Privacy Notice

FSP (“we”, “us”, and “our”) are committed to respecting and protecting your personal information. This Privacy Notice describes how we collect, use, share, and protect your personal data in line with the Data Protection Act 2018 or the UK General Data Protection Regulation (“UK GDPR”). It also outlines your privacy rights regarding our collection, use, storage, sharing, and protection of your Personal Information through the FSP website (www.fsp.co) and all related websites, applications, services and solutions we provide, regardless of how you access or use them (collectively, the “Site”). This website does not cover personal data processed for employment or recruitment purposes, such as through our Careers site.

This privacy notice was last updated on: 28th April 2025

Information about FSP

FSP is the Data Controller for your personal data. This means that FSP is responsible for the usage and processing of your personal data. The full contact details of FSP are:

Name: FSP Consulting Services Limited

Company address: Now Building, Here & Now, Thames Valley Park, Reading, Berkshire, England, RG6 1RB

Information obtained by FSP

We may collect and process the following information about you in the following circumstances:

Personal information you provide through our website

You provide us with personal information about yourself by:

• visiting and interacting with our website;

• filling in the contact form on our website;

• raising an incident or liaising with our support team via our support helpdesk;

• participating in discussion forums or other social media functions;

• corresponding with us by telephone, email or otherwise;

• completing a survey form;

• using, or working with us, during the provision of our products or services.

Personal information received through third parties

We may receive information about you from third parties, including:

• Where your company provides this to us in the course of business, or;

• Where we receive your business contact information from third-party services and data brokers, such as Lusha

Data processed on behalf of our clients

In some cases FSP has visibility of, handles or migrates personal information, under the direction of its Clients, but we have no direct relationship with the individuals whose personal information we process (such as our clients’ customers or employees). In such cases, FSP works with its Clients to help them notify these individuals of the purpose for which their personal information is collected.

In such cases, an individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to FSP’s Client (who will be a Data Controller). If the Client requests FSP to remove the data, we will respond to their request within 30 days. If you believe you are a customer or employee of our Clients and would no longer like to be contacted by that company, please contact them directly.

FSP may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the provisions in this

Policy regarding notice and choice and the service agreements with our Clients. FSP will retain personal data we process on behalf of our Clients for as long as needed to provide services to our Client. FSP will retain and use this personal information as necessary to comply with our legal obligations, resolution disputes, and to enforce our agreements.

Information we collect about you

Each time you complete one of our website or online forms, we may also collect the following information:

• your business contact details, including your email address, company address, phone number, your role and company name

• content of your emails or queries sent to FSP

• scores, as well as other responses, you enter into our Client Experience surveys

When you use our services or we contact you in relation to our services, we may also process the following information:

• your business contact details, including your email address, company address, phone number, your role and company name

• content of your emails

• records of meetings or conversations with FSP

Each time you use our website we may also automatically collect the following information:

• technical information including your cookie ID, device ID, Session ID, Project ID, Internet Protocol (IP) address, browser and device information, approximate geolocation, operating system, language, screen resolution and time/date of request, which we receive through cookies.

• information about your online activity, which may include your URL, session activity, visits to, through and from our services, length of visits, page interaction information (such as scrolling, clicks and mouse-overs) and methods to browse away from the page and page response times.

Use of your information

We use the information held about you for the following purposes and legal bases:

• To identify you when you sign-in to an account on services we provide, for our legitimate business interest in ensuring the security of our website and systems;

• To administer and provide you with the products and services that you request from us, for our legitimate business interest in providing services to clients;

• To carry out our obligations under any contracts we have entered into with your company, for our legitimate business interest in providing services to clients;

• To keep our services safe and secure, for our legitimate business interest in ensuring the security of our website and systems;

• To test and track the performance of our website, to report on data for marketing purposes, to improve our content and engagement, with your consent;

• To notify you about changes to our services, for our legitimate business interest in providing services to clients;

• To conduct internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, for our legitimate business interest in assessing and improving our products/services and overall customer experience;

• To measure or understand the effectiveness of advertising or promotions we send, for our legitimate business interest in assessing and improving our products/services and overall customer experience;

• To make suggestions and recommendations directly, or via one of our partners, about other goods or services we offer that may be of interest, with your consent;

• To send you follow-up relevant client experience surveys, for our legitimate interests in assessing and improving our products/services and overall customer experience;

• To send relevant marketing communications to you, with your consent or for our legitimate business interest, as appropriate.

Consent

We may collect personal data with your consent, such as when you provide your details in registering for our newsletter, or agree to the use of certain Cookies. You have the right to withdraw your consent to us processing your personal data, at any time. For more information, see the “Your Rights” section of this Privacy Notice.

Where we process your personal data for our newsletter or marketing purposes, we will inform you and obtain your ‘opt in’ consent (before collecting your personal data) if we intend to use your personal data for such purposes or if we intend to disclose your information to any third party for such purposes. If you change your mind about being contacted in the future, please click on the ‘opt out’ option within our marketing emails and we will remove you from our mailing lists.

Disclosure of your information

Information we share with third parties

We do not sell your information to third parties. We may share your personal information with the categories of third parties listed below, only in the ways that are described in this Privacy Notice:

• our contractors and/or other companies from within our corporate group, for example our ultimate holding company;

• our website hosting providers;

• partners, suppliers and sub-contractors for the delivery of any contract we enter into with them or you. These include:

providers of customer relationship management software
providers of marketing automation software
auditors, solicitors and other third-party advisors
accountants and banking service providers
payment services providers
service desk and IT service management providers
credit reference agencies that may need to have access to your information in order to provide their services

• cookie, web analytics and search engine providers that assist us in the improvement and optimisation of our website

• from time to time we reference personal testimonials of satisfied customers.With your permission we may display your testimonial of our services along with your name or company name

• survey response providers

We do not allow third parties that are our service providers to use your personal data for anything else other than carrying out the service they provide to us. Where other third parties are separate data controllers (such as our auditors, solicitors and other third-party advisors, and accountants and banking service providers) are responsible for the use of your personal data for their own purposes.

