Privacy Statement
1. Introduction
This policy outlines the approach of Devon Home Staging ("the Company") to comply with the General Data Protection Regulation (GDPR) as applicable in the UK.
2. Data Protection Officer (DPO)
The Company has appointed a Data Protection Officer who is responsible for overseeing data protection activities and ensuring compliance with GDPR. The DPO can be contacted via email (enquiries@devonhomestaging.co.uk) or telephone (07577009397).
3. Data Collected
The Company may collect and process the following types of personal data:
Client name, address, phone number, email address.
The purpose of the data processing is to enable communication with the client to facilitate the home staging service.
4. Lawful Basis for Processing
The Company will only process personal data when there is a lawful basis for doing so, which may include:
Consent of the data subject
Contractual necessity
Legal obligations
Vital interests
Legitimate interests pursued by the Company
5. Data Subject Rights
Data subjects have the following rights under GDPR:
Right to be informed
Right of access
Right to rectification
Right to erasure (the right to be forgotten)
Right to restrict processing
Right to data portability
Right to object (The right to object allows individuals to object to the processing of their personal data for specific purposes. This means they can request that their data no longer be processed for those purposes).
Rights related to automated decision making and profiling
6. Data Security
The Company is committed to ensuring the security of personal data. This includes implementing appropriate technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.
7. Data Breach Notification
In the event of a data breach, the Company will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.
8. Data Retention
Personal data will be retained only for as long as necessary for the purposes it was collected. The Company has established specific retention periods for different types of data.
9. International Data Transfers
Any transfer of personal data outside the European Economic Area (EEA) will only be done in compliance with GDPR requirements.
10. Third-Party Processors
When using third-party processors to process personal data, the Company will ensure they provide sufficient guarantees regarding the security and protection of the data.
11. Automated Decision-Making and AI
The Company does not employ AI or automated decision-making systems to process personal data.
12. Training and Awareness
The Company will provide training to staff and contractors regarding GDPR compliance and data protection best practices.
13. Review and Update
This policy will be reviewed and, if necessary, updated annually or in response to changes in applicable data protection laws.
14. Contact Information
For any questions or concerns regarding this policy or the Company's data protection practices, please contact:
Devon Home Staging
07577009397
enquiries@devonhomestaging.co.uk