Prismm Ltd is a company registered in England and Wales with company number 03924303.

For the purposes of the General Data Protection Regulation (‘GDPR’), Prismm will be the ‘controller’ of the personal data you provide. Please read the following information carefully in order to understand the Company’s practices in relation to the treatment of your personal data. Should you have any questions, please email us at This email address is being protected from spambots. You need JavaScript enabled to view it..

What data privacy principles does the Company adhere to?

What personal data does the Company collect and why?

In the course of providing products/services to you, the Company may collect information that is considered personal information (e.g. name, contact details, address, passport number, driving licence).

As a client, contact or employee of Prismm Ltd, we will require some personal information in order to verify your identity and have the applicable relationship with you. Some of this information may be required to satisfy legal obligations (e.g. to comply with obligations arising under the money laundering regulations whereas other information may be required in connection with the provision of services to you). The information collected will vary depending on the service the Company provides to you or you provide to the Company, but typically includes:

Where does the Company store my personal data?

The Company has comprehensive policies and procedures in place to ensure your personal data is kept safe and secure, with these including:

How long does the Company retain personal data?

As a UK company, the Company is required to maintain its books and records for a prescribed period. As such, information that falls in scope of either of these requirements is retained in line with the mandated timeframe.

Any information that is outside the scope of this requirement will be retained whilst relevant and useful, and destroyed where this ceases to be the case or where the data subject specifically requests this.

How have I been categorised in accordance with GDPR?

The GDPR requires the Company to inform you of the legal basis on which we maintain your personal data. Typically, the Company will reach out to you personally to confirm this; however, as a general rule the following is applicable:

What are my rights?

Once you have provided your details to the Company, you have certain rights which apply, depending on your relationship with the Company, the information you have shared with us and the Company’s legal and regulatory obligations.

Will I be notified of changes to this policy?

The Company may, from time to time, review and update this policy. The Company will maintain the latest version of this policy on its website, and where the changes are deemed material, it will make you are aware of these.

Who should I direct questions to?

If you have any questions, concerns or complaints about the practices contained within this document or how the Company has handled your data, please email: This email address is being protected from spambots. You need JavaScript enabled to view it.. Alternatively, you may write to: Ludo House, Clarence Court, Rushmore Hill, Kent, BR6 7LZ.