Our Privacy Policy

All personal data collected, stored and processed by the company during the course of work activities shall be handled correctly, fairly and lawfully, respecting the rights of the data subject and in accordance with the Data Protection Act 1998 all other relevant legislation and guidance.

 

Personal data shall be

• Received directly from the data subject’s interactions

• Collected through our company’s website by the use of software tools

• Received from external sources.

 

Only personal data that is adequate, relevant and necessary for specific and legitimate core business purposes shall be collected.

 

Personal data shall be processed for core business purposes only, in an appropriate manner and in line with the data subject’s rights.

 

The data subject shall be informed of:

• The purpose for which personal data shall be processed

• Any third parties with which the personal data shall be shared or disclosed

• How they can limit the use and disclosure of the personal data.

 

All personal data shall be held securely on remote servers and shall be accessible only to authorised company personnel.

 

No company personnel shall store sensitive company data on local drives or personal devices.

 

Only accurate and up to date personal data shall be kept, and reasonable steps shall be taken to ensure that data remains accurate and that inaccurate personal information is deleted or corrected without delay.

 

All data subjects shall have the right to access their own personal data, to have data corrected if it is inaccurate or incomplete, and to prevent processing likely to cause damage or distress.

 

Personal data shall not be held for longer than is necessary for specific and legitimate core business purposes, and shall thereafter be deleted or destroyed.

 

In the event of a data breach, the company shall immediately make a report to the Information Commissioner’s Office as required and notify the affected individuals.