GDPR and Data Protection Policy

Policy statement

Pritchard Group Ltd is committed to ensuring that the personal data it handles is processed fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy outlines our approach to data protection and sets out the responsibilities of employees, contractors and partners when handling personal data on behalf of the company.

Scope

This policy applies to:

• All personal data processed by Pritchard Group Ltd, including data related to employees, clients, suppliers and partners.
• All staff, contractors and third parties acting on behalf of the company.

Our commitments

We will:

• Process data lawfully, fairly and in a transparent manner.
• Collect data only for specified, explicit and legitimate purposes.
• Ensure data is accurate and kept up to date.
• Keep data for no longer than necessary.
• Secure data against unauthorised access, loss or damage.
• Respond promptly to requests from individuals wishing to exercise their rights under GDPR.

Responsibilities

• Directors and senior management are responsible for overall compliance with data protection laws.
• Employees and contractors must follow all company procedures when collecting, storing or sharing data, keep data secure and confidential, and report any suspected data breach immediately.

Data security measures

Pritchard Group Ltd implements appropriate technical and organisational measures, including:

• Password-protected systems and devices.
• Secure cloud storage and restricted data access.
• Regular data audits and staff training.

Third parties and data sharing

We only share data with trusted third parties when necessary for business operations and where appropriate data sharing agreements are in place.

Data subject rights

We uphold the rights of individuals under GDPR, including:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

Making a request

Requests to exercise these rights can be made in writing to info@pritchard-group.co.uk.

Breach reporting

Any actual or suspected data breach must be reported to a director immediately. We will assess and respond to all breaches in line with ICO guidance.

Monitoring and review

This policy will be reviewed annually or when changes in legislation occur. Staff will be provided with refresher training where appropriate.