Data protection policy

Data Protection Policy

Barr Promotions & Marketing Ltd

You can paste the below into a document and upload it.

1. Policy Statement

Barr Promotions & Marketing Ltd is committed to protecting the privacy and personal data of individuals and ensuring that all personal data is processed lawfully, fairly, and transparently in accordance with UK Data Protection Legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all employees, independent contractors, and any individuals engaged in work on behalf of the company.

2. Scope

This policy applies to the processing of personal data relating to:

• Members of the public
• Clients and business contacts
• Employees and independent contractors

3. Data Protection Principles

The company processes personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality

4. Types of Personal Data

Personal data processed may include:

• Names and contact details
• Customer sign-up or application information
• Interaction and consent records

The company does not intentionally collect or process special category personal data.

5. Lawful Basis for Processing

Personal data is processed where necessary for:

• Performance of contractual obligations
• Compliance with legal obligations
• Legitimate business interests

6. Data Security

The company implements appropriate technical and organisational measures to protect personal data, including:

• Access controls
• Secure handling procedures
• Confidentiality obligations for all personnel
• Data protection training

7. Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose or to meet legal and contractual requirements.

8. Data Subject Rights

Individuals have the right to:

• Access their personal data
• Request correction or erasure
• Object to or restrict processing
• Raise concerns with the Information Commissioner’s Office

9. Data Breaches

Any actual or suspected personal data breach must be reported immediately. The company will investigate and, where required, notify the relevant parties in line with legal requirements.

10. Review

This policy is reviewed regularly and updated as required.