Privacy Policy

Latymer Partners LLP Privacy Statement

1. Latymer Partners LLP is a UK consulting business chiefly engaged in conducting political risk advisory, deal and market research, and due diligence and litigation-related investigations, including in the context of combating fraud, money-laundering and bribery, in support of our clients’ obligations under UK law, EU regulations and directives, international conventions, UK, EU and US Sanction regimes, and other prevailing regimes such as the US Foreign Corrupt Practices Act and FinCen Rules. The Fourth AML Directive explicitly authorises financial institutions to use third party service providers in meeting its obligations.

2. Latymer Partners LLP seeks to operate within industry best practice at all times and is committed to complying with all applicable legislation, including the UK’s Data Protection Act (DPA) and, in so much as it applies beyond the scope of the DPA, the EU General Data Protection Regulation (GDPR).

3. In the course of our work, Latymer Partners LLP may need to process certain personal information (Personal Data) related to individuals. We are committed to fair and lawful processing, transparency, and protecting the rights and privacy of individuals, while at the same time providing appropriate, prudent and professional services to our clients to enable them to fulfil their societal, regulatory and legal obligations.

4. Latymer Partners LLP understands personal data to be any combination of information which identifies a specific natural person (Data Subject). This may include:

Personal data shall be processed fairly, lawfully and transparently in relation to the Data Subject. In particular, data shall not be processed unless at least one of the conditions in Paragraph 5 above are met.
Personal data shall be obtained only for a lawful purpose as specified in Paragraph 5, and shall not be further processed in any manner not compatible with that process.
Personal data shall be adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed (“data minimisation”).
Personal data shall be accurate and, where necessary, kept up to date (“accuracy”). Every reasonable step must be taken to ensure that personal data that are inaccurate are either erased or rectified without delay.
Personal Data will not to be kept longer than is necessary for the purpose ('storage limitation'). The Data Controller will regularly review the length of time personal data is retained and if the purpose or purposes for which the information is held is no longer necessary, the data will be securely destroyed.
Personal data shall be processed in accordance with the Rights of data subjects.
Appropriate technical and organisational measures against unauthorised or unlawful processing, loss, damage or destruction ('integrity and confidentiality').