I use suitable physical and electronic procedures to safeguard and secure your information from unauthorised access or disclosure. Any personal information held about you is stored and processed under the GDPR and in line with the Data Protection Act 2018.
Your information is stored on a password-protected laptop and in the cloud using Microsoft365 services. You can access the Microsoft365 privacy policy at
https://www.microsoft.com/en-us/privacy/privacystatement
My computer systems are protected with malware protection, anti-phishing, automated threat detection and ransomware protection.
Hard copy records containing personal information are retained securely, in accordance with this policy. As my clients may work with me more than once, I keep personal contact information and a summary of previous project information on file unless I am requested to delete it.
Your material(s) will be returned to you once I have completed the work. It is your responsibility to retain these for your purposes. I will keep completed project materials for up to six years from the submission of completed materials to you, unless otherwise agreed. At the end of this period, I will delete your project data from my computer systems.
I will keep any billing and invoicing information, and related contact information, for a period of at least 6 years in accordance with HMRC’s record-keeping guidelines for my business. If you want me to delete your information or advise me of any changes to your personal details, please contact me. Provided that this does not conflict with my legal obligations to HRMC, I will remove or update your information immediately.
