Privacy notice

1. Data controller

This Privacy Notice explains how personal data is processed in relation to visitors to the Golden Balance Sheet 2026 project website, event attendees and guests, speakers, partners, media representatives and other individuals with whom the Organiser communicates directly.

Controller / Organiser	CompanyWall Ltd
Registered office	Units 15 & 16, 7 Wenlock Road, London N1 7SL, United Kingdom
Email	info@companywall.com
Project website	https://golden-balance-sheet.com/

CompanyWall Ltd (the “Controller”, the “Organiser”, “we”, “us” or “our”) determines the purposes and means of processing personal data in connection with the operation of the website, the selection of award recipients and the organisation of events. The website does not provide a contact or application form and does not collect personal data through fields completed directly by visitors.

We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (PECR), each as amended from time to time.

2. Who this Notice applies to

visitors to the Golden Balance Sheet project website;
owners, sole traders, directors and other representatives of businesses whose publicly available business information is considered under the award methodology;
speakers, panellists, partners, sponsors, media representatives and other collaborators;
event attendees and guests;
individuals appearing in photographs, video recordings or audio recordings made at events;
individuals who contact the Organiser directly by email, telephone or another communication channel.

3. Personal data we may process

Depending on your relationship with the Organiser and how you use the website, we may process:

Technical website data: IP address, access date and time, device and browser information, logs, identifiers and security records;
Cookie and similar technology data: depending on the type of cookie and the visitor’s choices;
Publicly available business information: the name of a sole trader, company director, legal representative or other business representative, their role, company name and information connected with publicly available business and financial records;
Contact and business information obtained through direct communication: name, business role, company, email address, telephone number and the content of communications;
Event participation information: attendance confirmation, guest category, organisational and protocol information and other details required to deliver an event;
Photographs, video recordings and audio recordings from events;
Consent and objection records: the date, time, content and method of consent, withdrawal, opt-out or exercise of rights.

We do not ask you to provide national identification numbers, identity document numbers, health data, information about political opinions, religious beliefs or trade union membership, or other special category data, unless such processing is exceptionally necessary and a valid legal basis applies.

4. Sources of personal data

We may obtain personal data:

automatically when you access and use the website;
from official registers, public records and reliable business information sources;
directly from you by email, telephone, contract, invitation or other direct communication;
from the company or organisation you represent;
from partners and service providers involved in organising events, but only where an appropriate legal basis applies.

5. Purposes and lawful bases

Purpose	Data used	Lawful basis
Website operation, security and protection	IP address, logs and technical data	Our legitimate interests in maintaining the functionality, stability and security of the website and information systems.
Website analytics and improvement	Analytics cookies and similar technology data	Consent where required; in limited cases, our legitimate interests in obtaining strictly limited or anonymised statistics.
Selection and presentation of award recipients	Publicly available business information and information about businesses	Our legitimate interests in carrying out a reliable, objective and transparent selection process and promoting business excellence.
Event organisation and communication with attendees, speakers and partners	Identification, business and contact information	Performance of a contract or arrangement, steps taken at the individual’s request before entering into an arrangement, and our legitimate interests in delivering events effectively.
Event documentation, reporting and promotion	Photographs, video and audio recordings	Our legitimate interests, taking account of individual rights; consent where the person is the main subject or consent is otherwise the more appropriate basis.
Promotional communications	Name, business contact details and interests	Consent or another lawful basis permitted under applicable law, including PECR where relevant, with a clear opt-out option.
Compliance with legal obligations and protection of legal claims	Relevant data and documentation	Compliance with legal obligations and our legitimate interests in establishing, exercising or defending legal claims.

6. No contact or application form

Viewing the website does not require a user account, registration or the submission of your name or contact details. The website does not provide a contact or application form. If you voluntarily contact us through info@companywall.com, by telephone or through another channel, we will process only the information needed to respond to your communication or carry out the agreed business correspondence.

Event participation, partnerships, speaking engagements, media cooperation and other business relationships are arranged through direct communication, invitation, offer, contract or another appropriate document rather than through the website.

