GDPR Data Sharing Policy
1. Introduction and Purpose
This policy outlines how we handle personal data and share it with Growth Cog Ltd and their clients. Our commitment is to protect user privacy and comply with the General Data Protection Regulation (GDPR).
2. Lawful Basis for Data Sharing
Our lawful basis for sharing data is a contractual necessity. By using our services, users agree to share their data with Growth Cog Ltd and its clients.
3. Data Shared
We share the following types of data:
- Personal information (e.g., name, email address, phone number, any comments/messages)
4. Parties Involved
- Data Controller: this website
- Data Processor: Growth Cog Ltd
- Sub-Processors: Growth Cog Ltd’s clients
5. Data Processing Activities
We process data for the following purposes:
- Collection during user interactions
- Secure storage
- Transfer to Growth Cog Ltd and clients
- Deletion upon request
6. Security Measures
We implement robust security measures, including:
- Encryption of data in transit and at rest
- Access controls limiting data access to authorised personnel
- Regular security audits
7. Retention Period
Data is retained for as long as necessary to fulfil contractual obligations and legal requirements.
8. Individual Rights
Users have the right to:
- Access their data
- Request rectification
- Request erasure
- Object to processing
9. Consent and Opt-In
Users provide consent during account creation, form submission and/or interactions.
10. Third-Party Agreements
Growth Cog Ltd’s clients adhere to GDPR requirements. Their responsibilities are outlined in separate agreements directly with them.
11. Review and Updates
This policy will be reviewed annually.