Merrill Consultants Ltd is a data controller responsible for processing personal data under the General Data Protection Regulation (GDPR) (Regulation EU 2016/679).
Our data protection policy and procedures have been developed in line with the requirements of the 1995 European Union Data Protection Directive (Directive 95/46/EC) and the General Data Protection Regulation (in force from 25 May 2018) and applicable national law.
- Information we collect
We collect and process personal data about you when you contact us and purchase our training or coaching services. The personal data we process includes:
- your name
- your home or work address, email address and/or phone number
- your job title, information about job role, personal development and workplace
- your age, ethnicity, gender, nationality, disability status
- your occupation, place of work and work history
- your education and qualifications
- your payment details, including billing addresses
- your IP address, operating system and information related to the browser or device you use to access our website, list of URLs starting with a referring site, your activity on our site and the site you exit to
- any special needs you may have as a learner to allow you to participate in our programmes
- any other information you provide relating to training and coaching services
- The legal basis for processing your information
We process the personal data listed in paragraph 1 above for the following purposes:
- as required to establish and fulfil a contract with you, for example, if you make and enter into an agreement to provide or receive services, or to become an employee or sub-contractor. This may include verifying your identity, undertaking financial checks, billing and payments, communicating with you and arranging the delivery or other provision of products or services. We require this information in order to enter into a contract with you and are unable to do so without it
- to comply with applicable law and regulation
- in accordance with our legitimate interests in protecting Merrill Consultants’ legitimate business interests and legal rights
- with your consent to respond to any comments or complaints we may receive from you, and/or in accordance with our legitimate interests including to investigate any complaints received from you or from others, about our website or our services
- we may use information you provide to personalise (i) our communications to you; (ii) our website; and (iii) products or services for you, in accordance with our legitimate interests
- to monitor use of our website and online services and we may use your information to help us check, improve and protect our products, content, services and website, both online and offline, in accordance with our legitimate interests
- we may also use third parties to undertake credit checks and ensure the validity of billing details in order to prevent fraud, in accordance with our legitimate interests
- to assess and process your job application, and for subsequent employment, legal and administrative purposes, as necessary to take steps at your request prior to entering into a contract or to perform a contract, and/or in accordance with our legitimate interests
- to carry out statistical analysis (on an anonymised basis) which may be carried out by us or selected third parties in accordance with our legitimate interests. For example, we may compile statistics about the use of our website, including data on traffic, usage patterns and user numbers. All such data will be anonymised
- to support any special needs from a learning perspective, when you participate in a training or coaching programme with us
We may also send you direct marketing in relation to our relevant products and services or other products and services provided by us. Electronic direct marketing will only be sent where you have given your consent to receive it, or (where this option is permissible) you have been given an opportunity to opt-out. You will be able to continue to opt-out of electronic direct marketing at any time by following the instructions in the relevant communication.
- Sharing personal data
We may share your personal data with our support team, facilitators, coaches and trainers for the purposes of administration and to deliver products or services, where elements of these are provided by sub-contractors or event’s organisers other than those with which you have directly contracted.
We may also share your personal data with the below third parties:
- our professional advisors such as our auditors and external legal and financial advisors
- our suppliers, business partners and sub-contractors
- third party service providers who will process personal data on behalf of Merrill Consultants in order to deliver our products and services
Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if needed for the legal protection of our legitimate interests in compliance with applicable laws.
In the event that our business or any part of it is sold or integrated with another business, your details will be disclosed to our advisers and those of any prospective purchaser and will be passed to the new owners of the business.
- Retention of personal data
We will not keep your personal information for any purpose(s) for longer than is necessary and we will only retain the relevant personal information that is necessary in relation to the purpose. We are also required to retain certain information by law or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions. Our retention periods are outlined in our Data protection policy.
We will retain information relating to any job application for as long as it takes to process your application and, if it is unsuccessful, for an additional period of around 6 months. If your application is successful, your information will be retained in accordance with your Contract of employment and our Data protection policy.
We will retain your data for a short time beyond the specified retention period, to allow for information to be reviewed and any deletion to take place.
- Storing personal data
The personal data that we collect from you may be transferred to and stored outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Where we do so, the third country’s data protection laws will have been approved as adequate by the European Commission or other applicable safeguards are in place. Further information may be obtained from
6. Rights in relation to my personal data
You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data, clicking the unsubscribe button on any communication we have sent to you or by contacting us at
Where you have consented to us using your personal data, you can withdraw that consent at any time.
If the information we hold about you is inaccurate or incomplete, you can notify us and ask us to correct or supplement it.
You also have the right, with some exceptions, to ask us to provide a copy of any personal data we hold about you.
If you have a complaint about how we have handled your personal data, you may be able to ask us to restrict how we use your personal data while your complaint is resolved. In some circumstances you can ask us to erase your personal data if you withdraw your consent, it is no longer necessary for us to use your personal data, you object to the use of your personal data and we don’t have a good reason to continue to use it, or we haven’t handled your personal data in accordance with our obligations.
To exercise any of these rights please contact us on
7. Further information
If you have any queries please contact us on 020 8974 9087 or at www.merrillconsultants.com