Your personal data

All organisations including private organisations like Endole, and governmental agencies such as Companies House are required to have a lawful basis when processing your personal data. This is a legal requirement by the General Data Protection Regulation (GDPR).

Lawful basis

A lawful basis is a valid reason or explanation as to why an organisation can legally process your personal data according to the GDPR. In total, there are six lawful bases which an organisation can use to process personal data. These are as follows:

1. Consent - Organisations can process personal data if they have been given explicit consent to do so by the individuals involved. Examples are contact information such as name, email address, and contact number.
2. Contractual necessity - Organisations may need to process your personal data in order to get into an agreement or contract with you, or to provide certain services to you. An example would be that a bank may perform a credit check on you before they can provide financial services.
3. Legal obligation - Organisations may need to process your personal data because it is required to do so by a legal requirement. Companies House use this lawful basis in order to store, process and share your personal data in connection to your company or directorship.
4. Vital interests - Organisations may need to share your personal data in cases of extreme need such as your medical health record in order to save your life.
5. Public interest - Organisations may need to process your personal data in order to carry out work in the public's interest. Examples would be justice systems or water companies.
6. Legitimate interests - Organisations may process your personal data in order to carry out their legitimate interest or those of a third party to whom the personal data is shared with. We, Endole, use this lawful basis to process your information in connection to your company or directorship. Organisations may not use this basis where such interests are overridden by your interests, rights or freedoms.

To learn more about the various lawful basis we rely on for each of the different types of personal data, please see section 8 of our privacy policy.

Processing data with your consent

When you browse Endole's website or use our various platforms, we may ask for details about you such as your name and email address. We process this type of personal data with your explicit consent and you may withdraw your consent at any time by contacting us.

Processing data without your consent

We may also process your personal data without your consent such as your company and directorship information. In these instances, we use legitimate interests as our lawful basis, that is to provide services and products in the public's interest which help them meet with compliance and legal obligations, protect them against fraud, reduce financial risks by having comprehensive information on individuals and corporate entities, and provide marketing solutions to help them grow their business.

We do not need your consent to process this type of personal data.

Your rights and freedoms

Due to our legitimate grounds to process your personal information, we do not remove personal data unless there is a serious impact to the rights and freedoms of the individuals involved.

If you feel our processing of your personal data is impacting your rights and freedoms, please contact us. Every enquiry is dealt with on a case-by-case basis and our privacy team will ensure your rights under GDPR are met. Please note, we will require proof or evidence under certain circumstances (for example, a police crime reference number).