This Notice should be read in conjunction with the Overview and the Definitions, including, in particular, the table of categories of information.

Ethics reporting

What processing activities do you undertake that include my information?
We operate an Ethics Reporting line, which allows employees (and their next of kin), contractors, customers, contacts, suppliers and members of the general public to raise any concerns to us which will then be managed in accordance with our applicable policies.
What categories of information are included in these processing activities?
To run the process set out above, depending on your relationship with us and the type of concern raised, we process identity information, staff related data, data related to your engagement with the Company, recruitment data, regulatory data, vetting data, remuneration and benefits data, leave information, HR processes data, monitoring data (to the extent permitted by applicable laws) and employment claims, complaints and disclosures data.
We may also process sensitive information (such as criminal records information) to the extent permitted by applicable laws.
What is the reason for these processing activities? 
We carry out these activities to ensure that our business, clients, staff members and systems are protected. This includes responding appropriately to ethics concerns which are raised to it.
We also undertake these processes to ensure compliance with applicable laws and Company policies and procedures, to monitor use of the Company’s IT system and to manage the activities and behaviour of our employees.
To the extent that you did not get this information from me, how did you collect it?
Some of this information will come from internal sources, such as your BAE Systems contact.
Other information may come from the relevant customer or contact, your employer, other customers, suppliers and other business partners. 
We may also receive information from other sources as set out in this Notice.
Who do you share this information with?
This information may be shared internally for the purposes described above and, where necessary, may also be shared with our parent company BAE Systems Plc.
In addition, some of your information will be shared externally with any suppliers or partners as needed, external agencies (including the Police or law enforcement, as appropriate) and as otherwise set out in this Notice.