In compliance with the Data Protection Act 2018 and the GDPR, we ensure that personal data is processed with the utmost care and respect for individuals' privacy. We uphold the eight principles of good practice by:
- Lawfulness, Fairness, and Transparency: We only process data where we have a legal basis, such as consent or legitimate interest, and we provide transparent privacy notices explaining our practices.
- Purpose Limitation: Personal data is collected solely for specific, legitimate business purposes and is not used for any other reason.
- Data Minimisation: We collect only the data necessary for the intended purpose and ensure that it is adequate and relevant.
- Accuracy: We regularly update our records to ensure that the data we hold is accurate and current.
- Storage Limitation: Data is stored only for as long as necessary, with clear retention policies in place, after which it is securely deleted.
- Security: We implement appropriate technical and organisational measures to protect data, including encryption and secure access protocols.
- Rights: Customers have rights to ask us to remove their data if it is causing distress or used for direct marketing or is inaccurate and for them to see the data we hold on them. Upon receipt of a request we would then respond within 14 working days.
- Accountability: We maintain detailed records of data processing activities, regularly train staff on GDPR compliance, and conduct internal audits to ensure we remain compliant.
Overall, we are committed to upholding the highest standards of data protection and ensure that personal data is handled securely and responsibly at all times.