Connectors Services Ltd Data Protection Policy
​
1.Introduction
​
This Data Protection Policy outlines the principles and practices that Connectors Services Ltd adheres to in ensuring the protection and privacy of personal data in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws in the United Kingdom. At Connectors Services Ltd we understand how important trust is between clients and suppliers (of services or goods), we have created this policy for the purpose of keeping your information, and your clients information, secure.
2. Data collection and Processing
​
2.1 Purpose Limitation: Personal data will be collected and processed only for specified and lawful purposes, with a view to providing Virtual Assistant services. Any additional processing beyond the original purpose will require consent or be covered by a legitimate legal basis.
​
2.2 Data Minimisation: We will only collect and process personal data that is necessary for the intended purpose, ensuring that the information is relevant, adequate, and not excessive.
​
2.3 Lawful Basis: Personal data will be processed based on one of the lawful bases outlined in the GDPR, such as consent, contractual necessity, legal obligation, vital interests, public task, or legitimate interests.
​
3. Data Security
​
3.1 Confidentiality: We will maintain the confidentiality and integrity of personal data by implementing appropriate technical and organizational measures to protect against unauthorized access, disclosure, alteration, or destruction.
3.2 Access Control: Access to personal data will be restricted to authorized personnel who require the information for legitimate purposes. Access privileges will be regularly reviewed and updated.
4. Data Subject Rights
4.1 Transparency: Data subjects will be informed about the processing of their personal data, including the purposes, lawful basis, and their rights. This information will be provided in a concise, transparent, and easily accessible manner.
4.2 Access and rectification: Data subjects have the right to access their personal data and request corrections if inaccuracies are identified. Requests will be processed within the legal time frame.
​
5. Data Retention and Disposal
​
5.1 Retention Period: Personal data will be retained only for the duration necessary to fulfil the purpose for which it was collected or as required by law. Regular reviews will be conducted to identify and securely dispose of unnecessary data. In the event of Connectors Services Ltd taking payments, on their clients behalf, Connectors Services will not keep any card details taken for payment purposes.
​
6. Data Breach Response
​
6.1 Notification: In the event of a data breach, we will promptly assess the risk to individuals and, if required, report the breach to the Information Commissioner's Office (ICO) and affected individuals within the legally specified timeframe.
7. Data Protection Officer (DPO)
​
7.1 Appointment: Data Protection Officer will be appointed to oversee and ensure compliance with data protection laws. The DPO will be a point of contact for data subjects and the ICO.
​
8. Training and Awareness
​
8.1 Staff Training: All staff involved in processing personal data will receive regular training on data protection principles, policies, and procedures to ensure awareness and compliance.
​
9. Policy Review
​
9.1 Regular review: This policy will be reviewed regularly to ensure its effectiveness and relevance. Any necessary updates will be made to align with changes in legislation or business practices.
​
10. Contact Information
​
For any inquiries or concerns regarding this Data Protection Policy, please contact Connectors Services Ltd.
​
Reviewed 4th January 2024