Email: info@gdprsolutions.co.uk Telephone: (0)203 576 4313

GDPR Solutions
GDPR Solutions
  • Home
  • What is the GDPR?
  • Privacy FAQs
  • Training
  • Our Services
  • Pricing
  • Contact Us

Privacy Policy

At GDPR Solutions (referred to as “We, “Our” or “Us”), we are committed to protecting the privacy and security of your personal information. This Privacy Notice explains how we collect, use and share personal information in the course of our business activities.

We will only process your personal data where we have a legal basis to do so.  The type of personal information that we will collect about you, from third party websites or that you have voluntarily provided to us on this website or from enquiry/contact forms, event/exhibition or other contact methods includes:


  • Your name;
  • Telephone number(s);
  • Email address;
  • Business address;
  • Your company;
  • Job title;
  • Survey responses;
  • Cookies; and/or
  • IP address.
  • Usage Data includes information about how you use our website or other applications, products or services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.


We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we have entered into.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.
  • Where you have provided your consent. Note that you have the right to withdraw your consent at any time.process depends on the extent of the damage. We will provide an assessment of your situation and recommend the best course of action.


  • To contact you, following your enquiry or to reply to any questions.
  • To manage our relationship with you or your business and deliver our products and services.
  • Fulfilling our contract to provide you with the agreed service.
  • To communicate with you about our products and services.
  • Processing your orders.
  • Taking payment from you or giving you a refund and associated financial accounting.
  • To power our security measures and services so you can safely access our website.
  • To allow us to provide you with access to our website, web portals and systems.
  • To allow you to directly or indirectly communicate with us through our website, web portals, applications and systems.
  • Helping us understand more about you as a customer, the products and services you consume, so we can serve you better.


In order to achieve the above stated purposes for which we process your personal data, we

may need to share your personal data with various third-party service providers who act as

data processors.


We may share your personal data with third party organisations acting as data controllers or with specific individuals, groups or other organisations who act as neither data controllers nor data processors, but only where we are either legally require to do so by law or where doing so is necessary to achieve the intended stated purpose of processing the data



We may use your personal information to let you know about products and services we believe may be relevant for you.  We may contact you by email, post or telephone or through other appropriate communication channels.  We strive to ensure that direct marketing is reasonable and proportionate and that we believe is of relevance or interest to you.


You can ask us to stop sending you direct marketing messages at any time by contacting us.


We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.


We will not transfer your personal data to any country outside the United Kingdom (UK) or European Economic Area (EEA) other than those that have been granted an adequacy decision under applicable Data Protection Law(s).  


Whenever we transfer your personal data out of the UK or EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented (unless a derogation applies):


We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK or European Commission.


Where we use certain service providers, we may use specific contracts which give personal data the same protection it has in the UK or Europe.


We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.


To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.


You have the right to:

  • Access information we hold about you and to obtain information about how we process it (often referred to as a “Data Subject Access Request”);
  • In certain circumstances, the right to withdraw your consent to our processing of your information. We may continue to process your information if we have another legitimate reason for doing so;
  • In some circumstances, the right to receive certain information you have provided to us in an electronic format and/or request that we transmit it to a third party;
  • The right to request that we rectify your information if it’s inaccurate or incomplete;
  • In some circumstances, the right to request that we erase your information. We may continue to retain your information if we’re entitled or required to retain it;
  • The right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we’re entitled to continue processing your information and/or to refuse that request; and
  • You have the right to lodge a complaint with your local data protection supervisory authority if you have concerns about how we are processing your personal information. We would ask that you attempt to resolve any concerns with us before lodging a complaint with your local supervisory authority.


If you have any questions, concerns or complaints or if you wish to exercise any of your rights, please contact:


  • Email: info@gdprsolutions.co.uk
  • Telephone: (0)203 576 4313


  • Privacy Policy
  • Training
  • Pricing
  • Contact Us
  • Outsourced DPO
  • Audit and gap analysis
  • Data Subject Rights
  • RoPA and Data Mapping
  • Contract & Policy Review
  • Data Breach
  • DPIA and LIA

GDPR Solutions

Copyright © 2023 GDPR Solutions - All Rights Reserved.

This website uses cookies.

We use cookies to analyse website traffic and optimise your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.

DeclineAccept