Number Four is a unique advisory firm
Over the last six years Jan Hall has demonstrated deep expertise and a strong track record in:
No 4 is trusted by our clients for our total discretion, confidentiality, empathy, sensitivity and appropriate directness.
Jan‘s clients, through No 4, have included Chairman and/or CEOs of a wide range of organisations including the following:
Akzo Nobel | Art Fund | BAE Systems |
BBC | BPA | British Land |
Brunswick | BT Group | BUPA |
Chr Hansen | Genomics England | Greggs |
GSK | Hammerson | Hiscox |
HSBC | Imperial College | Informa |
ITV | John Lewis Partnership | Landsec |
Legal & General | London Stock Exchange Group | NHS England |
Pearson | Rio Tinto | Royal College of Art |
Shell | Unilever | Young Vic Theatre |
“The No 4 Board Review is the most insightful I have been involved in”
“I am delighted with the outcome. You captured things in a helpful, useful and constructive way. You judged the feedback perfectly, the balance was right, it was accurate and has increased the focus and impact of the work of our Board”
“The report was exceptional… very well written, clarity around the issues and a focus that is needed. The best I have seen by some margin. This Board Review has helped to frame a set of really constructive discussions to help us make sure we focus on the key areas and issues”
“You have captured us very well. You are really good at this – a great adviser. You are straightforward, analytical and a great synthesiser. This work has been really valuable”
“I could not let today’s milestone pass without expressing my gratitude for your patient and professional coaching. I am definitely resetting to think as a CEO.
“Your instincts and insights on me and our business are always spot on, and your measured solutions are consistently creative and constructive”
“It is really great to have someone who understands the nuances of the business issues and the people. Sometimes at a very high level and sometimes more detailed, but always in a way that is right for me and builds trust. You just get it”
“You have had real impact. Hard to hear sometimes, but very good to hear. It has helped ground me and get to the right actions”
What is the Privacy Notice?
This Privacy Notice (“Notice”) describes how Jan Hall Consulting Limited, trading as No. 4, collects and uses Personal Data in accordance with the EU General Data Protection Regulation (“GDPR”).
What are the aims of the Privacy Notice?
This Notice tells you what Personal Data No. 4 collects, why we need it, how we use it and what protections are in place to keep it secure.
What are the key terms?
“Jan Hall Consulting”, “No. 4”, “we”, “us” and “our” means Jan Hall Consulting Limited, trading as No. 4.
“No. 4 Personnel” means No. 4’s prospective, present and past partners, employees, consultants and agency staff, and people connected to such persons.
“Personal Data” means information about individuals (including you), and from which such individuals could be identified.
“You” means individuals whose Personal Data we process including, but not limited to job applicants, No. 4 clients, No. 4 client personnel, counter-parties, counter-party personnel, other solicitors/advisors, witnesses, suppliers, supplier personnel and individuals who visit this website.
“You” does not include No. 4 Personnel.
Who is the Data Controller?
No. 4, registered with the ICO under registration number ZA478263, is the Data Controller in relation to your Personal Data and is committed to protecting the privacy rights of individuals, including your rights.
Who is the Data Protection Manager?
No. 4 is not required under the GDPR to appoint a Data Protection Officer and, following a detailed analysis does not consider it appropriate to do so on a voluntary basis. If you wish to contact No. 4 in connection to a GDPR issue, please contact Jan Hall at jan.hall@no4.co.uk.
How does No. 4 obtain your Personal Data?
In most circumstances, we may obtain Personal Data from you or the data subject directly but will on occasion obtain Personal Data from a third-party source, for example, we may collect information from our clients/our clients’ personnel, agents and advisors, the company for whom you work, other organisations/persons with whom you have dealings or have had dealings with in the past, and publicly available records.
What about Personal Data which you provide to No. 4?
If you provide information to us about someone else (such as one of your associates, directors or employees, or someone with whom you have business dealings) you must ensure that you are entitled to disclose that information to us and that, without our taking any further steps, we may process that information in accordance with this Notice. If you are in any doubt, you should take your own legal advice.
What Personal Data does No. 4 collect from and about you?
We collect and use different types of Personal Data about you, which will vary in type and detail depending on the circumstances and purpose of processing. Please consider the following illustrative and non-exhaustive examples:
Why do we need to collect and use Personal Data?
We need to collect and use Personal Data for a number of reasons, the primary purpose being to contact you to advise you of upcoming events, and to provide professional services to our clients and which may involve the use of your Personal Data in the following (non-exhaustive) ways:
We may also process Personal Data for effective business management purposes which may involve the use of Personal Data in the following (non-exhaustive) ways:
What is No. 4’s legal basis for processing your Personal Data?
Under the GDPR, No. 4 must identify a lawful basis for processing your Personal Data which may vary according to the type of Personal Data processed and the individual to whom it relates.
