Skip to content

Privacy Statement for Clients

Black Mountain Group

Privacy Statement for Clients

Introduction

 

When your employer contracts to use our services, it will be necessary to collect your personal data to support those services. We will only collect that data we specifically need and will only ever use it in preforming those services we are contracted to provide.

Please rest assured data privacy is important to us at Black Mountain and we take the greatest of care in looking after it. To that end we are committed to complying with all requirements of the General Data Protection Regulations in all locations in which we operate.

When handling data, Black Mountain will at all times comply with the 6 privacy principles under the GDPR:

  1. Lawfulness, fairness and transparency – Personal information shall be processed lawfully, fairly and in a transparent manner.
  1. Purpose limitations – Personal information shall be collected for specified, explicit and legitimate purposes.
  1. Data minimisation – Personal information shall be adequate, relevant and limited to what is necessary.
  1. Accuracy – Personal information shall be accurate and, where necessary, kept up to date.
  1. Storage limitations – Personal information shall be retained only for as long as necessary.
  1. Integrity and confidentiality – Personal information shall be processed in an appropriate manner to maintain security.

How We Use Personal Data 

Depending upon the services we are contracted to provide, your data is collected to help us:

  • Process payrolls on behalf of employers and make individual salary payments.
  • Provide HR Advisory Services to Employers.
  • Process social security payments and lodge funding information to relevant bodies.
  • Prepare and lodge employee related tax returns on behalf of Employers.
  • For clients who utilise our Insurance Brokerage Services – the negotiation of premiums with insurers and the provision of claims support.
  • Assisting with applications for Employment Visa’s and Employment passes.
  • Filing Company Secretarial Forms.

Personal Data We May Collect

Black Mountain may collect one or more of the following types of data as a requirement for using our services:

  1. Name
  2. Contact information
  3. Home address
  4. Date of birth
  5. Bank account number
  6. Salary/personal financial information
  7. National identification numbers
  8. Taxpayer identification numbers
  9. Employee number or ID
  10. Employment history and qualifications

When we share your personal data

Your personal data may be shared with third parties under one or more of the following scenarios:

  • When your explicit consent is given.
  • With established affiliates and partners subject to non-disclosure agreements and with a legitimate purpose in line with this privacy policy.
  • To government agencies, regulators or law enforcement agencies with a lawful purpose.

Your rights

Your privacy rights are outlined below. For further details of these rights or to make a request from us related to these rights, please see the Privacy Requests and Contacts section below and contact us accordingly.

  • The right to be informed: You have the right to be informed about the collection and use of your personal data, when the data is obtained by us.
  • The right to access and amend your data: You can request a copy of your personal data through a data subject request. You can ask us to explain the means of collection, what data is being processed by us, and anyone that we share it with.
  • The right to rectify your data: If your data is inaccurate or incomplete, you can ask us to rectify that.
  • The right to data erasure: You can request we erase your data within 30 days. We will notify you if that cannot be completed or any implications of doing so for using our services.
  • The right to transfer your data: You can have your data transferred from one system to another safely and securely.
  • The right to restrict your data processing: You can request we restrict or suppress your personal data to limit its use.
  • The right to opt-in for sensitive data processing: For any highly sensitive personal data we may collect, we require your explicit consent to opt-in to us processing that data.
  • The right to opt-in by a parent or guardian: Other than for a select few services were information is required on family members we do not collect data on minors. You are required to be over the age of 16 in order to use our services.
  • The right not to be subject to fully automated decisions: We do not apply automated processing activities that profile you or make fully automated decisions using your personal data.

These rights are subject to the clauses of the relevant privacy regulations, legal requirements, public interest, and where the above rights may conflict with your use of our services. For any privacy concerns or to request further details of your rights, please see the Privacy Requests and Contacts section below.

Privacy requests and contacts

For further information about our Privacy Policy or practices, or to raise any privacy requests or complaints in relation to your data, please contact us using the following methods:

  • Data Privacy Officer UK: Tracey Crank
    Email: tracey.crank@blackmountainhr.com
  • Data Privacy Officer Hong Kong: Pamlea Lam
    Email: pamela.lam@blackmountainhr.com
  • Data Privacy Officer Singapore: Susan Lim
    Email: susan.lim@blackmountainhr.com
  • Data Privacy Officer Group: Steven Fedor
    Email: steve.fedor@blackmountainhr.com

General

You may not transfer any of your rights under this Privacy Notice to any other person. We may transfer our rights under this Privacy Notice where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this Privacy Notice (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Notice will not be affected.

Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

This Privacy Notice will be governed by and interpreted according to the law of England and Wales. All disputes arising under this Privacy Notice will be subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this Privacy Notice

We reserve the right to change this Privacy Notice as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the website and you will have been deemed to have accepted the terms of the Privacy Notice on your first use of the website following the alterations, or any changes will be notified to you and you will have been deemed to have accepted the terms of the Privacy Notice on your receipt.

For further information please contact us as below:

Email: enquiries@blackmountainhr.com

Last updated 5 September 2025