This document is a starting template prepared for review. Have it checked by qualified legal counsel before relying on it.
1. Our Commitment
We are committed to processing personal data lawfully, fairly, and transparently, and to upholding the rights of the individuals whose data we hold.
2. Data Protection Principles
We process personal data in accordance with the following principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.
3. Roles
Where we determine the purposes and means of processing, we act as a data controller. Where we process personal data on behalf of a client, we act as a data processor and do so only on documented instructions.
4. Data Subject Rights
Individuals have the right to be informed about processing, to access their data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to data portability. Requests are handled within the timescales required by applicable law.
5. International Transfers
Where personal data is transferred outside its country of origin, we ensure an appropriate safeguard is in place, such as contractual protections that require an equivalent standard of protection.
6. Breach Notification
We maintain procedures to detect, report, and investigate personal data breaches, and will notify the relevant supervisory authority and affected individuals where required by law.
7. Contact
To exercise your rights or raise a data protection concern, please contact us through our contact page.
Questions about this document? Contact us.