Data Protection Act 1998 (c 29) and 2018
DECLARATION OF INTENT – WAFER ENTERPRISES LTD
OUR STATEMENT OF GENERAL POLICY IS
- To uphold and respect the law under the Data Protection Act
- To clearly state the Lawful Basis under which we process our Data.
- To clearly appoint a Controller and explain their responsibility
- To ensure that the data maintained is adequate, relevant and not excessive
- To ensure that the Data is accurate and kept up to date
- To ensure that the Data is fairly and lawfully processed for limited purposes
- To store Data to the minimum time under the law and not any longer than necessary
- To provide information, instruction and supervision for Designated Processors
- To ensure that all Data is stored in a compliant , formatted and secure data base environment
- To review and revise, if necessary, this policy based on monitoring systems set in place along with regular in house audits
- To ensure that the policy is explained, understood and consent sought, where applicable, by all staff, customers and suppliers
PRIVACY NOTICE
- Wafer Ltd is committed to complying with General Data Protection Regulations – Act 1998-c.29-2018.
- The data we collect is based on Consent and Legitimate Interests
- This information is on our data base , currently using Sage 50 Accounts
- It is accessed by designated in house staff, carriage partners, IT support, Payment processors, financial consultants and the company chartered accountants, credit controllers, electronic data information circuits and HMRC.
- There is a central Controller and designated Processors to manage data.
- It is password protected at all times within the organisation and maintained on our own server.
- The information is kept for as long as the law requires it to be held or if you opt out and request erasure of information
- You have the right to access, modify, erase, restrict or object to both its usage and portability at any time.
- Wafer Ltd operates CCTV for your safety and security within the lawful restrictions applicable to such use.
If you wish to delete personal data stored in our database please submit your request here: [gdpr_request_form type=”delete”]