Consent: we will only send you marketing emails if you have given us your prior consent unless there is another lawful basis for doing so (see also “Legitimate interests of No. 4 or a third party”).
Performance of a contract with you (where applicable): No. 4 is entitled to process the Personal Data it requires in order to fulfil its obligations under its contract with you. This will be the relevant legal basis if you are an individual client or supplier/other individual with a direct contractual relationship with No. 4.
Legitimate interests of No. 4 or a third party: No. 4 processes some Personal Data on the basis that it is necessary for its legitimate interests and/or the legitimate interests of a third-party to do so. This will primarily concern the processing of Personal Data that is necessary to provide professional advice and services to our clients. No. 4’s legitimate business interest in such instances is the proper performance of its function as a professional services provider.
No. 4’s broad interest in the provision of professional services as a basis for processing Personal Data, and our clients’ corollary interest in the receipt of such services, can be broken down into more discreet categories which may include, but are not limited, to:
No. 4 does not consider that the processing of your Personal Data, on the basis that it is necessary for No. 4’s legitimate interests (whatever such interests might be), is unwarranted because of any prejudicial effect on your rights and freedoms or your legitimate interests.
Compliance with a legal obligation to which No. 4 is subject:
In certain circumstances, No. 4 must process your Personal Data in order to comply with its legal obligations. This might include, but is not limited to, Personal Data required:
More information relating to legal bases for processing Personal Data can be found on the Information Commissioner’s website (see details below).
What will No. 4 do with special category and criminal records Personal Data?
If No. 4 processes your criminal records Personal Data or special category Personal Data relating to your racial or ethnic origin, political opinions, religious and philosophical beliefs, trade union membership, health data, biometric data or sexual orientation, we will obtain your explicit consent to those activities unless this is not required by law (because, for example, it is processed for the purpose of exercising or defending legal claims or because it may be a Home Office requirement for such information to be disclosed to the appropriate authorities when applying for a visa in relation to which we have been instructed) or the information is required to protect your health in an emergency. Where we are processing Personal Data based on your consent, you have the right to withdraw that consent at any time.
Who receives your Personal Data?
We may disclose Personal Data to third-parties (outside of Jan Hall Consulting and No. 4) if, but only when, we have a legal basis to do. Such recipients include but are not limited to:
How do we protect Personal Data?
We have security arrangements in place to guard against unauthorised access, improper use, alteration, destruction or accidental loss of Personal Data. We take appropriate organisational and technical security measures and have rules and procedures in place to ensure that any Personal Data we hold is not accessed by anyone unauthorised to access it.
When we use third-party organisations to process your Personal Data on our behalf, they must also have appropriate security arrangements, must comply with our contractual requirements and instructions and must ensure compliance with the GDPR and any other relevant data protection legislation.
Is your Personal Data transferred to “third countries” and, if so, what safeguards are in place?
In accordance with this Notice and the provisions of the GDPR, we may transfer your Personal Data to organisations located in “third countries” (those outside of the EEA). In addition to the security arrangements mentioned above in relation to our engagement of third-party organisations, where such transfers are required we will ensure that your Personal Data is adequately protected, for example, by using a contract for the transfer which contains specific data protection provisions that have been adopted by the European Commission or a relevant data protection authority.
How long will your Personal Data be retained by No. 4?
It is our policy to retain your Personal Data for the length of time required for the specific purposes for which it is processed by No. 4. However, we may be obliged to keep your Personal Data for a longer period, for example, where required by our legal obligations or in order to ensure we have effective back-up systems. In such cases, we will ensure that your Personal Data will continue to be treated in accordance with this Notice, restrict access to any archived Personal Data and ensure that all Personal Data is held securely and kept confidential.
What are your rights?
You have the following rights (although please note that some of these rights may be subject to restrictions):
Subject Access Request
You are entitled to make a Data Subject Access Requests (“SAR”). Put simply, a SAR is a request made by you which requires us to provide you with details of your Personal Data which we hold and process and a description of how we process it. Any questions should be put in writing to Jan Hall, Director (jan.hall@no4.co.uk).
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Right to withdraw consent
You may withdraw your consent to allow us to continue processing your personal data, but only where consent was sought as a lawful means of processing your personal data.
In the limited circumstances where you may have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact Jan Hall, Director (jan.hall@no4.co.uk). Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Exemptions
There are exceptions to the rights of individuals in relation to their Personal Data and your rights may be limited. We will, at all times, respect your Personal Data and seek to be as transparent as possible.
How can you make a complaint?
If you are unhappy with the information provided in this Notice or have concerns about the way in which No. 4 processes your Personal Data you may in the first instance contact Jan Hall, Director (jan.hall@no4.co.uk), if you remain dissatisfied then you may apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at: -
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF www.ico.org.uk
What if there are any changes to this Privacy Notice?
We reserve the right to update this Notice at any time. We encourage you to review this privacy notice periodically to be informed about how we use your Personal Data.