Data Protection Act 2018
1.1
Zumada Limited (the company) is registered with the Information Commissioner's Office under the Data Protection Act 2018 (Registration Reference ZA270392).
1.2
The company is committed to full compliance with the requirements of the Data Protection Act 2018 (the Act).
1.3
We will follow established procedures to ensure that all employees, contractors, consultants, partners or other agents of the company (collectively known as data users) who have access to any personal data held by the company are fully aware of and abide by their duties under the Act.
Statement of Policy
2.1
The company needs to collect and use information about people and businesses with whom it works in order to operate. These may include members of the public, current, past and prospective employees, clients, consultants, partners and contractors. In addition the company may be required by law to collect information in order to comply with corporate record keeping laws of the United Kingdom. This personal information must be handled and dealt with properly however it is collected, recorded and used and whether it is on paper, in computer records or recorded by other means.
2.2
The company regards the lawful and appropriate treatment of personal information as essential to maintaining the confidence of those who it conducts business with. The company therefore fully endorses and adheres to the principles of data protection and the Act.
Handling and Transfer of Personal Data
3.1
The company will, through management and use of appropriate controls, monitoring and review:
- Use personal data in the most efficient and effective way to deliver better services;
- Strive to collect and process only the data or information which is needed;
- Use personal data for such purposes as are legally permitted;
- Not keep information for longer than is necessary;
- Securely destroy data which is no longer needed;
- Take appropriate technical and organisational security measures to safeguard information.
3.2
It may sometimes be necessary to transfer personal information overseas. When this is needed information is only shared within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the Act.
