GDPR Data Protection Policy for Mega Choice Support
Introduction
Mega Choice Support is fully committed to complying with the General Data Protection Regulation (GDPR) effective from 25 May 2018. This policy outlines our commitment to protecting the privacy and personal data of our employees, clients, and any other individuals we interact with.
Scope
This policy applies to all personal data processed by Mega Choice Support, including data related to employees, customers, and third parties, regardless of the data’s format.
Principles
Mega Choice Support adheres to the following GDPR principles:
- Lawfulness, Fairness, and Transparency: Personal data shall be processed lawfully, fairly, and in a transparent manner.
- Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- Data Minimisation: Only data that is necessary for the purposes for which it is processed is collected and maintained.
- Accuracy: Personal data shall be accurate and, where necessary, kept up to date.
- Storage Limitation: Personal data shall be kept in a form that permits identification of data subjects for no longer than is necessary.
- Integrity and Confidentiality: Processing shall be carried out in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Data Subject Rights
Under the GDPR, data subjects have the following rights:
- The right to be informed about the collection and use of their personal data.
- The right of access to their personal data and supplementary information.
- The right to rectification of inaccurate personal data.
- The right to erasure (to be forgotten) in certain circumstances.
- The right to restrict processing in certain circumstances.
- The right to data portability, allowing data subjects to obtain and reuse their personal data.
- The right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling).
- Rights in relation to automated decision-making and profiling.
Data Protection Officer (DPO)
Mega Choice Support has designated a Data Protection Officer who can be contacted at admin@megachoicesupport.co.uk for any questions or concerns regarding data protection.
Data Breach Notification
In the event of a data breach, Mega Choice Support will adhere to the GDPR requirement to notify the relevant supervisory authority without undue delay and, when feasible, within 72 hours.
Training and Awareness
All employees of Mega Choice Support will receive training on GDPR compliance and this policy to ensure it is implemented effectively.
Review and Updates
This policy will be reviewed regularly and updated as necessary to ensure ongoing GDPR compliance.
Contact Information
For any enquiries regarding this policy or data protection practices, please contact:
- Email: admin@megachoicesupport.co.uk
- Phone: 07503 888605 or 01604 386661
- Address: 400 The Pavilion Drive, Northampton, NN4 7PA
Conclusion
Mega Choice Support is committed to upholding the principles of the GDPR and ensuring the protection and confidentiality of all personal data processed by our organisation.