Privacy Statement

Corporate Clients (and individuals associated with our corporate clients)

At PwA, our policy is to collect only the personal information necessary for agreed purposes. We request that our clients share personal information only when required for those purposes. When processing personal data to provide services, we ask our clients to inform the data subjects about how PwA will handle their information, as clients are typically best positioned to communicate this information to their employees or customers.

Information Collection

Given the diverse range of services we offer, we process various types of personal information, which may include:

• Personal Details (e.g., name, age/date of birth, gender, marital status, country of residence)
• Contact Details (e.g., email address, phone number, postal address)
• Login Credentials (e.g., email address or username, password)
• Financial Details (e.g., salary, payroll, income, investments, tax status)
• Survey/Quiz Responses
• Job Details (e.g., role, experience, performance information)
• For certain engagements, we may process sensitive personal information (e.g., government identification documents, including biometric data for know-your-client checks).

Generally, we collect this personal data from our clients or third parties acting on the client’s instructions. In limited cases, we may collect information directly from data subjects or from publicly available sources on behalf of our clients.

Information Use

We utilize the collected personal information for the following purposes:

Providing Professional Services and Products

• Our services often require processing personal information to provide advice and deliverables. We may also seek feedback through surveys or quizzes.

Security, Quality, and Risk Management

• Personal data, such as client login credentials, is used to administer our websites, applications, and online services, ensuring identity verification and unauthorized access prevention.
• We process personal information to monitor and resolve security threats (e.g., phishing attempts).
• Personal information may be involved in quality monitoring and risk management activities related to our services.
• As part of client engagement procedures, we conduct searches to identify risk factors, such as criminal convictions, sanctions, or reputational issues.

Complying with Legal, Regulatory, and Professional Obligations

• We must comply with legal, regulatory, and professional obligations, which may require us to retain records containing personal information.

Business Improvement

• With client agreement, we may use personal information to analyze issues, industries, and sectors, improving our services, business, and offerings. We will de-identify personal data for these purposes.

Information Retention

We retain personal information in line with the terms of our client agreements.

Information Disclosure

We may disclose personal information as described in the Information Disclosure section. Additionally, we may share personal data with:

• Third-party Organizations that assist us in providing services.
• Our Clients when personal information is part of the deliverables, such as reports created for client projects.

This policy reflects our commitment to transparency in handling personal data, ensuring that we use, retain, and disclose it in compliance with applicable laws and regulations.