Draft for legal review
Our approach
ExEx is committed to protecting the privacy and personal information of everyone who uses or registers with the platform. This notice explains what information may be collected, why it is used, how it may be shared and the rights individuals may have.
Information we may collect
- Name and contact details; address and location.
- Date of birth where required for identification or verification.
- Career history, expertise, qualifications, accreditations and availability.
- Verification information and outcomes.
- Organisation, engagement, invoicing and transaction information.
- Correspondence, questionnaires and forum submissions.
- Technical information generated through use of the website and platform.
Purposes
- Administer registrations and accounts.
- Provide search, matching and introductions.
- Administer engagements, business-sale processes and payments.
- Coordinate screening and verification.
- Operate forums and other ExEx services.
- Maintain security, comply with legal obligations and resolve complaints.
- Improve and develop ExEx.
Lawful bases
Depending on the circumstances, processing may be necessary for a contract or pre-contract steps, based on consent, required by law, or undertaken for legitimate interests that do not override the individual's rights.
Verification
ExEx may coordinate identity, qualification, professional, employment or other appropriate verification. Independent providers may perform checks. ExEx will make clear where an external provider is involved and what information is required.
Sharing
ExEx does not sell personal information. Information may be shared where reasonably necessary with Clients or Expertise Partners involved in a proposed or actual engagement, professional advisers, payment providers, verification providers, technology providers, insurers and authorities where legally required.
Business-sale information
Commercially sensitive business-sale information will be handled separately from ordinary public profile information and disclosed progressively where appropriate, normally subject to confidentiality arrangements.
Young people
Where ExEx provides services specifically intended for young people, additional safeguards will apply. Information requested and consent arrangements will reflect the nature of the service and the participant's age.
Retention and security
Personal information will be retained only as long as reasonably necessary for its purpose and applicable legal, contractual, insurance, accounting or regulatory requirements. ExEx will use reasonable technical and organisational security measures.
Individual rights
- Subject to applicable law, individuals may have rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent.
- Individuals may complain to the Information Commissioner's Office.
Cookies
The website may use cookies and similar technologies for security, functionality, analytics and improvement. Where consent is legally required for non-essential cookies, an appropriate choice will be provided.
Contact and changes
The current notice will be published on the ExEx website. Privacy questions and rights requests should be sent using the contact details published there.