VICKI LAMB

Below is a summary of the updated General Data Protection Regulation (GDPR) and an explanation of how I use your data. I am also registered with the ICO because my role requires me to act as a data processor.

​

Definitions:

Customer: The person or organisation who is responsible for paying for my services

Consumer: The person or people who are the recipients of my services

​

As a Ltd company, registered with the ICO, I am bound by law to ensure that any personal data I collect is:

​

• processed lawfully, fairly and transparently
   

• collected for specified, explicit and legitimate purposes such as the performance of our contract
   

• adequate, relevant and limited to what is necessary
   

• accurate and kept up to date where necessary
   

• kept for no longer than is necessary where data subjects are identifiable
   

• processed securely and protected against accidental loss, destruction or damage
   

Data subjects are inclusive of both the people who book and pay for my services, as well as those who are the consumers of my services. They will have the:
 

• right to be informed about the processing of their personal data as necessary
   

• right to rectification if their personal data is inaccurate or incomplete (requests to amend data will normally have to be processed within one month)
   

• right of access to their personal data and supplementary information, and the right to confirmation that their personal data is being processed
   

• right to be forgotten by having their personal data deleted or removed on request where there is no compelling reason for my company to continue to process it. I will endeavour to respond without undue delay and within one month of the request, unless it is complex and requires more time
   

• right to restrict processing of their personal data, for example, if they consider that processing is unlawful, or the data is inaccurate
   

• right to data portability of their personal data for their own purposes (they will be allowed to obtain and re-use their data)
   

• right to object to the processing of their personal data for direct marketing, scientific or historical research, or statistical purposes
   

As a Ltd company, I will:
 

• only collect personal data that is adequate, relevant and necessary
   

• be open with customers and consumers about processing their data and allow them to monitor that processing as necessary
   

• improve data security features
   

• identify and take active steps to limit any detrimental effects of data processing on individual privacy
   

Essential data held includes, but may not be limited to:
 

• Name and address of customer and consumers
   

• Email addresses and phone numbers of essential contacts related to the carrying out of an assignment
   

• Email addresses and phone numbers of essential contacts related to submitting invoices and receiving payments
   

• History of our working relationship for book keeping purposes only. I am required by law to make these available to the HMRC for up to seven years
   

Personal data will not be retained longer than necessary, unless there is a legal reason for extended retention. I will periodically review all of the data that I hold and erase it from my systems when retaining it is no longer necessary. 
 

If you believe that I hold data about you and would like to discuss how it is processed in more detail, please click the button below to contact me.