Kaizen Web

GDPR & Data Protection

Last updated: January 2024

Our Commitment to Data Protection

Kaizen Web is committed to protecting your personal data and your right to privacy. We comply with the UK GDPR and the Data Protection Act 2018.

1. Legal Basis for Processing

  • Consent: clear consent for specific processing.
  • Contract: necessary processing to perform a contract.
  • Legal obligation: required by law.
  • Legitimate interests: business interests that do not override your rights.

2. Your Data Rights

  • Right of access.
  • Right to rectification.
  • Right to erasure.
  • Right to restrict processing.
  • Right to data portability.
  • Right to object.
  • Rights related to automated decision-making.

3. Data Retention

We retain data only as long as necessary for service delivery and legal obligations.

  • Contact information: business relationship duration plus up to 3 years.
  • Website analytics: up to 26 months.
  • Email communications: until unsubscribe or deletion request.

4. Data Sharing & Third Parties

We do not sell or rent personal data. We may share data with service providers under agreements and legal authorities where required.

5. International Transfers

If data is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses.

6. Data Security

We use industry-standard security controls including encryption, secure infrastructure, and access controls.

7. Cookies & Tracking Technologies

We use cookies for functionality and analytics. You can accept or reject non-essential cookies. See our Privacy Policy.

8. Data Breach Notification

If a qualifying breach occurs, we notify affected parties and relevant authorities in line with UK GDPR requirements.

9. Exercising Your Rights

Contact us to make a rights request. We aim to respond within 30 days.

Data Protection Contact
privacy@kaizenweb.co.uk

10. Data Protection Officer

You can also raise concerns with the UK Information Commissioner's Office at ico.org.uk.

11. Changes to This Policy

We may update this policy as our practices or legal requirements evolve.