This section of the Privacy Notice applies to you if you or your employer supplies goods or services to BAT, or you purchase goods or services from us. It also applies if you are a director or direct or indirect shareholder of an organisation which supplies or receives goods or services to or from BAT.
Here we tell you which BAT company is primarily responsible for your personal information, what we collect, why we collect it, how legally we can use it and for how long we keep it.
The BAT company listed below which has a business relationship with you, your employer, or the company of which you are a shareholder or director, will be primarily responsible for your personal information. For further information please contact BAT Data Privacy Officer .
At BAT, we need some information about you, such as your name, job title and contact details so we can work with you to manage the contract and relationship for the goods or services you supply to us, or we supply to you. In addition, as part of managing the business relationship, we may be legally required to conduct ‘know your customer’, or similar compliance screenings on you or your company. In doing so we will use the information listed below. We obtain this information either directly from you or from your employer, or the company you are shareholder or director of. In the context of conducting compliance screenings, we will also check the personal information provided to us against public information.
[For a general description of all the ways we use your personal information please click back to section 3 of the Privacy Notice. However, in respect of the way we lawfully can use your personal information in the context of the relationship that you have with us, please see below.
Why do we hold your information | What type of information? | How legally can we use your information? | How long do we keep it for? |
---|---|---|---|
To contact you in order to manage the contract and business relationship with either you, your employer or the company you are a director or direct or indirect shareholder. |
|
In order to perform our obligations under contract or take steps prior to entering into a contract. | 7 years after the expiry of the business relationship or contract entered into by BAT. |
To comply with all statutory and regulatory requirements within the jurisdictions within which we operate (including those relating to bribery and corruption, money laundering and sanctions) when engaging with third parties. |
|
To comply with Legal obligations to which BAT is subject. |
12 years from the date that BAT ceases its relationship with the organization that you are employed by. |
Please note that we may need to keep your information longer than the periods stated above. This could be because of the following reasons:
When it is no longer necessary to retain your data, we will delete the personal information that we hold about you from our systems. After that time, we would only retain aggregate data (from which you cannot be identified) for analytical purposes.