UK-GDPR Privacy Notice

Introduction

At Totalview Consultancy Services Ltd, we treat the privacy of our visitors, clients, customers and partners and their personal information, with the highest level of importance and skill and this policy details the measures taken in preserving and safe guarding your privacy when you visit, communicate with our site or personnel or make use of our Services.

A detailed explanation of how we store, manage and retain any personal information about you is explained in this Privacy Notice.

Regular updates of this policy are completed in line with general Data protection regulation, requiring you to check back on this policy from time to time. The most recent review of this policy was conducted on the 03/03/2026.

This notice is made available via all company internet sites and resources, that are available to individuals, as detailed below and via request to “contactus@totaviewcs.co.uk’. We aim to respond to all enquiries within 48 working hours.

• www.totalviewcs.co.uk
• www.totalviewconsultancyservices.co.uk/
• bluespotriskmanagement.co.uk
• boardadvisory.co.uk

We aim to make this policy as simple and straightforward as possible and it may contain the following terms, the meaning of which is shown below.

Information Collection – Service Provision

In providing our services, or in commuinicating with you for the purposes of these services only, to you we may collect and/or process ‘personal data’, as detailed in the UK Data Protection Regulation. T, and this processing is conducted purely for the provision of contracted services. This processing may be our company data, or that on behalf of our clients or customers.

We respect the security and privacy of this data, and at all times ensure that processing is carried out in accordance with the legislation and best practice, with many of these practices being aligned with industry standards such as ISO27001.

Operation of the above sites, see Introduction, and resources may require the collection and processing of the following Data:

• Visit details to our sites and resources and resources used on our site are not limited to just location and traffic Data, weblogs or other communication information.
• Information given to us when you contact us to request further information on the Company services,
• Data offered by filling out booking forms on our site and resources during service purchase.

The personal data we may process pocess includes;

• Client Contact Information,
• Prospective Clients’ contact details,
• Contact Details.

We operate a minimization first principle and we only store the absolute minimum require to deliver our service and retain this as long as it remains pertinent to the contract or agreement or where set by regulatory authorities, either of which are set out in our policies. We maintain this information as accurate to the very best of our ability, and we understand the right that you have to have this corrected at any point in time.

We may share details in the provision of our contracted services and/or of required by UK Law, in any case all feasible security measures are adopted and implemented. We cannot accept any liability for processing by any third party outside of our direct control / remit.

When we engage with clients and customers and agreement is put in place, along with an NDA if deemed appropriate, and these may state any specific security measures.

Use of Artificial Intelligence (AI)

For the purposes of this section of the privacy notice AI shall mean the capability of computational systems to perform tasks typically associated with human intelligence, such as learning, reasoning, problem-solving, perception, and decision-making.

At the time of writing this notice the use of AI by Totalview Consultancy Services is not directly included, a component of, or derived in the delivery of its’ services, these being either support, consultancy, assessment, or advisory.

Cookies

In accodance with legislation we have implemented a Cookie Consent Management on our website and these allow for consent to be given and cganges made to preferences.

Long with our digital advertising, promotional and social media providers we may have the occasion to collect information regarding your computer, its software and apps for our services. The information is gained in a statistical manner for our use or advertisers on our site.

Any Data gathered will not identify you personally. It is strictly aggregate statistical Data about our visitors and how they used our resources on the site. No identifying personal information will be shared at any time via cookies.

Close to the above, Data gathering can be about general online use through a cookie file. When used, cookies are automatically placed in your hard drive where information transferred to your computer can be found. These cookies are designed to help us correct and improve our site’s, resources and services for you.

You may elect to decline all cookies via your computer. Every computer has the ability to decline file downloads like cookies. Your browser has an option to enable the declining of cookies. If you do decline cookie downloads you may be limited to certain areas of our site, as there are parts of our site that require cookies. For the management of the operation and performance of the website and our other web resources we may have a use for cookies. To manage how these are managed on your device please consult your browser supplier information or help pages. For example, use the link below to see how to manage Cookies when using Internet Explorer.

https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Your Information and how it is used

We may collect and store information about you to help us provide improved levels and types of services to you but do not in any circumstances make this information available for any other purpose within the Company or to other 3^rd parties.

Our Information Retention Policy, which is available upon request, sets out how we manage the Personal Information that is retained by the Company both as a Data Controller and Data Processor.

