Data Protection Policy

Our commitments

• We process personal data only where it is necessary and lawful.
• We collect the minimum information required for the purpose.
• We are transparent about how and why we use personal data.
• We keep information accurate, secure and up to date.
• We retain personal data only for as long as it is needed.

Your rights

Under data protection law you have the right to:

• Access the personal information we hold about you (within one month of a valid request).
• Have inaccurate data rectified.
• Request erasure of your data (the right to be forgotten).
• Object to or restrict processing, including direct marketing.
• Prevent processing likely to cause damage or distress.
• Request data portability where applicable.

Data Protection responsibilities

A member of senior management is responsible for overseeing data protection compliance, handling Subject Access Requests, approving any retention beyond standard periods, carrying out risk assessments, and escalating significant concerns to the Information Commissioner's Office where appropriate.

Security and retention

• Personal data is held in secure storage — physical records are kept locked and digital records are password-protected.
• Access is restricted to authorised personnel only.
• Data is securely disposed of by shredding or secure deletion when no longer required, with regular reviews to ensure timely deletion.

How to contact us or complain

To exercise your rights or raise a data protection concern, contact us at [email protected] or +44 020 3584 4004. If you are not satisfied with our response you can complain to the ICO on 0303 123 1113 or at www.ico.org.uk.