DATA PROTECTION POLICY 1 scaled - Data Protection Policy

Data Protection Policy

GENERAL STATEMENT

Top Workwear UK is committed to protecting the personal data of employees, customers, suppliers and other individuals. Personal data will be handled lawfully, fairly and transparently and in accordance with applicable data protection legislation.

LEGAL FRAMEWORK

This policy is implemented in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

SCOPE

This policy applies to all employees, contractors, temporary staff and any other individuals who process personal data on behalf of the business. It applies to both electronic and paper-based records.

DATA PROTECTION PRINCIPLES

Personal data will be:
• Processed lawfully, fairly and transparently
• Collected for specified, explicit and legitimate purposes
• Adequate, relevant and limited to what is necessary
• Accurate and kept up to date
• Retained only for as long as necessary
• Processed securely

LAWFUL BASIS FOR PROCESSING

Personal data will only be processed where a lawful basis exists, including contract, legal obligation, legitimate interests or consent.

DATA SUBJECT RIGHTS

Individuals have rights including access, rectification, erasure, restriction and objection. Requests will be handled within statutory timescales.

DATA SECURITY

Appropriate technical and organisational measures are in place to protect personal data, including access controls, secure systems and staff training.

DATA BREACHES

Any suspected data breach must be reported immediately to management. Breaches will be investigated and reported to the ICO where required.

DATA RETENTION

Personal data will be retained only for as long as necessary to meet business and legal requirements.

THIRD PARTIES

Where personal data is shared with third parties, appropriate safeguards will be in place.

RESPONSIBILITIES

Management is responsible for compliance with this policy. All staff must handle personal data responsibly.

MONITORING AND REVIEW

This policy will be reviewed annually.

Approved by:
Jack Howarth
Director

Review Date:
January 2026