Privacy Policy

Welcome to DMS Consulting ("we," "us," or "our"). We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) as it applies to Gibraltar. This Privacy Policy provides you with information about how DMS Consulting collects, uses, shares and protects your personal data  for the purpose of providing our services which will be described in our engagement letter.

We collect information that you provide us through our website, feedback, subscriptions, correspondence, questionnaires or through providing our services.   When you agree to enter into a business relationship with us we will enter into a contractual agreement in the form of an engagement letter where you will be required to provide personal data which we will require to comply with our legal obligations and the services described in the contract.  You have the option to refuse to provide information but this may impact our ability to provide certain services. 

When you interact with our website, we automatically collect technical data using cookies and similar technologies.  

We do not collect personal data for minors.

By providing personal information you agree to this Privacy Policy as updated from time to time and where you have provided information on any other person that you have received their authority to do so and they agree to this Privacy Policy.

We will collect and use your personal data for the following purposes:

• To offer and provide our services or to take steps to enter into our engagement with you;
• To communicate with you and respond to your inquiries;
• To analyse and improve our website's performance, content, and user experience;
• To comply with legal and regulatory obligations and protect our rights and interests;
• For a legitimate interest to a third party provider who may be assisting us with tasks performed on our behalf; to local authorities, government departments, relevant authorities for legal, government or public functions; in circumstances required by law or legal proceedings;
• Where you have given consent;
• For marketing purposes, to contact you through email or text message to inform you about our services we believe might be of interest to you.  Unless you have opted out or unsubscribed, you may received marketing communications from us.

You have the following rights regarding your personal data:

• Right of Access: You can request access to your personal data which we will provide within a month.
• Right of Rectification: You can request the correction of inaccurate data.
• Right of Deletion: You can request the deletion of your data under certain conditions.  We will also inform third parties we have shared your data about your deletion request.
• Right to Restrict Processing: You can request the restriction of processing under certain circumstances.
• Data Portability: You can request a copy of your data in a commonly used format to be transferred to another provider under certain conditions.
• Right to Object: You can object to our processing of your data under specific circumstances,      including direct marketing.
• Right to Withdraw Consent: If you provided consent for specific processing, you can withdraw it at any time. We will no longer process your information unless there is another lawful basis.

To exercise these rights or for any privacy-related concerns, please contact us using the information provided in our "Contact Us" section. 

We have appropriate technical and organisational measures to protect your personal information.    

While information security is a fundamental component of data protection, it's important to acknowledge that no data transmission via the internet can be completely infallible and we are dedicated to employing industry-standard security measures to maintain personal data secure.

We will retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws to 7 years after the end of the engagement.  Your data may be retained by us for longer than 7 years in exceptional circumstances directed by an order from the courts or an investigation by law enforcement agencies or our regulators 

Examples such After the specified period, we securely destroy your personal data as prescribed by GDPR.

When it is no longer necessary to retain your personal data and there is no legal or regulatory requirement or guidance to the contrary, we will delete or anonymise your data.  Anonymise is where your information is processed in a manner that makes it impossible to identify you as an individual.

We reserve the right to update this Privacy Policy to reflect changes in our practices or for legal and regulatory reasons. We will notify you of any material changes by posting the updated policy on our website. 

If you believe that we have not adequately addressed your privacy concerns, you can direct your complaint to us using the information provided in our "Contact Us" section.  

You also have the right to lodge a complaint with the Gibraltar Regulatory Authority (GRA) https://www.gra.gi/ or your local data protection authority. 

If you have any questions, comments, or concerns about this Privacy Policy or our data practices, please contact us at: 

    contact@dms-consulting.co    

    +350 57776000    

    14 Eaton Park, Forbes Road, Gibraltar GX11 1AA 

                                                                                                                                                                    Effective Date: October 2023