The desk receives information from clients in two ways: through the confidential intake questionnaire, and through direct correspondence during an engagement. The information given is held only for as long as it is needed for the work commissioned, and only by people whose role requires it.
In ordinary practice, the desk collects only what is necessary to take instruction, verify capacity to instruct, and deliver the work. This includes contact details, a description of the matter, jurisdictional information, and any documents the client elects to provide. We do not require identification documents or financial information to begin an audit.
Working material is held on systems under the desk's exclusive control. Information is encrypted at rest and in transit. Access is limited to the team members directly involved in the matter. Material is segmented per engagement; there is no aggregated client database, and we do not maintain a CRM in the conventional sense.
Working material is retained for the duration of an engagement plus a period sufficient to satisfy any continuing obligation to the client. After that period, working material is securely destroyed. The final report delivered to the client is the client's record of the work; we do not retain its own copy beyond the period stated in the engagement letter.
We do not disclose client identities, work undertaken for clients, or material derived from a client engagement to any third party, save where compelled by law or as expressly authorised by the client in writing.
We do not transfer client information to third parties for commercial purposes. Where a matter requires the assistance of an external professional (for example, a lawyer for a corrective action), we do so only with the client's express authorisation and only the information necessary for that particular task.
Clients have rights of access, rectification, restriction, and erasure in respect of the personal data the desk holds about them, subject to the on which the desk holds the data. These rights are addressed by direct request to Kerem.
Material we examine in the course of an audit (records, filings, archived material) is drawn from sources lawfully accessible to the desk. The audit report consolidates such material in the form of an analysis, which the client owns. We do not retain the underlying material beyond what is required to support the report's findings.
In the unlikely event of an incident affecting client material, the desk will notify the affected client without undue delay and take the steps that the circumstances require, including any notifications required by applicable law.
This site uses only the cookies needed to make it work. See our cookies note.