GDPR Policy
GENERAL DATA PROTECTION REGULATIONS
Data Protection and Information Access Policy at LFDC
LFDC strictly adheres to all statutory requirements of Data Protection laws, including compliance with the General Data Protection Regulations (GDPR). This encompasses all personal or sensitive information held by the consultancy, including emails.
User Responsibilities
Users of such information must ensure they do not breach any data protection rules during the storage, usage, and communication of information. This includes, but is not limited to:
-
Using outdated data.
-
Processing personal information without proper consent.
-
Retaining personal information longer than necessary.
-
Transmitting personal information outside the country.
Breach Reporting and Action
Any discovery of data protection rule breaches, such as leaking or hacking of personal/sensitive data, must be immediately reported to Paul Shadbolt. Swift action will be taken to address and rectify such breaches. Proper investigation and necessary reporting actions will be carried out.
Employee Access Requests
Employees have the right to request access to the information held on them by the consultancy. All such requests should be made in writing, and there is no charge for this service.
Changes in Personal Information for Employment Purposes
To ensure accurate records and prevent complications, employees must promptly notify the consultancy of changes in the following personal information:
-
Name
-
Home address
-
Telephone number
-
Bank account details
-
Examinations passed/qualifications gained
-
Emergency contact
-
Driving license penalties (if required for Company business)
-
Criminal charges, cautions, or convictions
-
Conflict or potential conflict of interest
Data Holding and Protection
Personal data on employees is held in accordance with the provisions of the Company's Data Protection Policy, available for inspection upon request.
This policy underscores our commitment to safeguarding personal information, promoting transparency, and ensuring compliance with data protection laws.