Privacy Statement: Indirect Data Sources – 3rd Party List

TCC may obtain personal data indirectly about you from publicly available sources and via referrals from third party individuals and companies. We may use this data to enrich the data we hold on you from directly acquired sources to build a profile on you. Find out more about how we use data for profiling.

The publicly available sources we may obtain personal data from you include:

• LinkedIn
• Your company websites
• The FCA register
• The media

Your colleagues, associates and acquaintances may pass on your personal data to TCC’s employees by way of referral because they think TCC and/or Recordsure’s services may be relevant to you. TCC will process this data to make contact with you.

We may process a range of personal work-related data from these sources such as:

• Names
• Job title
• Company
• Qualifications
• Email address
• Phone Number
• Significant function
• Company Address
• Indications of your challenges and interests from your social media posts, likes, comments and shares
• Indications of your challenges, interests and opinions from media articles

We protect the data obtained from third parties according to the practices described in this statement.

Third Party Processors

Our carefully selected partners and service providers may process personal information about you on our behalf as described below:

Digital Marketing Service Providers

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:

(i) Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.

Third Party Controllers

Some providers we use on our website decide for themselves how they use the personal information they collect, and are responsible for it as controllers under their own privacy statements:

Website Analytics

Microsoft Corporation – Microsoft Clarity

• Role: Microsoft is a controller of the data Clarity collects and is responsible for its own use of that data, as described in the Microsoft Privacy Statement.
• Purpose: website usage analytics, including heatmaps and recordings of how pages are used (clicks, scrolling, mouse movement and the page layout seen), so that we can improve the website.
• When: only after you allow analytics in the TCC cookie preferences. If you also allow advertising, Clarity may share data with Microsoft Advertising.
• Cookies: _clck and _clsk on this website; CLID, MUID, ANONCHK, MR and SM on Microsoft domains. See the Cookies policy.
• Retention: Microsoft keeps session recordings for 30 days, and heatmap and click data, and any recording we label or mark as a favourite, for 9 months. It then deletes the data, including backups.
• Storage and transfers: Clarity data is stored in Microsoft’s Azure cloud. Microsoft states that customers in the EU contract for Clarity with Microsoft Ireland Operations Limited, and that its transfers of data to Microsoft Corporation in the United States are covered by standard contractual clauses.
• Withdrawal: withdrawing analytics consent deletes _clck and _clsk and stops Clarity on the page; Microsoft’s own cookies can be removed through your browser.
• More information: Microsoft Privacy Statement.