7. Who may receive personal data

Personal data may be accessed only by persons who need it for a specific purpose, including:

authorised employees and contractors of the Organiser;
project, professional, technical, media and other partners involved in checking criteria, communications or event delivery;
hosting, website maintenance, email, analytics, security and other IT service providers acting on our instructions;
hotels, conference venues, production, protocol and accreditation partners to the extent necessary to deliver an event;
accountants, lawyers and other professional advisers where necessary;
public authorities and other recipients where disclosure is required by law or necessary to protect legal rights.

We do not sell personal data. A recipient must not use personal data for its own marketing without a separate lawful basis and an appropriate privacy notice.

8. International transfers

Some technical service providers may process personal data outside the United Kingdom. Where this occurs, we will use a transfer mechanism permitted by UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another appropriate safeguard. Further information about relevant recipients and safeguards is available on request, where legally permitted.

9. Retention periods

Technical and security logs: generally for up to 12 months, unless longer retention is necessary to investigate an incident or comply with a legal obligation;
Direct communications that do not result in cooperation: for up to 12 months after the communication ends, unless longer retention is needed to protect legal claims;
Event attendee, speaker and guest data: for up to 24 months after the relevant event, except where longer retention is required by contract, law or legal claims;
Partner, sponsor and contractor data: for the duration of the relationship and for applicable business, accounting and tax retention periods;
Documentation relating to award selection and presentation: for the duration of the project and for as long as necessary to evidence the methodology, results and legal position;
Promotional communication data: until consent is withdrawn, an opt-out is received or another applicable lawful basis ends, while retaining the minimum information needed to respect the opt-out;
Event photographs and video content: for as long as they retain documentary, informational or promotional value, subject to consideration of justified requests for removal or restriction.

At the end of the applicable retention period, personal data will be deleted, anonymised or access will be restricted unless a lawful reason for continued retention applies.

10. Photography and recording at events

Golden Balance Sheet events may be photographed and audio-visually recorded for reporting, documentation and project promotion. Appropriate notices will be displayed at the venue. General crowd images may be processed on the basis of our legitimate interests, taking account of attendees’ rights and reasonable expectations.

For individual interviews, statements, portraits or promotional recordings in which a particular person is the principal subject, we will obtain consent where appropriate or rely on another suitable lawful basis. Anyone who has a justified reason not to be recorded may contact event staff or the Organiser.

11. Cookies and similar technologies

The website may use strictly necessary cookies required for secure operation and essential functionality. Analytics, advertising or other non-essential cookies will be activated only in accordance with applicable law, including PECR, and where required after the visitor has provided consent.

The precise list of cookies, providers, purposes and retention periods should be set out in a separate Cookie Policy or within the consent management tool. Visitors may change or withdraw their choices at any time.

12. Your rights

Subject to the conditions and exemptions in applicable UK data protection law, you may have the right to:

receive confirmation as to whether we process your personal data and obtain access to it;
have inaccurate data corrected and incomplete data completed;
request erasure of personal data where the legal conditions are met;
request restriction of processing;
receive or transfer personal data in a portable format where the right applies;
object to processing based on legitimate interests or to direct marketing;
withdraw consent at any time, without affecting processing carried out before withdrawal;
request safeguards or human review in relation to certain significant decisions made solely by automated processing, where applicable.

Requests may be sent to info@companywall.com with the subject line “Data Protection – Golden Balance Sheet”. We will respond without undue delay and within the period required by law. We may ask for additional information to verify your identity and protect personal data.

13. Right to complain

If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the UK Information Commissioner’s Office (ICO). Current contact and complaint details are available at https://ico.org.uk/. We encourage you to contact us first so that we can attempt to resolve the issue.

14. Data security

We apply appropriate technical, organisational and personnel measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction. Access is limited to authorised persons, and service providers processing data on our behalf are contractually required to maintain confidentiality and appropriate security.

15. Children

The website and Golden Balance Sheet business events are primarily intended for adults and representatives of businesses. We do not knowingly collect children’s personal data through the website. Any participation by a person under 18 will be arranged separately and, where necessary, with the appropriate consent of a parent or legal guardian.

16. Changes to this Notice

We may amend this Notice to reflect changes in law, technology, website functionality or the way the project is organised. The current version will be published on the website with the date of the latest update.

Last updated: 24 July 2026.