General Data Protection Regulation: Register Of Systems
Introduction
In accordance with the General Data Protection Regulation which came into force on 25 May 2018, this document sets out the approach of Angela Jayne to the collection, use and management of any personal data under the following headings:
The data we collect and in what way
Customers are asked for personal data:
The data is entered on to an Excel spreadsheet by Angela Jayne.
Names and email addresses are also entered on a contact database in order to facilitate the dispatch/receipt of goods.
How the data is stored and who has access to it
Only employees of Angela Jayne have access to the personal data of its customers and this is stored electronically on password protected systems.
Sharing the data
The complete data set is shared solely between the employees as described above.
The complete data set will not be shared with any third party unless legally obliged to do so.
Purpose for which the data is used
The data is processed on the basis of legitimate interest.
The data is used primarily as a vehicle for ensuring orders are dispatched correctly.
Data removal and archiving
The data on each customer is kept for a period of one year from their last order and is then removed from the database. Should any customer wish to have their data removed they should send an e-mail to have their data removed to: angela@angela-jayne.co.uk
To meet our legal obligations to advise you about your rights regarding the processing and control of your personal data; please read the information in the following link: http://www.knowyourprivacyrights.org
Angela Jayne is registered with the ICO.
ADOPTED FEBRUARY 2019
