Privacy Notice 

What is the purpose of this document?

This is the Privacy Notice applicable to the ‘Choose Audit’ Campaign Website run by us, RMP Enterprise Ltd. We are the "data controller" of your information. This means that we are responsible for deciding how we hold and use personal information about you. You are being provided with this privacy notice because you are completing a registration on this website. It makes you aware of how and why your personal data will be used and how long it will usually be retained for. It provides you with certain information that must be provided under UK privacy laws.

Section 1: Information we collect from you, and what we use it for

We collect the information you input on our registration form, being your;

  • First name

  • Last name

  • Email address

  • Gender (for reporting purposes only)

  • Ethnicity (for reporting purposes only)

  • Whether you are a School/College or University student

    • If School/College - what year of study 

    • If University - your University, your graduation year and degree subject

  • Whether you require a visa or sponsorship to work in the UK (after completing your education)

We use all this information to administer your registration for the competition and your participation in it. We will use your email address to confirm receipt of your competition entry, and (unless you unsubscribe) to let you know about any similar competition occurring the following year. Our lawful basis for this processing is our legitimate interests in providing information about the competition that you have registered for, and facilitating your participation.

If you are a prize winner, we will use your email address to notify you. The legal basis for doing so is that it is necessary in order to provide you with the service of awarding the prize.

If you are a winner, we may publish your first name and your geographical region. The legal basis for doing this is that we may be required to do so as a regulatory obligation applicable to prize promotions.

Section 2: Data sharing

Why might you share my personal information with third parties?

If you give us your consent to do so, we will provide your personal data (as outlined in Section 1) to employers who are sponsoring the competition, namely; Deloitte, EY, KPMG and PwC. The legal basis on which we pass your personal data on to employers is your consent, which you can withdraw at any time, by emailing us. Use by the employers of your personal data is under their control and subject to the relevant employer’s privacy policy, which are available on their websites here; Deloitte, EY, KPMG and PwC.

If you give us your consent to do so, we will provide your personal data to ratemyapprenticeship.co.uk or ratemyplacement.co.uk, depending on whether you are a School/College or University student. The legal basis on which we pass your personal data on to ratemyapprenticeship.co.uk or ratemyplacement.co.uk is your consent, which you can withdraw at any time, by emailing us. Use by ratemyapprenticeship.co.uk or ratemyplacement.co.uk of your personal data is under their control and subject to the relevant privacy policy, which are available on their websites here; ratemyapprenticeship.co.uk or ratemyplacement.co.uk. 

If you are a winner, we may need to pass your information to the prize provider to enable you to receive it.  The provider may also be a data controller and will notify you of its own Privacy Notice if so.

We will share your personal information with our email communications provider; Instiller (https://instiller.co.uk/) so that we can send and track our emails to you in relation to the competition. 

All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

Section 3: Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Section 4: Data retention

How long will you use my information for?

We will retain your personal data for a period of 3 months, from the website closing date (30th September 2025). After this period, we will securely destroy your personal information in accordance with our data retention policy. 

Section 5: Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances you have the right to:

  • Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

  • Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).

  • Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

  • Request the transfer of your personal information to another party. 

Section 6: How to contact us

If you want to request information about our privacy policy in relation to the ‘Choose Audit’ Campaign Website you can emailissy@rmpenterprise.co.uk or write to:

RMP Enterprise Ltd.

9 Brighton Terrace

Brixton

London

SW9 8DJ

Feel free to contact us if you have any concerns or questions about how we handle your data and personal information.

Section 7: How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.