This statement summarises our approach to UK data-protection compliance. More detailed information about the personal information we process is available in our Privacy Policy.
1. Legal Framework
Guardian Forge handles personal information in accordance with applicable UK data-protection law, including the UK GDPR and Data Protection Act 2018 as amended. Our ICO registration number is ZC230688.
2. Data-Protection Principles
We aim to handle personal information lawfully, fairly and transparently; collect it for specified purposes; limit it to what is reasonably necessary; take steps to keep it accurate; retain it only as long as needed; and protect it with proportionate security measures.
3. Lawful Basis
We identify an appropriate lawful basis for each processing activity. Depending on the circumstances this may include contract, legal obligation, legitimate interests or consent. Where we rely on legitimate interests, we consider the purpose, necessity and impact on individual rights.
4. Individual Rights
Depending on the circumstances, individuals may have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent where consent is the lawful basis. These rights are subject to the conditions and exemptions in data-protection law.
5. Security and Access
We use proportionate controls intended to protect personal information and restrict access to people and service providers who need it for legitimate business purposes.
6. Personal Data Breaches
We maintain procedures for assessing suspected personal-data breaches and will make notifications to the ICO and affected individuals where the law requires us to do so.
7. Suppliers and International Processing
Where suppliers process personal information for us, we consider appropriate contractual and security arrangements. If a restricted international transfer takes place, we take reasonable steps to ensure an appropriate UK transfer mechanism is used where required.
8. Contact and Complaints
Data-protection enquiries can be sent to info@guardianforge.co.uk. Individuals also have the right to complain to the Information Commissioner's Office.