Privacy Statement

All personal information retained by BDO Limited (BDO) will be kept confidential. Other than with our service providers, we do not share your personal information with any individuals or third parties which are not affiliated with the BDO.

BDO will use the personal data you provide to respond to your request for updates on information relating to the company. Unless we obtain your permission, we will not use personal information for any other purpose.

We do not retain any more of your personal information than we believe is necessary for any of these purposes, we do not retain your personal information for any longer than is reasonably necessary to do so and will take reasonable steps to ensure personal information is up to date, accurate and secure.

All personal information retained by BDO is held locally and stored in a secure manner. By sending your personal information you consent to us making any necessary cross-border transfers of your personal information.

If you would like to update or correct your personal information or require details of the personal information retained by us please contact us by e-mail or post.

If you no longer wish to receive information from BDO you can advise us by e-mail. The BDO reserves the right not to distribute, or discontinue distributing, to any individual.

Privacy Statement

This Privacy Statement describes how and why BDO Limited (“we” or “us”) collect and use personal data (i.e. data relating to an identified or identifiable individual) in the course of business. It applies to personal data provided directly to us by the individuals concerned and to personal data provided to us by companies and other organisations. 

We are committed to the protection of personal data and to fair and transparent processing. If you have any questions about this Privacy Statement, or any other matters concerning Data Protection, you can contact our Data Protection Team via email at compliance@bdo.gi.

Security of personal data

We have policies, procedures and training in place in respect of data protection, confidentiality and information security. We regularly review such measures with the objective of ensuring their continuing effectiveness. The Privacy Statement was last updated in June 2025.

Provision of personal data to third parties

We will only share personal data with third parties where we are legally permitted to do so. We do not provide information to third parties for their own marketing purposes and we do not undertake mailings for third parties. Where we transfer personal data to third parties, we will put in place appropriate contractual arrangements and seek to ensure that there are appropriate technical and organisational measures in place to protect personal data.

We may provide personal data to:

  • Other BDO Member Firms – we may share personal data with other members of the BDO International Network where required for the provision of services to our clients and/or for administrative purposes.
  • Third parties involved in the performance of services – we may also share personal data to third party organisations who assist us in providing services to clients or are otherwise involved in the services we provide to clients.
  • Third parties who provide IT services, data processing or functionality – like many professional service providers, we use third party providers to support our business and the provision of services to our clients, such as cloud based software providers, web hosting/management providers, data analysis providers, and data back-up and security/storage providers. We may transfer personal data to such third parties.
  • Auditors and advisers – we may transfer personal data to our auditors and advisers as required by law or as reasonably required in the management of our business.
  • Third parties where required by applicable law and regulation – we may be requested or compelled to disclose personal data to third parties such as regulators and law enforcement agencies. We will only provide personal data to such parties where there is a legal requirement or permission to do so.

International transfers of personal data

In the course of running our business and providing services to clients we may transfer personal data to third parties located in other countries that have less stringent data protection laws. Where we transfer personal data to a country not determined by the relevant authority to provide an adequate level of protection for personal data, we will take steps to ensure that personal data will be adequately protected in accordance with applicable law, such as using the Information Commissioner’s Office approved standard contractual clauses.

BDO has implemented a global programme of Binding Corporate Rules ("BCRs"), comprising both a BCR Controller Policy and a BCR Processor Policy. The purpose of the BCRs is to ensure compliance with applicable European and UK data protections laws when transferring UK or EEA originated personal data outside the UK and EEA. The BCRs apply to all BDO Member Firms and to other entities within in the BDO global organisation and require the same level of protection of personal data across all of these entities. When we transfer personal data to other BDO Member Firms (that may be located in countries that have less stringent data protection laws), we do so subject to the BCRs.

Your Rights

You have rights in relation to any of your personal data held by us in our role as a data controller. Should you wish to exercise your rights right, please contact our Data Protection Team via email. We will endeavour to respond to any request promptly and within any legally required time limit.

You also have a right to update your personal data that we hold. To do so, please correspond with your usual BDO contact or otherwise contact our Data Protection Team via email.

Where we process your personal data based on your consent, you have a right to withdraw consent at any time. Should you wish to do so, please contact our Data Protection Team via email.

Finally, in addition to the rights above, you may also have other rights in relation to personal data, including a right to erasure/deletion, the right to data portability and the right to restrict and/or object to our processing of personal data.

Data Retention

We will only keep personal data for as long as necessary for the purposes for which it was collected, or as required by applicable law or regulation.

Unless there are any overriding legal, regulatory or contractual requirements, we will retain records of services provided (which may include personal data) in accordance with our data retention policy.

Complaints

Should you wish to complain about our use of your personal data, please contact our Data Protection Team via email. We will investigate all complaints received and will endeavour to respond to complaints promptly.