Data Protection and Privacy Policy
As an organisation we are committed to a policy of protecting the rights and privacy of individuals. We need to collect and use certain types of Data in order to carry on our day to day business and managing operations. This personal information must be collected and handled securely.
The Data Protection Act 2018 (DPA) and General Data Protection Regulations (GDPR) govern the use of information about people (personal data). Personal data can be held on computers, laptops and mobile devices or in a manual file and includes email, minutes of meetings, and photographs.
A nominated company director will remain the data controller for the information held. Management, employees and contractors are personally responsible for processing and using personal information in accordance with the Data Protection Act and GDPR. Directors, employees and contractors who have access to personal information will therefore be expected to read and comply with this policy.
Confidentiality
Cloud Nine is committed to providing a confidential service and support. Any information collected will only be used for the purposes for which it was gathered and will not be disclosed to anyone outside of the organisation without prior permission.
All personal data will be dealt with sensitively in the strictest confidence.
Purpose
The purpose of this policy is to set out the Company commitment and procedures for protecting personal data. Directors regard the lawful and correct treatment of personal information as very important to successful working and to maintaining the confidence of those with whom we deal with. We recognise the risks to individuals of identity theft and financial loss if personal data is lost or stolen.
Definitions of the terms used:
Data Controller – a nominated Director who will decide what personal information Cloud Nine will hold and how it will be held or used.
Act means the Data Protection Act 2018 and General Data Protection Regulations - the legislation that requires responsible behaviour by those using personal information.