The following are the business purposes we may use and process your information for:

• At anytime you request information from us via a form or other electronic transmission we may use your information to full-fill that request relating to our services and products only and for no further purposes beyond this.
• We may also communicate with you on other products or services you may find of interest, only when consent has been provided by you for these additional communications.
• Contracts we make with you create a commitment, which may require contact or use of your information.
• We have the right to notify you of changes to our website, products or services that could affect our service to you.
• Information on products or services similar to those of an existing consumer purchase may be communicated to you. The information sent to you in a communication will be similar to the subject of a recent sale.
• We may also use your information or allow a third party use of this Data, to offer you information about unrelated products or services you may be interested in. We or third parties can only communicate if you have consented to such communication and Data use.
• New customers can be contacted by our website or third parties only if consent has been granted, and only for those communications that you have granted.
• An opportunity for declining your consent is provided on our site. Use this opportunity to withhold your details from us or third parties, regarding Data we may collect.

Be aware we do not reveal identifiable information about you to our advertisers, though we may at times share statistical visitor information with our advertisers.

Storage of Personal Data

• The European Economic Area is large, any in some instances we may be requested to transfer Information outside of this area and in such instances, we will only do this under the instruction of the Data Controller and when appropriate protection is in place. If Data is transferred outside the European Economic Area, it may be for storing and processing. Any processing staff operating outside this area may belong to our website or a supplier, in which they can process or store your information.
• Information submitted by you is stored on secure servers,
• As you know, transmission of Data on the internet is never guaranteed regarding safety. It is impossible to guarantee your safety with electronic Data and transmission. You are therefore at your own risk if you elect to transmit any Data. When offered you may create a password, but you are responsible for keeping it confidential.

Information Sharing

• If necessary, we may share personal information to our group members including such entities as subsidiaries, holding companies and their subsidiaries. Information is shared only when applicable.
• Third party disclosure may be necessary regarding personal information:
  • A sale of our business or its assets, in full or part, to a third party may require personal Data sharing.
  • Legally, we may be asked to share and disclose Data details,
  • To assist in reducing credit risk and fraud protection

Third Party Links

Links on our site that belong to third parties may be found. These websites have their Privacy Policy, which you agree to when you link to the site. You should read this third party policy. We do not accept claims of liability or responsibility in any way for these policies or links, as we have no way to control the third-party sites

Your Rights Under the UK-GDPR

Under the regulation (UK-GDPR) you have the following rights and we respect these and understand our role in delivering these.

• Right to be Informed – Individuals have the right to be informed about the collection and use of their personal data
• Right of Access: Individuals have the right to access and receive a copy of their personal data, and other supplementary information
• Right to Rectification: The UK GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete
• Right to Erasure: The UK GDPR introduces a right for individuals to have personal data erased,
• Right to Restrict Processing: Individuals have the right to request the restriction or suppression of their personal data,
• Right to Data Portability: The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services,
• Right to Object: The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances

At any time the most up to date source of information regarding these rights is the ICO website.

Transparency and Accessing Information: The General Data Protection Regulation provides you with the right to access the information that we collect about you. There will be no charge for reasonable requests and these will be processed in line with the regulation. The contact information below needs to be used to request access about details we process that identifies you.

Contacting Us

We welcome any queries, requests you may have regarding this Privacy Policy, or comments. Please do not hesitate and feel free to contact us at either ‘contactus@totalviewcs.co.uk’.

Data Breaches

If a data breach does occur we will respond as quickly as possible follow an Incident Management process designed and intended to control and minimise impact and rectify where possible.

In accordance with the regulation, if the breach is likely to result in high risk to your righhts and freedoms we will inform you in writing as quickly as is reasonably possible and in any case informing the ICO within 72 Hours.

Data Retention Policy

TCS shall store securely the information supplied by our clients and that collected and stored by our CRM and analytics platforms to allow us to perform our contracted role, for the provision of consultancy and support services, and to manage and improve our services for the period specified by our clients or the business and in any case for no longer than required by UK Law, Regulation or Legislation.

Compliance Management

Our Company policy is to revisit our Data Protection Impact Assessment at least annually or;

• Upon the business undergoing significant change,
• Change or update to the regulation,

As advised by the Data Protection UK Lead Supervisory Authority.