Created: April 2024
Reviewed: May 2024
Updated: May 2024
At AJRB Services (Zarro Technology, Zarro Hosting, Zarro Communications, Zarro Telecoms), we understand the importance of protecting personal data and maintaining the privacy of our clients, employees, and other stakeholders. This policy sets out our commitment to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the UK.
-
Scope and Purpose This policy applies to all personal data processed by AJRB Services Limited (and trading names), including data relating to employees, clients, suppliers, and any other individuals with whom we interact. The purpose of this policy is to ensure that we comply with data protection laws and that personal data is processed fairly, lawfully, and transparently.
-
Data Protection Principles We are committed to complying with the following data protection principles:
- Lawfulness, fairness, and transparency: We will process personal data lawfully, fairly, and in a transparent manner.
- Purpose limitation: We will only collect personal data for specified, explicit, and legitimate purposes and will not process it in a manner that is incompatible with those purposes.
- Data minimisation: We will only collect personal data that is necessary for the purposes for which it is being processed.
- Accuracy: We will take reasonable steps to ensure that personal data is accurate and up-to-date.
- Storage limitation: We will only store personal data for as long as necessary to fulfil the purposes for which it was collected.
- Integrity and confidentiality: We will process personal data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage.
- Data Collection and Use We will only collect personal data for specified, explicit, and legitimate purposes and will not process it in a manner that is incompatible with those purposes. We will take appropriate measures to ensure that personal data is accurate and up-to-date, and will not keep it longer than necessary for the purposes for which it was collected.
We will collect personal data only when there is a legitimate business need and will always provide individuals with information about why we are collecting their personal data, what we are going to do with it and who it will be shared with. We will also provide individuals with information about their rights under data protection law.
-
Data Security We take the security of personal data seriously and have implemented appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. We regularly review and update our security measures to ensure they are effective and appropriate.
-
Data Subject Rights Individuals have a number of rights under data protection law, including the right to access their personal data, to have their data corrected, to have their data erased, to object to processing, and to restrict processing. We will respond promptly to any requests from individuals exercising their rights under data protection law.
-
Data Sharing We will only share personal data with third parties where it is necessary for the purposes for which it was collected, where there is a legitimate business need, or where required by law. We will ensure that appropriate safeguards are in place to protect personal data when it is transferred outside of the UK.
-
Data Breach Management We have procedures in place to detect, report and investigate any personal data breaches. We will notify the Information Commissioner's Office (ICO) and affected individuals if a breach is likely to result in a high risk to their rights and freedoms.
-
Policy Review This policy will be reviewed annually, or as necessary to ensure it remains relevant and up-to-date.
Please contact support@ajrb.co.uk if you have any queries about our Data Protection policies, or wish to report a data breach.
ICO Registration Number: ZB686192
