Important Legal Notice
Gerald International Limited and by way of its subsidiary Gerald UK Limited (“Gerald Group“, “Gerald”,
basis on which any Personal data which Gerald collects about you, or that you provide to Gerald, will
be processed by us.
For the purposes of applicable data protection and privacy laws, the data controller is Gerald UK
Limited (company number 03961277) (ICO registration number ZA175880) of Third Floor, One
Strand, Grand Buildings, Trafalgar Square, London, WC2N 5HR, United Kingdom.
This Policy explains what Personal data we collect, how we may use and manage it and the rights
you have in relation to your Personal data. Before you provide us with any Personal data or browse
our Websites, you should read through this Policy in full and make sure that you are comfortable with
our privacy practices.
1. Whose Personal data do we collect?
Gerald collects Personal data from a range of individuals in the context of its business activities,
• representatives of our suppliers, customers and other business contacts;
• users of our Websites;
• individuals who contact us by any means; and
• job applicants.
2. How we collect your Personal data
We obtain Personal data which you knowingly and voluntarily disclose to us, both online and offline,
notably when you:
• visit our Websites and / or complete one of our web forms;
• visit our premises;
• communicate with us via any means, including but not limited to telephone, email and through
the use of social networking websites, third party apps or similar technologies.
We may also collect information from third party sources, e.g. relating to your use of other websites
which we operate and from related third parties e.g. sub-contractors.
3. Information Gerald may collect from you
Gerald may collect a range of Personal data from you in a business context, including but not limited
to your name, gender, job title, photographic identification, email address, home address and other
contact details, details of your business and other interests, communications with you (including notes
from meetings) and financial and payment information.
When you use our sites www.gerald.com (“Website(s)”), we collect certain standard information that is
sent by your browser to the Websites, e.g. your IP address, browser type, operating system,
language, time zone setting, access times and any referring website addresses.
We may collect and process information that you provide by filling in forms on the Websites, including
without limitation information provided as part of a job application or other employment related
If you contact us, we may keep a record of that correspondence.
Gerald may also ask you to complete surveys that we use for research purposes, although you are
under no obligation to respond to them.
We may also record details of your visits to the Websites, including any resources that you access.
Gerald may record and retain certain telephone conversations where we are required to do so to
comply with our regulatory obligations.
4. Where We Store Your Personal data
The data that we collect from you may be transferred to, and stored in, a country other than your own
and that such country may provide a lower level of data protection requirements than your own
country. By submitting your Personal data, you agree to this potential transfer to a country other than
Whenever we transfer Personal data across borders, we will take legally required steps to ensure that
adequate safeguards are in place to protect your personal data and to make sure that it is treated in
If you are located in the EEA, Switzerland or the UK, you can request a copy of the safeguards which
we have put in place to protect your Personal data and privacy rights in these circumstances, by emailing
You acknowledge and understand that the transmission of information via the internet is not
completely secure. Although we will take reasonable and appropriate steps to protect your personal
data once we have received it, we cannot guarantee the security of your data transmitted to the
Websites; any transmission is at your own risk. Once we have received your information, we will use
appropriate procedures and security features to try to prevent unauthorised access.
5. Uses made of the information
We use Personal data held about you in the following ways:
• To ensure that content from the Websites is presented in the most effective manner for you
and for your computer, including carrying out analytics in relation to the use of the Websites.
• To provide you with information that you request from us or which we feel may interest you,
where you have consented to be contacted for such purposes.
• To carry out our obligations arising from any contracts entered in to between you and us.
• To communicate with you and third- party contacts.
• To comply with our legal and regulatory obligations, which may include the disclosure of
certain information and/or recordings of telephone conversations to regulatory authorities.
• For other business-related purposes, including negotiating contracts, managing accounts and
records, supporting corporate social responsibility activities, legal, regulatory and internal
investigations and debt administration.
When you apply for a job via our Websites or otherwise, we will collect additional more specific
Personal data about you, e.g. your qualifications, career history, third party references and interview
notes. We may also ask you for other information, e.g. your interests and the types of jobs you are
interested in. Any Personal data you provide to Gerald in relation to a job vacancy will be processed
in accordance with our Recruitment Privacy Notice.
7. The legal basis for Gerald processing your Personal data
In accordance with the purposes for which we collect and use your Personal data, as set out above,
the legal basis for Gerald processing your Personal data will typically be one of the following:
• your consent;
• the performance of a contract that we have in place with you or other individuals;
• Gerald or our third parties’ legitimate business interests; or
• compliance with our legal obligations.
8. Disclosure of your Information
Gerald may share your Personal data with people within the organisation who have a “need to know”
that data for business or legal reasons, e.g. in order, to carry out an administrative function such as
processing an invoice, or to direct a query that you have submitted to the relevant department within
Because Gerald operates globally, we may disclose your Personal data to any member of our group,
which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in
section 1159 of the Companies Act 2006. These entities are required to maintain the confidentiality of
your data and are restricted from using it for any purpose other than the purposes set out in this
We may disclose your Personal data to third parties including the authorities, Gerald's advisors,
suppliers of IT services and third parties engaged by Gerald for the purpose of providing services
requested by you; to protect any intellectual property rights in any materials displayed on or otherwise
available from Gerald 's Websites; for the purposes of seeking legal or other professional advice; to
respond to a legal request or comply with a legal obligation; and to enforce Gerald’s Website Terms of
We may also disclose your Personal data to third parties:
• In the event, that we sell, merge or buy any business or assets, in which case we may
disclose your Personal data to the prospective seller or buyer of such business or assets.
• If Gerald or substantially all of its assets are acquired by a third party, in which case Personal
data held by it about its customers will be transferred.
