The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union. It also addresses the export of personal data outside the EU. The GDPR aims primarily to give control to citizens and residents over their personal data.

We are committed to making sure we protect your privacy. 

This means we will:

• collect relevant information about you fairly
• only collect information about you that we need
• tell you why we’re collecting it and how we’ll be using it
• use it only for our business operations and to comply with the law
• make sure that the information we collect and hold about you is accurate
• hold it only for so long as is necessary
• keep it secure
• share it only with companies and organisations who’ll keep it secure
• not send it abroad without ensuring its security
• make sure that you can exercise your rights under the Data Protection Act.

Our DPO may be contacted via: dpo@shardbusinessservices.co.uk 

For more information about GDPR, please see the attached documents below.