Information we disclose to other third parties

We may disclose your personal data to third parties:

• where needed to provide a service to you, in which case we will only share your information that is essential for such third parties to provide services on our behalf;

• if we are required to disclose or share your personal data in order to comply with any legal obligation or request from a regulator or law enforcement, or in order to enforce any agreement with you or your company; or

• in the event that we are involved in a merger, acquisition, or sale of all or a portion of our business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, subject to the seller or buyer signing a suitable confidentiality undertaking;

• when we believe in good faith that disclosure is necessary to protect the rights, property, safety, of yourself, our business, our customers, or others. This includes fraud protection, credit risk reduction, or responding to a government request;

• to any other third party, with your prior consent to do so.

We may also disclose aggregate statistics about the visitors that use our services in order to describe our services to prospective clients, partners, sponsors and other reputable third parties and for other lawful purposes. However, these statistics will include no personal information.

Marketing communications

We will only contact you by email about our work and its progress if you have asked us to do so. If you have changed your mind and would prefer us not to contact you, then you can opt out at any time.

To opt-out of communications from FSP please contact GDPR@fsp.co.

Data Retention

We retain personal data for the following periods:

Each time you complete one of our website or online forms, we may also collect the following information:

• your business contact details, including your email address, company address, phone number, your role and company name – Duration of the customer relationship

• content of your emails or queries sent to FSP – 6 years from the end of the customer relationship

• scores, as well as other responses, you enter into our Client Experience surveys – For the duration of our relationship with your company, or 5 years maximum, whichever is longer

When you either use our services or we contact you in relation to our services, we may also process the following information:

• your business contact details, including your email address, company address, phone number, your role and company name – Duration of the customer relationship

• content of your emails or queries sent to FSP – For the duration of our relationship with your company

• records of meetings or conversations with FSP – Duration of the customer relationship

Each time you use our website we may also automatically collect the following information:

We may also retain personal data beyond these periods where reasonably necessary to comply with our legal obligations, meet regulatory requirements or resolve disputes.

If you wish to request we no longer use your information to provide you with our services, please contact GDPR@fsp.co

Where we store and transfer your personal data to

FSP only stores personal data on our systems located within the United Kingdom. However, the personal data that we collect from you may be transferred to, and stored at, a destination outside the UK or European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers or partners. Such staff maybe engaged in, among other things, the fulfilment of the services, the processing of your payment details and the provision of support services.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. In particular, this means that your personal data will only be transferred to a country that provides an adequate level of protection. This will include:

• where the UK government has determined that a country provides an adequate level of protection.

• where the recipient is bound by International Data Transfer Agreements or similar contractual clauses.

• Where other safeguards apply. This will include contacts and rights that you can rely on.

• An exception applies under data protection law.

Security of Your Information

All information you provide to us is stored on our secure servers. All personal data will be encrypted at rest and in transit between our servers and your browser. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Notice. Where we have given you (or where you have chosen) a password which enables you to access certain services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of any information across the Internet cannot be guaranteed to be completely secure. Although we will endeavour to protect your information, we cannot guarantee the security of your information transmitted to our website. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Links to other websites

From time to time, our services may contain links to and from the websites of our partner networks, affiliates and social media platforms. If you follow a link or submit personal information to any other websites, please note that those websites are governed by their own privacy policies and FSP does not accept any responsibility or liability for their privacy policies. We encourage you to read the Privacy Notice of each individual website you access before providing any information about yourself, and assess whether the policy is satisfactory to you before you use that website.

Your rights

You have the right, free of charge, to request:

• access to your personal data;

• your personal data to be corrected, if inaccurate;

• deletion of your personal data, where we have no good reason to keep processing it;

• a restriction on the processing of your personal data;

• object to the processing of your personal data;

• a transfer of your personal data (data portability);

• withdraw consent to the processing of your personal data, where we rely on consent

You can opt-out of survey or marketing communications using the ‘Unsubscribe’ feature in the survey email, by emailing GDPR@fsp.co or by writing to us at address given at the end of this Privacy Notice.

You can make a request in relation to any of the above rights by emailing GDPR@fsp.co or by writing to us at address given at the end of this Privacy Notice. We will respond to such queries and deal with requests we receive from you within 30 days, in accordance with the Data Protection Act 2018.

Privacy Notice changes

We may update this Privacy Notice to reflect changes to our information practices. You should check this Privacy Notice to make sure you are aware of the most recent version. If we make any material changes, we will notify you by email or by means of a notice via the services we provide you with, prior to the change becoming effective. We encourage you to periodically review this policy for the latest information on our privacy practices.

Complaints or queries

The security of your information is important to us. Our intention is to meet the highest standards when collecting and using personal information. We follow accepted standards to protect the personal information submitted to us, both during transmission and once it is received.

Should you have any concerns regarding this Privacy Notice, you wish to assess or amend your information, or you have any questions about the security of your personal information please contact us via email at GDPR@fsp.co or write to us at:

FSP

Now Building

Here & Now

Thames Valley Park

Reading

Berkshire

England

RG6 1RB