1. Data Protection Principles

​Simon JP Taylor Enterprises Ltd is dedicated to handling personal data in accordance with the General Data Protection Regulation (GDPR).​ As outlined in Article 5 of the GDPR, personal data must be:

• Processed lawfully, fairly, and transparently in relation to the individual.

• Collected for specific, explicit, and legitimate purposes, and not further processed in ways that are incompatible with those purposes. Further processing for public interest, research, or statistical purposes is not considered incompatible with the original purposes.

• Adequate, relevant, and limited to what is necessary in relation to its intended purposes.

• Accurate and kept up to date, with reasonable steps taken to ensure inaccuracies are corrected or erased promptly.

• Retained in a form that permits identification of individuals only as long as necessary for processing purposes. Data may be stored longer if used solely for archiving in the public interest, research, or statistical purposes, provided that appropriate safeguards are in place.

• Processed with appropriate security measures to prevent unauthorized or unlawful processing, as well as accidental loss, destruction, or damage.

​

2. General Provisions

• ​This policy applies to all personal data handled by Simon JP Taylor Enterprises Ltd.

• The Administration team is responsible for ensuring the company remains compliant with this policy.

• The policy will be reviewed at least annually, or as required due to legislative changes, by a Data Protection Officer.

​

3. Lawful, Fair, and Transparent Processing

Simon JP Taylor Enterprises Ltd ensures its data processing is lawful, fair, and transparent by maintaining an organized filing system, ensuring easy access to personal data upon request. Individuals have the right to access their personal data, and all such requests will be addressed in a timely manner.

​

4. Lawful Purposes

Data processed by Simon JP Taylor Enterprises Ltd must be done on one of the following legal grounds: consent, contract, legal obligation, vital interest, public task, or legitimate interests. If consent is the basis for processing, proof of opt-in consent will be retained with the personal data (e.g., the signing of the Contract).
When consent is given, individuals must have a clear option to withdraw it, and systems will be in place to ensure such revocation is reflected in Simon JP Taylor Enterprises Ltd’s records.

​

5. Data Minimization

Simon JP Taylor Enterprises Ltd ensures that personal data collected is adequate, relevant, and limited to what is necessary for the intended processing purposes.

​

6. Accuracy

Simon JP Taylor Enterprises Ltd takes reasonable steps to maintain accurate personal data. Where relevant to the lawful processing basis, measures will be taken to keep data up to date. For employees, a "Change of Information" form is provided to maintain accuracy and comply with GDPR.

​

7. Archiving/Removal

Simon JP Taylor Enterprises Ltd has an archiving policy to ensure personal data is not retained longer than necessary. This policy is reviewed annually and includes details on what data must be retained, for how long, and for what reasons.

​

8. Security

The company stores personal data securely, using updated antivirus software and password-protected documents when necessary.
Access to personal data is restricted to personnel who need it, and security measures are in place to prevent unauthorized sharing.
When data is deleted, it will be done in a way that ensures it cannot be recovered. Backup and disaster recovery plans are also in place.

 

9. Breach

In the event of a security breach that results in the destruction, loss, alteration, unauthorized disclosure, or access to personal data, Simon JP Taylor Enterprises Ltd will assess the risk to individuals' rights and freedoms. The company will follow its Data Breach Response and Notification Procedure, record the incident in the Data Breach Register, and notify affected individuals accordingly.