This page is a working draft pending final legal review and confirmation of company details. Items marked [PLACEHOLDER] will be completed once confirmed.
Last updated: [DATE]
ComplyWorks (“we”, “us”, “our”) is committed to protecting your personal data in accordance with the UK GDPR and the Data Protection Act 2018.
- Data Controller: [FULL LEGAL ENTITY NAME]
- Company Number: [COMPANIES HOUSE NUMBER]
- ICO Registration Number: [ICO REGISTRATION NUMBER]
- Registered Office: [ADDRESS]
- Data Protection Contact: [DPO EMAIL]
1. What data we collect
- Contact form submissions: name, email, phone, and enquiry details [CONFIRM EXACT FIELDS]
- Cookies and analytics data — see our Cookie Policy
- Any CRM, scheduling, or marketing platform data [CONFIRM WHICH TOOLS ARE IN USE]
2. How we use it
To respond to enquiries about regulatory advisory services, and [MARKETING COMMUNICATIONS — CONFIRM LAWFUL BASIS AND WHETHER THIS APPLIES].
3. Legal basis for processing
[CONSENT / LEGITIMATE INTEREST / CONTRACT — depends on actual data flows; requires solicitor input.]
4. Data sharing with third parties
[LIST EVERY PROCESSOR: hosting provider, email delivery service, any CRM/scheduling tool — to be confirmed.]
5. International transfers
As ComplyWorks advises on both UK and UAE regulatory matters, [CONFIRM WHETHER PERSONAL DATA IS TRANSFERRED OUTSIDE THE UK/EEA AND UNDER WHAT SAFEGUARD].
6. Retention
[CONFIRM RETENTION PERIOD FOR ENQUIRY AND CLIENT DATA.]
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability.
8. Complaints
You have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you believe your data has been mishandled.