Privacy Policy

Go EO exists to assist business owners in transitioning their privately owned Limited Companies to instead being predominantly owned by an Employee Ownership Trust (EOT).

Legal stance

Go EO will be a data controller. For any clients, the lawful basis we’ll request/hold data will be “contract”. Ie we need the data we ask for to do the job you’re paying us to do.

Even after our role is complete, we are still legally required to retain some of that data for things like anti money laundering purposes/HMRC obligations. These take precedence over GDPR. Typically we are required to hold data for 6-7 years after the period the data relates to.

We will look to hold as little data as possible, whilst ensuring we’re able to complete our role.

Whilst we certainly consider some of the data we hold to be sensitive, from the legal definition with GDPR, none of it is. For GDPR, sensitive data is things like race, political/religious beliefs, health etc. We do not require any of this information, so do not request or hold it.

The main places we hold your data

Most files you share with us/we create for you will be stored on an in-office server. A back up of the data is taken daily, encrypted, and saved in a Dropbox account.

We use some cloud based software, on which some of your data will be stored. The main services we use are:

Senta – our CRM. This includes a database of client standing data. We also use it to help us keep track of progress on client work. It includes a client portal where you will be able to share data with us more securely than attaching to an email.

Go EO employees and carefully selected subcontractors will have access to limited amounts of this data, only when specifically required for the safe function of the business.

Your rights

You have the right to see a copy of all the personal data we hold for you. Much of this you should be able to see via the client portal where applicable.

Theoretically you have the right to request we delete all personal data we hold for you. However, our understanding is that anti money laundering regulations take precedence over GDPR. In practice this means quite a lot of the data we hold for you, we are legally obliged to retain even if you ask us to delete it. We are therefore within our rights to refuse to comply with requests to delete data.

We will only use your data for the purposes of fulfilling our obligations for you/your business, and legal compliance purposes.

If you have any queries/concerns regarding any of the above, please email [email protected].