Privacy Policy Notice for Suppliers.

Last edit: December 2022

Where The Brand Power Company (“TBPC”, “Company”, "we", "us" or "our"), chooses to enter into a business engagement with supplier, we will be the controller of any personal data, that you give to us, to enable us to process that business engagement and are therefore responsible for processing it in accordance with the law.

We respect the privacy of our suppliers and those individuals working for our suppliers and recognise that when you choose to provide us with personal data, you trust us to act in a responsible manner with that information. This privacy policy contains important information about how we use personal data for the following data subjects:

  • Our suppliers, vendors and service providers, either historical, existing or prospective, who are natural persons; and

  • representatives or contact persons of our suppliers and service providers who are legal entities.

We will refer to the above together as the “suppliers”. If you are considered a supplier of TBPC we invite you to read and understand the contents set out in this privacy policy.

What information do we collect?

We may gather the following information about you during our engagement:

  • Identification and contact information (full name, title, email, phone, address etc)

  • Job Title, position, and name of company

  • Business Financial information (e.g., bank account details), insofar our supplier is a natural person

  • Identification data relating to the delivery of products or services to our company (e.g., login details, passwords, visitor pass, IP address, online identifiers/ cookies, logs, access times, correspondence) and

  • Background checks related to the supplier (which may include related party checks)

  • Suppliers should ensure their employees are aware that their data is being shared with us, as described in this policy.

How do we use it?

The primary reason we process your personal data is to approve, manage, administer or effect an agreement between TBPC and the supplier you represent or work for. In this respect, we use your personal data, to organize our sourcing activities, issue purchase orders, process payments, perform accounting, manage our contract or review the services or products you supply us with. In addition, we process personal data to meet our legal obligations (such as record keeping obligations), as well as to manage our risks and operations (e.g. prevent and detect security threats, exercise or defend legal claims).

We are also required by law to state a “legal basis for processing”, i.e., to tell you on what grounds we are allowed to use your information, and this is also set out below:

How we will use your personal information Our legal basis for processing
To provide or respond to you, with information that you have requested, e.g., this could relate to a newsletter, bulletin, an invitation for an event, your interaction with us on social media Consent – we only use your personal information for this purpose if you have asked us to do so. You can withdraw your consent at any time.
To keep you updated with developments and initiatives at The Brand Power Company, its affiliates or partners Our legitimate interests – we use your information to provide you news and updates on The Brand Power Company, its affiliates or partners. You will always have the opportunity to opt-out in each correspondence.
To process your registration for and attendance at events, seminars, conferences, and meetings with The Brand Power Company, its affiliates or partners Our legitimate interests – we use your information to book you on to the requested events and to send confirmation to you and the event organiser.
To respond to specific queries you may raise regarding The Brand Power Company, its affiliates and partners. Consent – we only use your personal information for this purpose if you have asked us to do so. You can withdraw your consent at any time.
To provide you with better ways of accessing information from this website Consent – we only use your personal information for this purpose if you have consented for us to do so. You can withdraw your consent at any time.
To process and consider your job application. Our legitimate interests – we use your personal information to assess your job application, update you on its status and keep you informed of other opportunities, if you have asked us to, via the methods you have selected.
To manage your visit to the office Our legitimate interests or any other purposes required by law such as for example, compliance with fire protection regulations.

Do we pass your information to third parties?

We may send your personal data to other WPP and The Brand Power Company group companies, affiliates and third parties to help us process your personal data for the purposes set out in this policy. Further details of our WPP group companies can be found here.

We may disclose your personal data if we or any of our assets are the subject of a sale or similar corporate transaction. We will ensure that the third parties who receive your personal data are required to keep it confidential.

We may disclose personal data to third parties when we reasonably believe we are required by law, and in order to investigate, prevent, or take action regarding suspected or actual unlawful or otherwise prohibited activities, including, but not limited to, fraud.

Where do we send your information?

We are a global company and therefore we may transfer your personal data to countries around the world including the US and other countries outside Europe. We will, where the country to which your data is transferred has not been found to provide an adequate level of protection, put in place appropriate safeguards (we use standard contractual clauses) to ensure your information is protected.

How long do we keep your information?

We will keep your information for as long as is necessary to fulfil the purpose for which it was collected. The retention time is the term of the suppliers’ contract until any legal claims under the contract expire, unless an overriding legal or regulatory obligation arises.

How do we protect your information?

We take appropriate measures to ensure that your personal data disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used.

Your rights

Depending on the purposes of processing, you may be entitled to ask:

1. for a copy of the personal data we hold about you, and details about how we are processing your personal data;

2. to have any inaccuracies in your personal data corrected;

3. if we are processing your personal data by automated means and on the basis of your consent (see “How do we use it?”, above), for us to provide your personal data to you in a structured, commonly-used and machine-readable format. You can also ask us to provide your personal data directly to a third party in this format, and, if technically feasible, we will do so; and

4. to withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing based on consent before withdrawal

5. to object, on grounds relating to your particular situation, at any time which is based on our legitimate interest; and

6. to have your personal data erased, or for our use of it to be restricted

Please contact us using the details set out below if you would like to exercise any of these rights.

You may also have the right to make a complaint to the supervisory authority, in your country or jurisdiction, if you’re not happy with how we’ve handled your personal data.

How to contact us

If you wish to exercise any of your rights in relation to your personal information or if you have any queries about how we use your personal information, please let us know by contacting us at the following address: The Brand Power Company, Level 12, 380 St Kilda Road, Melbourne VIC 3004 Australia or by email at [email protected] .

Changes to this privacy policy

We review this privacy policy on a regular basis to ensure that it is up-to-date with our use of your personal data, and compliant with applicable data protection laws.

We reserve the right, at our discretion, to revise this privacy policy at any time. The updated privacy policy will be posted on our website. You are encouraged to review this privacy policy from time to time.