Data Protection Policy - NB-19 LTD

1. Introduction

NB-19 LTD is committed to protecting the privacy and personal data of its customers, employees, and any other individuals with whom it interacts. This Data Protection Policy outlines our approach to collecting, processing, and safeguarding personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the UK.

2. Scope

This policy applies to all personal data processed by NB-19 LTD, regardless of the format or medium in which it is collected or stored. This includes data processed electronically or in hard copy.

3. Principles of Data Protection

NB-19 LTD will adhere to the following data protection principles:

3.1. Lawfulness, Fairness, and Transparency

We will process personal data lawfully, fairly, and in a transparent manner. Individuals will be informed about the purpose and processing of their data, and their consent will be obtained when required.

3.2. Purpose Limitation

We will collect personal data for specified, explicit, and legitimate purposes only. The data will not be further processed in a manner incompatible with these purposes.

3.3. Data Minimization

We will limit the collection of personal data to what is necessary for the specified purposes. We will not retain data for longer than necessary.

3.4. Accuracy

We will ensure that personal data is accurate, up-to-date, and corrected when necessary. Reasonable steps will be taken to rectify or erase inaccurate data.

3.5. Storage Limitation

Personal data will be stored in a form that permits identification of data subjects for no longer than is necessary for the specified purposes.

3.6. Security

Appropriate technical and organizational measures will be implemented to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

3.7. Accountability

NB-19 LTD is responsible for complying with data protection laws. We will demonstrate compliance and keep relevant records of our data processing activities.

4. Data Subject Rights

We respect the rights of individuals regarding their personal data and will facilitate the exercise of these rights, including:

4.1. Right to Access

Individuals have the right to access their personal data held by NB-19 LTD. Requests for access will be responded to within one month.

4.2. Right to Rectification

Individuals can request the correction of inaccurate or incomplete data concerning them.

4.3. Right to Erasure ("Right to be Forgotten")

Individuals have the right to request the erasure of their personal data under certain circumstances.

4.4. Right to Restriction of Processing

Individuals can request the restriction of processing of their personal data in specific situations.

4.5. Right to Data Portability

Where feasible, individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format.

4.6. Right to Object

Individuals can object to the processing of their personal data in certain circumstances, including direct marketing.

5. Lawful Bases for Processing

NB-19 LTD will ensure that personal data is processed lawfully, and we will rely on one or more lawful bases as defined by the GDPR, including:

Consent: Processing with the individual's explicit consent.

Contractual Necessity: Processing necessary for the performance of a contract.

Legal Obligation: Processing necessary to comply with legal obligations.

Legitimate Interests: Processing necessary for legitimate interests pursued by NB-19 LTD or a third party, provided this does not override the individual's rights.

6. Data Breach Notification

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, NB-19 LTD will notify the relevant supervisory authority and affected individuals without undue delay.

7. Data Transfer

Personal data will not be transferred outside the European Economic Area (EEA) without appropriate safeguards in place.

8. Training and Awareness

NB-19 LTD will ensure that employees and any individuals involved in data processing receive appropriate training on data protection laws and the requirements of this policy.

9. Contact Information

If you have any questions or concerns regarding the processing of your personal data by NB-19 LTD, please contact our Data Protection Officer at support@nb-19.co.uk.

10. Review and Updates

This Data Protection Policy will be reviewed regularly to ensure its continued relevance and compliance with applicable data protection laws.

This Data Protection Policy was last updated on 27/07/2023.