal data is used to:

• Provide and support requested services, including training and consultancy.

• Communicate relevant updates and potential service offerings.

• Fulfill contractual and legal obligations, including employment administration.

• Assess company performance and improve services (anonymised data may be used for this purpose).

 

7. International Data Transfer

Personal data is not transferred outside the UK unless:

• Required by the client as part of service delivery.

• Necessary for international project verification or compliance with specific legal requirements.

In such cases, individuals will be notified prior to the transfer.

 

8. Data Retention

Centric AIC retains personal information as follows:

• Contacts and Prospects: Data is kept for up to 10 years unless a deletion request is made. Proposal data is retained for three years.

• Employees: Employment records are retained for up to 50 years or until the employee reaches 75 years old. Financial records are kept for seven years. For unsuccessful candidates, data is retained for up to two years if consent is given; otherwise, it is deleted after three months.

• Clients: Ionising radiation service data is retained for 50 years, non-ionising for the same period, invoicing data for 10 years, and training records for six years.

 

9. Rights of Individuals

Under GDPR, individuals have the right to:

• Be informed about data processing.

• Access their data.

• Rectify inaccurate data.

• Request data erasure.

• Restrict processing.

• Data portability.

• Object to data use.

• Not be subject to automated decision-making, including profiling.

Centric has procedures in place to ensure prompt response to such requests.

 

10. Accessing Personal Information

To access the personal data we hold about you, please contact our Data Protection Officer. We aim to respond within five working days.

 

11. Withdrawing Consent

You may withdraw consent for processing your personal data at any time. Contact our Data Protection Officer to make this request. Note that withdrawing consent will not affect the lawfulness of data processing prior to the withdrawal.

 

12. Contact for Data Protection Queries

For questions or concerns regarding this Privacy Policy or your personal data, please reach out to:

• Data Protection Officer: Daniel V

• Email: daniel@centric-aic.com

If you believe your data rights have not been respected, you may file a complaint with the ICO at https://ico.org.uk/concerns.

 

13. Policy Updates

This Privacy Policy is subject to periodic updates in response to changes in legal requirements or company practices. The latest version will be made available on our website.

Issue Date: 25th October 2024