Privacy Notice
Boreal IM Limited (“Boreal IM”, “we”, “our”, “us”) is committed to protecting your personal data and handling it responsibly and transparently.
This Privacy Notice explains how we collect, use, store, and share personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws including the Privacy and Electronic Communications Regulations (PECR).
What Personal Data We Collect, Why and How It Is Handled
We collect and process personal data for the following types of activities and individuals:
General Enquiries and Communication
- Data Collected: name, email address, and other contact details.
- Purpose: general communication.
- Legal basis: legitimate interests (to respond to enquiries).
- Data Processors: third party IT Managed Service Provider (MSP).
- Retention: retained for as long as necessary to respond and to comply with legal or other obligations.
Visitors to Our Office
- Data Collected: CCTV footage.
- Purpose: security, health and safety.
- Legal basis: legitimate interests (ensuring safety and security).
- Data Processors: third-party IT MSP engaged by Boreal IM to manage and maintain our CCTV systems.
- Retention: 6 weeks or longer if required for a specific incident.
Data Processors
- Third-party IT service providers engaged by Boreal IM to manage and maintain our CCTV systems.
- Retention: 6 weeks or longer if required for a specific incident.
Website Visitors
- Data Collected: cookies, IP addresses, analytics data.
- Purpose: to monitor website usage and improve services.
- Data Processors: third party website manager), and analytics provider.
- Legal basis: consent (for non-essential cookies such as analytics).
- Retention: as set by our analytics provider’s policy.
Contractors, Suppliers, and Vendors
- Data Collected: name, email address, and other contact details.
- Purpose: contract fulfilment, communication, accounting.
- Legal basis: contractual necessity and legal obligations.
- Retention: typically 6 years after the end of the relationship for tax and accounting purposes or in order to satisfy any other legal, accounting or reporting obligations, or as necessary to resolve disputes.
Investors
- Data Collected: name, email address, and other contact details.
- Purpose: contract fulfilment, marketing, legal compliance.
- Legal basis: contractual necessity, legal obligations, and legitimate interests. Marketing is based on consent where required.
- Retention: typically 6 years after the end of a relationship or as required to satisfy any legal, accounting or reporting obligations, or as necessary to resolve disputes.
Candidates
- Data Collected: name, contact information, employment history and experience, CV.
- Purpose: recruitment, compliance with employment law.
- Legal basis: contractual necessity, legal obligations, legitimate interests.
- Retention: 6 months following termination of recruitment process unless consent is given for longer.
Employees
- Data Collected: name, contact information, previous and current employment information, compensation, benefits and payroll data.
- Purpose: HR, payroll, benefits administration, legal compliance.
- Legal basis: contractual necessity, legal obligations, legitimate interests.
- Retention: retained in line with statutory retention requirements (e.g., payroll records for 6 years).
International Transfers
Some of our service providers may process personal data outside the UK or EEA. Where this occurs, we make efforts to ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.
Your Rights
You have the right to:
- Access your personal data.
- Correct or update inaccurate data.
- Request erasure of personal data where applicable.
- Request data portability.
- Object to or restrict processing.
- Withdraw consent at any time (if processing is based on consent).
- Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
We will respond to valid requests within one month in line with UK GDPR.
Boreal IM will only send marketing communications where legally permitted and, where required, with your consent. You may opt out of marketing at any time.
Updates to This Notice
This Privacy Notice may be updated from time to time. The latest version will always be available on our website.
For further information, visit For the public | ICO.
To exercise any of these rights, please contact us using the details below.
Contact Us
If you have any questions about this policy or your personal data, please contact:
Boreal IM Ltd
Data Protection Officer: Peter Bingel
Email: info@borealim.com
Address: 45 Foubert’s Place, London W1F 7HQ