PRC Trust Architecture
Privacy Policy
Privacy And Personal Security
01
Who Is Responsible
PRC Elite Management is responsible for the personal information it controls.
02
When This Policy Applies
This policy covers enquiries, professional engagements, suppliers and use of the PRC website.
PRC Elite Management is a UK sole-trader business serving UK and international clients.
For the purposes of UK data-protection law, PRC Elite Management is the controller of personal information it collects and uses for its own business activities, including enquiries, client relationships, supplier relationships, business records and website administration.
Privacy Contact
PRC Elite Management
Business correspondence address: Elizabeth Suite, 3rd Floor, 207 Regent Street, London, W1B 3HH
office@prcelitemanagement.com
This policy applies to personal information relating to:
people who contact PRC or submit an enquiry;
prospective and current clients;
client-appointed contacts, advisers or representatives;
suppliers, contractors and professional advisers;
people who communicate with PRC in connection with its services; and
visitors to the PRC website.
Where PRC is appointed to process personal information solely on a client’s documented instructions, the relevant responsibilities, safeguards and instructions will be set out in the engagement documentation.
03
Information PRC May Use
Information used by PRC depends on the relationship and the service requested.
04
Why PRC Uses Information
Information is used to respond to enquiries, deliver agreed work and meet legitimate business obligations.
Depending on the nature of the relationship or engagement, PRC may use:
contact and enquiry information, such as name, email address, telephone number, residence location and a brief description of the requirement;
professional and engagement information needed to assess, scope, deliver or administer agreed work;
supplier or adviser contact and professional information;
invoicing, payment and financial-record information where a professional engagement proceeds; and
limited website technical information required for website operation and security.
PRC does not request identity documents, health information, residence-security details, access credentials or other sensitive materials through the website, Calendly or routine email.
PRC uses personal information only where there is a clear and lawful reason to do so. This may include:
responding to an enquiry or arranging an introductory discussion;
taking steps requested before entering into an agreement;
delivering and administering an agreed professional engagement;
maintaining appropriate business, financial and tax records;
managing supplier and professional-adviser relationships;
protecting PRC’s systems, business and legal position; and
meeting legal, regulatory or professional obligations.
Depending on the purpose, PRC may rely on the performance of a contract, steps requested before a contract, compliance with a legal obligation, consent where appropriate, or PRC’s legitimate interests. PRC will not use personal information for a purpose that is incompatible with the reason it was collected.
05
Sensitive And High-Risk Information
PRC does not use public channels for sensitive client material.
06
Who Information Is Shared With
PRC shares information only where necessary, authorised or legally required.
Do not send identity documents, health information, residence-security details, access credentials or other sensitive materials through the website, Calendly or routine email.
Once introduced, the Accounts / Client Portal will be the controlled route for:
authenticated client access;
proposals, agreements, invoices, receipts and payment records;
approved secure document exchange;
controlled permissions;
record retention and deletion; and
an auditable activity trail.
Until then, if a prospective client has sensitive material, PRC agrees an appropriate secure method after discovery and before requesting it. We will not improvise this through a normal inbox.
If a future engagement genuinely requires PRC to handle special-category personal information, the purpose, lawful basis, additional legal condition, access restrictions and secure handling route will be agreed before that information is collected.
PRC may share personal information only where this is necessary and proportionate for the relevant purpose. This may include sharing with:
professional service providers that support PRC’s operations;
advisers, suppliers or contractors where this is necessary for an agreed engagement;
parties specifically authorised by the relevant client; and
regulators, law-enforcement bodies, insurers or professional advisers where disclosure is legally required or necessary to establish, exercise or defend legal claims.
PRC does not sell personal information. PRC does not share personal information for third-party advertising or marketing. PRC does not casually disclose, confirm or discuss client relationships.
07
Service Providers And International Transfers
PRC uses selected providers to support its operations and handles transfers with appropriate care.
08
Security And Confidentiality
Access is restricted and information is handled with discretion.
PRC uses carefully selected service providers to operate its website, email, booking, security and internal business systems. These providers may process personal information only as necessary to provide their services to PRC and subject to appropriate contractual and security arrangements.
Where a provider processes or can access personal information outside the United Kingdom, PRC will assess whether this is a restricted international transfer and ensure that an appropriate safeguard is in place.
This may include reliance on an adequacy regulation or appropriate contractual transfer safeguards, where required.
PRC applies proportionate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal information is restricted to authorised persons and service providers who require it to operate, secure or support PRC’s systems and services, subject to appropriate confidentiality and data-protection controls. PRC uses controlled-access systems, credential management, secure email and need-to-know handling.
No security measure can guarantee absolute protection. If PRC identifies a personal-data incident that creates a material risk to individuals, it will assess, contain and respond to it in accordance with applicable legal requirements.
09
Retention And Deletion
PRC keeps information only for a defined purpose and period.
10
Cookies And Website Technology
PRC uses cookie-free built-in analytics and no advertising tracking.
PRC retains personal information only for as long as needed for the purpose for which it was collected, to meet legal obligations, or to establish, exercise or defend legal claims.
PRC’s retention schedule is:
Unsuccessful enquiries and Calendly bookings: 12 months after the last meaningful contact.
Proposals and pre-contract correspondence: 12 months after the last meaningful contact.
Client agreements, scope records, key engagement records and substantive correspondence: 6 years after the engagement ends.
Invoices, receipts, expenses and tax records: at least 5 years after the relevant Self Assessment filing deadline, or longer where legally required.
Supplier agreements and essential supplier records: 6 years after the relationship ends.
Website security and technical records: retained for the applicable provider’s minimum operational period, then deleted or aggregated where appropriate.
Sensitive material: not currently collected; retention will be agreed for the specific engagement before collection.
When information is no longer required, PRC will delete, securely destroy or anonymise it, unless a legal obligation requires longer retention.
PRC uses Framer’s built-in website analytics, which does not use cookies or persistent identifiers but does read some browser and connection information such as approximate timezone, language, device pixel ratio and connection type. PRC does not operate advertising tracking or a mailing-list system.
The website may use strictly necessary technology required for security, performance or delivery of a service requested by the visitor. PRC relies on the UK data-protection recognised exception for statistical-purposes analytics for Framer’s built-in analytics; this does not require prior consent but does require a simple, free way to object, which is provided on the Cookies page.
PRC will not introduce non-essential cookies or similar technology that stores or accesses information on your device until it has:
completed the relevant provider and cookie audit;
provided clear information about the technology and its purpose;
implemented an appropriate consent mechanism; and
updated this Privacy Policy and the Cookies Policy.
Where consent is required, PRC will obtain it before non-essential technology is set.
11
Your Rights And Concerns
Individuals may ask about their information and exercise applicable privacy rights.
12
Changes To This Policy
This policy is reviewed as PRC’s services and information practices develop.
Subject to applicable law, individuals may have rights to:
request access to their personal information;
request correction of inaccurate or incomplete information;
request deletion in certain circumstances;
request restriction of processing in certain circumstances;
object to processing based on legitimate interests;
request portability where applicable; and
withdraw consent where PRC relies on consent.
To exercise a right or raise a privacy concern, contact:
office@prcelitemanagement.com
PRC may need to confirm identity or request clarification before responding. PRC will respond within the applicable legal timeframe.
Individuals also have the right to complain to the UK Information Commissioner’s Office.
PRC will review this Privacy Policy when its services, systems, legal requirements or information-handling practices materially change.
The current version will always be available through the PRC website. Where a change materially affects how personal information is handled, PRC will take reasonable steps to draw that change to the attention of affected individuals where appropriate.
PRC Private Standard
Clear • Controlled • Confidential