• In the event, that we are required to do so to comply with our regulatory obligations, to
We may decide to allow our Website users to share comments, postings, testimonials, or other
information. If you choose to submit such information to us, the information that you submit may be
available generally to the public. Information that you provide in these areas may be read, collected,
and used by others who access them.
Finally, we may share non-personal data with other third parties that are not described above. When
we do so we may aggregate or de-identify the information so that a third party would not be likely to
link data to you, your computer, or your device. Aggregation means that we combine the non-personal
data of numerous people together so that the data does not relate to any one person. De-identify
means that we attempt to remove or change certain pieces of information that might be used to link
data to a certain individual.
9. Records retention
Your Personal data is not kept for longer than is necessary for the purposes for which it is collected.
This means that data and records are destroyed or erased from our systems when no longer required.
The amount of time that records are kept for varies depending upon the type of Personal data they
10. Your Rights – Marketing and Third-Party Websites
You have the right to ask us not to process your Personal data for marketing purposes. Where
required by law, we will inform you (before or at the time of collecting your data) if we intend to use
your data for such purposes or if we intend to disclose your information to any third party for such
purposes. You can exercise your right to prevent such processing by ticking certain boxes on the
forms we use to collect your data. You can also exercise your right to ‘opt-out’ from receiving
marketing communications at any time by contacting us at firstname.lastname@example.org.
The Websites may, from time to time, contain links to and from the websites of our partner networks
and affiliates, or of other third parties. If you follow a link to any of these websites, please note that
these websites have their own privacy policies and that we do not accept any responsibility or liability
for these policies. Please check these policies before you submit any Personal data to these
11. Your Rights - Access, Rectification and Deletion
Applicable data privacy laws give rights to individuals in respect of Personal data that organisations
hold about them. If you wish to:
• request a copy of the Personal data that we hold about you; or
• request that we rectify, delete, or limit the processing of your personal data
Please submit your request to email@example.com and select “Personal data and privacy rights”.
12. Cookies and other tools
We may use information about your visits to the Websites by using a “cookie” or similar technologies
for storing information, e.g. local shared objects and web beacons (“cookies”). A cookie is a small text
file which is transferred to and stored on your computer, portable device or mobile. Cookies can be
unique to your web browser and contain text and information e.g. unique identifier, site name, digits
Cookies are used to differentiate one user from another, to pass information from page to page during
their visit to the Websites and to collect data about a given browser, along with the information
requested and sent by the browser's operator. They enable us:
• To estimate our audience size and usage pattern.
• To store information about your preferences, and so allow us to customise the Websites
according to your individual interests.
• To recognise you when you return to the Websites.
13. What cookies do we use?
We use two types of cookies: session cookies and persistent cookies. Session cookies are temporary
files that only remain in the cookie file of your browser until you leave our Websites. Persistent
cookies may remain for periods ranging from hours to years after you leave the Websites and after
your internet browser is closed.
The cookies we use are ‘analytical’ cookies (in particular, we use google analytics which provides us
with meaningful reports on how visitors use the Websites). The cookies we use are first-party cookies,
i.e. that they are set by the Websites when you visit and the data collected by these cookies cannot
be altered or retrieved by any service on another domain or by any third party.
• Those that are strictly necessary to deliver the services and products you have requested
• Cookies related to the performance of the Websites, e.g. google analytics
• Cookies related to the functionality of the Websites, e.g. remembering your preferred
The following table lists the principal cookies used on the Websites, their purpose and the time they
will be stored on your computer, portable device or mobile:
For further information about google analytics, including in particular the use of __utma, __utmb,
__utmc and __utmz cookies, please visit: www.google.com/analytics/learn/privacy.html.
14. How can you change your cookie preferences?
You may at any time refuse to accept or block cookies by activating the setting on your internet
browser which allows you to refuse the setting of cookies. You may also be able to change the setting
on your internet browser so that only particular types of cookies will be accepted.
Please note, if you change your settings in either of these ways, you may be unable to access certain
parts of the Websites.
Personal data are welcomed and should be addressed to firstname.lastname@example.org, as well as complaints and
concerns in the first instance.
If you are not satisfied with the handling of your concern or complaint by Gerald, you can escalate this
to your national Data Protection Authority.
This cookie is typically written to the internet browser on your first visit to our
Websites from that internet browser. If the cookie is deleted from by the
internet browser operator, and the internet browser subsequently visits our
Websites a new __utma cookie is written with a different unique ID. This
cookie is used to determine unique visitors to our Websites and is updated
with each page view. Additionally, this cookie is provided with a unique ID that
Google Analytics uses to ensure the validity and the accessibility of the cookie
as an extra security measure.
This cookie is used to establish and continue a user session with our
Websites. Each time a user visits a different page on our Websites, the cookie
is updated to expire in 30 minutes, so a single session continues for as long
as the user's activity on our Websites continues, within 30 minute intervals. If
it does not find the cookie, a new cookie is
This cookie is no longer used by the ga.js tracking code; however, historically,
it operated in conjunction with the __utmb cookie to determine whether or not
to establish a new user session. For backwards compatibility purposes, this
cookie is continuing to be written. It expires when the user exits the browser.
This cookie stores the type of referral used by a visitor to reach our Websites,
for instance by a direct method, by a referring link, via a Websites search or
as the result of a campaign such as an advertisement or an email link. This
cookie is used to calculate search engine traffic, advertising campaigns and
page navigation within our Websites and is updated with each page a user
This cookie is set when a visitor to our Websites changes the language
setting. Its purpose is to remember that visitor's language preference between
visits to our Websites.
Operation and Purpose
Is this a session or persistent cookie